Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/7A6Pl3U5uu7pNsrAyeGlxHIf1OU.roa
File: 7A6Pl3U5uu7pNsrAyeGlxHIf1OU.roa (raw, json)
Hash identifier: dnscxtqTmkxtlMB3gelGkG+4KCL2QrOo2QVlxJroGE4=
Subject key identifier: EC:0E:8F:97:75:39:BA:EE:E9:36:CA:C0:C9:E1:A5:C4:72:1F:D4:E5
Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial: 0194244593B6A029D4F3B501103F7789B848
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/7A6Pl3U5uu7pNsrAyeGlxHIf1OU.roa
Signing time: Wed 01 Jan 2025 23:48:47 +0000
ROA not before: Wed 01 Jan 2025 23:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211122
IP address blocks: 77.75.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:93:b6:a0:29:d4:f3:b5:01:10:3f:77:89:b8:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Validity
Not Before: Jan 1 23:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec0e8f977539baeee936cac0c9e1a5c4721fd4e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:21:d4:9d:36:49:aa:a5:25:6c:3c:43:16:0b:
21:9c:63:31:97:c6:92:ed:97:86:dd:30:ff:e7:1e:
ed:aa:28:d3:da:89:10:ff:9d:76:12:56:3e:ee:27:
a8:85:b5:15:6a:10:ce:85:11:bd:b5:65:86:2a:ec:
e8:0d:a4:bb:f8:d9:3f:2d:41:12:ca:2a:38:0c:5e:
e8:77:90:25:8a:2b:55:9d:15:a6:dd:da:69:7c:00:
7d:5f:0a:9f:95:67:67:57:8f:76:2b:b6:cb:c1:1d:
77:7e:06:05:82:84:16:f7:6e:38:39:80:6e:79:84:
06:48:c6:87:ae:1d:f2:c8:6b:a1:83:0a:93:56:87:
65:8e:4a:bb:c6:5b:58:bd:7d:11:9d:26:77:88:66:
f3:f5:35:72:3c:9c:7c:be:62:39:13:6f:b1:90:1d:
c6:10:e4:e8:f4:58:b9:55:b9:75:02:35:f7:7b:14:
f6:11:ed:b0:8a:f2:54:fb:95:fc:25:32:05:5f:76:
33:6e:e1:fb:60:40:8b:c0:08:ff:c3:f0:12:2b:90:
80:4f:df:40:58:12:3c:7b:0d:07:fc:a8:37:7e:06:
1f:b4:4f:96:73:29:ac:b8:19:8b:8c:c5:ea:94:ed:
55:55:b5:a0:d1:9c:cf:b2:9a:d7:f2:ea:48:b0:bf:
e3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0E:8F:97:75:39:BA:EE:E9:36:CA:C0:C9:E1:A5:C4:72:1F:D4:E5
X509v3 Authority Key Identifier:
keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/7A6Pl3U5uu7pNsrAyeGlxHIf1OU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.227.0/24
Signature Algorithm: sha256WithRSAEncryption
29:17:60:ec:d4:9f:67:c2:ab:a4:18:f7:66:04:a9:60:58:85:
cd:0e:0b:7c:e5:7b:af:69:0a:f5:e3:83:1e:b9:9b:53:0c:55:
ba:e1:47:29:94:a7:4a:02:c0:85:12:3f:a3:5e:e1:5f:1a:6d:
11:8b:10:be:ed:cb:24:d0:44:14:a9:f4:9f:c7:82:36:f5:f6:
8f:e0:56:a3:86:d0:0b:f1:78:b2:31:8b:77:50:d9:d0:f3:80:
3b:d1:d6:0e:d7:c7:8a:c6:79:ff:4c:8b:9c:a3:be:66:ee:42:
d2:10:63:f7:f1:1e:3e:b3:33:bb:17:d3:2c:9e:ce:ac:ce:4c:
ef:90:a6:07:6d:66:d9:18:d4:d7:1b:65:f6:5d:a0:2f:8f:92:
df:83:3f:33:75:f6:81:59:c9:7d:64:35:a0:b0:e2:6f:1b:60:
73:54:68:06:c7:ee:02:cc:be:29:19:59:fd:24:84:10:1c:fd:
9f:eb:f8:b4:b4:2d:63:62:b8:42:78:0e:82:22:73:f4:e5:b3:
57:32:5d:3e:db:1c:0e:ca:70:54:e6:59:f9:28:02:8a:6b:c9:
42:bd:94:4c:55:4d:67:3f:09:bb:d8:83:6b:34:e2:cc:11:89:
4e:c7:f8:2b:ea:84:a7:54:ab:e4:fc:9d:58:29:e7:d9:c7:09:
5c:5b:8d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:17 2025 by rpki-client on console.sobornost.net