Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/fqWsrxwdiNSNF7BNYPFMak2LyXo.roa
File: fqWsrxwdiNSNF7BNYPFMak2LyXo.roa (raw, json)
Hash identifier: O3xTt2IfUJfBviuowTtv9AdqFBAm6VXw0UdXOgTJ1VI=
Subject key identifier: 7E:A5:AC:AF:1C:1D:88:D4:8D:17:B0:4D:60:F1:4C:6A:4D:8B:C9:7A
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 0193E4D5F701DDD6ADDB83CF222B4010634C
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/fqWsrxwdiNSNF7BNYPFMak2LyXo.roa
Signing time: Fri 20 Dec 2024 16:10:47 +0000
ROA not before: Fri 20 Dec 2024 16:10:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205207
IP address blocks: 77.237.64.0/19 maxlen: 19
77.237.64.0/20 maxlen: 20
77.237.68.0/24 maxlen: 24
77.237.80.0/20 maxlen: 20
77.237.87.0/24 maxlen: 24
185.14.160.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e4:d5:f7:01:dd:d6:ad:db:83:cf:22:2b:40:10:63:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Dec 20 16:10:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ea5acaf1c1d88d48d17b04d60f14c6a4d8bc97a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d3:5f:f2:2b:a8:bf:b3:cc:8e:eb:5d:1d:04:
2c:94:c0:4b:83:e6:7b:9b:70:2a:d2:16:05:6d:92:
90:8b:28:5a:0a:37:88:93:d5:25:8b:06:3a:a8:07:
39:c2:ef:24:b0:68:38:1e:66:04:5f:fc:2f:9c:a4:
22:2a:fe:ec:7a:07:80:85:f9:6a:22:fd:ff:28:16:
9f:89:b3:d2:db:de:33:d5:a7:d9:65:15:ac:0f:0b:
0b:04:52:58:6c:10:ad:b2:fa:d0:26:61:d7:bd:49:
19:b8:92:20:e6:52:d2:c3:43:cf:2f:28:ed:5b:bf:
2e:95:24:03:07:66:99:28:3e:e6:48:94:05:55:a6:
54:fa:1c:94:f7:fc:d1:5a:09:34:3a:6b:86:d1:f9:
1f:a7:ab:27:ae:82:10:9c:81:45:a7:c2:61:ac:fe:
47:a9:a8:0f:4e:3f:01:72:83:22:ad:c7:13:8a:16:
19:aa:5a:d7:30:04:7a:c5:dd:29:71:1d:de:80:d3:
a2:14:e3:a1:e3:89:f0:2c:4b:f7:e0:35:71:4d:77:
0c:6a:e8:86:17:9b:9e:f1:99:a3:75:8a:5f:e4:5a:
ea:7d:33:55:2b:33:fc:ba:b8:7d:d5:19:86:3a:c7:
e7:2a:dd:ee:82:46:2a:17:a3:b2:c3:da:0a:bd:41:
f6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A5:AC:AF:1C:1D:88:D4:8D:17:B0:4D:60:F1:4C:6A:4D:8B:C9:7A
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/fqWsrxwdiNSNF7BNYPFMak2LyXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.237.64.0/19
185.14.160.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:0f:7e:e6:d7:de:6c:20:1a:74:a9:61:18:67:71:49:f5:d5:
c6:0a:cd:a2:43:e5:0e:c2:91:42:52:f2:06:4c:25:74:83:f4:
ad:60:9d:6d:55:66:3f:76:0b:71:11:ef:89:f6:73:ff:79:13:
20:ae:9c:67:dc:78:d9:ce:18:b9:79:be:49:6f:05:91:e6:be:
91:aa:97:b7:d9:99:4f:7b:ff:d8:2c:4f:6b:67:1e:b3:1e:1f:
7a:c2:1a:4d:f2:dc:e1:8d:02:ec:11:cf:f5:88:60:58:64:2a:
38:ef:01:41:8d:90:c3:ac:3e:ce:e9:41:07:11:9c:05:ca:e3:
35:a7:b4:eb:8b:d2:35:ce:fc:17:28:32:db:10:45:67:01:8a:
3c:f0:36:bc:e4:c3:6d:50:60:bc:bd:31:5b:84:d3:51:ad:e5:
cb:85:e4:ad:53:fc:fd:66:57:1c:c9:a4:f6:0b:80:eb:fd:0b:
30:43:fc:7e:b5:f9:31:36:0c:1a:87:69:87:6f:1e:f2:af:42:
3b:83:37:65:73:11:97:e8:13:da:7a:74:b0:a0:09:08:9a:e2:
6b:69:e0:66:50:32:8f:03:2e:9f:ef:b9:7e:b8:90:d0:54:c0:
84:14:30:ba:fe:4d:91:c2:8b:33:02:e5:f2:7c:05:ef:dc:b8:
d6:31:4a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:54 2024 by rpki-client on console.sobornost.net