Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/J4VjN9NGRUAj6-HvTcD4a4pRvuI.roa
File: J4VjN9NGRUAj6-HvTcD4a4pRvuI.roa (raw, json)
Hash identifier: BPJJa1BdBThf5/6mJP59LpQAGjz4XfDNQ5fBL115gk0=
Subject key identifier: 27:85:63:37:D3:46:45:40:23:EB:E1:EF:4D:C0:F8:6B:8A:51:BE:E2
Certificate issuer: /CN=76ef0a0ee8fa154d7ada438af1212269ce0acc41
Certificate serial: 019421B1F94285D16E348D961AE18DE1C69C
Authority key identifier: 76:EF:0A:0E:E8:FA:15:4D:7A:DA:43:8A:F1:21:22:69:CE:0A:CC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/J4VjN9NGRUAj6-HvTcD4a4pRvuI.roa
Signing time: Wed 01 Jan 2025 11:48:19 +0000
ROA not before: Wed 01 Jan 2025 11:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9123
IP address blocks: 77.95.201.0/24 maxlen: 24
77.95.203.0/24 maxlen: 24
109.71.240.0/24 maxlen: 24
109.71.241.0/24 maxlen: 24
109.71.243.0/24 maxlen: 24
109.71.244.0/24 maxlen: 24
109.71.245.0/24 maxlen: 24
109.71.246.0/24 maxlen: 24
109.71.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:f9:42:85:d1:6e:34:8d:96:1a:e1:8d:e1:c6:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76ef0a0ee8fa154d7ada438af1212269ce0acc41
Validity
Not Before: Jan 1 11:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27856337d346454023ebe1ef4dc0f86b8a51bee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:18:19:a3:d7:58:d8:9b:33:b2:8b:57:0f:90:
5b:51:a1:46:65:86:dd:74:59:d4:6e:8f:93:06:df:
38:77:20:c4:80:80:9b:cb:3a:8d:56:f9:de:7e:2a:
c9:cb:d8:d2:06:75:51:23:3f:78:82:80:4b:9d:4e:
b9:01:fd:98:62:13:a0:a0:c8:19:10:2c:79:c5:dd:
08:21:68:41:b9:f7:41:8a:b5:a9:30:91:c4:65:14:
68:2f:25:1c:42:90:72:f4:7b:8b:f6:59:1f:00:14:
ec:b7:15:60:ae:09:e1:5c:63:ba:05:4f:0c:dc:27:
27:48:0d:f4:c5:ab:e0:8f:5a:2e:3f:be:92:ec:4c:
1d:87:fa:bc:8a:5d:34:38:38:cf:b2:8e:5d:67:19:
35:8d:0b:c0:1a:df:d0:2c:79:f4:b4:b6:96:5a:a4:
c8:1e:21:a1:49:3c:3e:34:4f:51:62:0c:15:2e:b6:
9c:dd:23:fb:45:96:b6:b8:06:d7:84:c6:14:df:e8:
4a:76:06:a5:70:06:4c:d2:32:c5:44:5d:91:01:45:
c4:a5:ac:bd:ac:77:c0:e8:f1:88:3e:1d:17:36:26:
92:3a:0a:68:1e:9b:d7:41:5d:fa:9c:7d:9c:dc:72:
1f:6c:3f:8b:d0:33:61:85:b2:3d:26:c4:ab:71:4c:
79:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:85:63:37:D3:46:45:40:23:EB:E1:EF:4D:C0:F8:6B:8A:51:BE:E2
X509v3 Authority Key Identifier:
keyid:76:EF:0A:0E:E8:FA:15:4D:7A:DA:43:8A:F1:21:22:69:CE:0A:CC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/J4VjN9NGRUAj6-HvTcD4a4pRvuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.95.201.0/24
77.95.203.0/24
109.71.240.0/23
109.71.243.0-109.71.247.255
Signature Algorithm: sha256WithRSAEncryption
58:47:6f:f6:a9:38:64:9c:b6:b3:23:74:ed:c3:ea:e0:1d:5d:
b5:c6:86:ce:83:a8:7d:5b:30:46:db:6e:9b:16:17:b0:a9:47:
10:a9:e7:37:f8:60:42:77:5d:61:ce:71:4f:5a:42:15:75:f4:
ff:a6:d6:be:34:22:f7:c7:29:e1:aa:b8:6b:0c:c7:34:a8:07:
7c:6b:fb:bd:48:e6:59:6c:76:94:00:46:05:15:f8:9b:7c:dc:
fa:50:0a:33:12:a6:88:e1:d3:e9:52:1f:bf:b2:6e:94:2f:29:
55:d6:38:fe:da:e2:18:16:59:e7:f6:42:5f:f1:94:86:0c:8d:
7a:8e:9f:37:2b:89:41:11:79:7a:1f:b3:69:bc:b8:5f:c8:5c:
65:4c:d5:cd:88:64:60:75:1b:d3:4f:5b:8b:9c:55:18:e2:a0:
13:6f:4f:32:c2:37:45:d5:c2:d8:94:8f:0e:f1:8f:c8:79:a9:
04:e3:92:33:d9:21:28:5f:00:43:69:c0:e3:e1:20:bb:42:68:
2b:7b:c3:55:1a:a8:68:c7:0b:da:15:31:ed:52:25:71:24:62:
a7:fc:2f:63:da:02:a8:f8:89:28:01:26:5f:64:58:ea:26:9e:
2d:ef:24:66:23:fc:90:b8:c9:c8:e2:82:83:36:c5:91:31:1c:
4a:33:ae:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:05 2025 by rpki-client on console.sobornost.net