Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/fvpQfQZ82KX19K4udzrDPsa54LU.roa
File: fvpQfQZ82KX19K4udzrDPsa54LU.roa (raw, json)
Hash identifier: SUjRNtCeuGoVM+qOSA6oWqMOrmO7VtvRkdTQApfBSxg=
Subject key identifier: 7E:FA:50:7D:06:7C:D8:A5:F5:F4:AE:2E:77:3A:C3:3E:C6:B9:E0:B5
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 0193E4D5F36476EE4EE0FA1DA4E55FF94A15
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/fvpQfQZ82KX19K4udzrDPsa54LU.roa
Signing time: Fri 20 Dec 2024 16:10:46 +0000
ROA not before: Fri 20 Dec 2024 16:10:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12660
IP address blocks: 77.237.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e4:d5:f3:64:76:ee:4e:e0:fa:1d:a4:e5:5f:f9:4a:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Dec 20 16:10:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7efa507d067cd8a5f5f4ae2e773ac33ec6b9e0b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:42:0a:c3:1f:d3:00:33:41:e4:53:16:30:93:
08:2b:bf:bb:70:4c:98:ca:3c:92:0d:73:5f:67:1f:
e3:bb:69:64:91:99:b1:58:a5:5d:d4:93:64:87:8b:
8d:ee:46:50:39:90:d1:f0:aa:23:7d:aa:c7:aa:a4:
e4:40:1a:8c:25:42:4a:ed:da:ae:b1:9e:f5:52:42:
7a:f1:8d:c1:28:5f:31:3f:84:d0:9a:00:cb:9c:ef:
67:7c:c9:ed:c6:ec:f4:59:2f:98:24:c0:ff:71:f7:
65:da:32:49:e7:fb:a6:1b:b5:f5:64:d9:a9:24:79:
2d:4d:a4:f5:be:1e:9d:02:43:d1:57:9e:c0:7f:fb:
f1:45:44:18:14:40:e7:e3:09:f4:5c:59:1c:bb:5a:
ab:15:e9:7e:32:ff:00:3e:e5:eb:b0:30:96:f2:ee:
25:f8:0e:67:e3:4a:c3:38:1f:e0:0b:60:c8:4a:ea:
e9:4c:7b:b3:91:b8:05:c9:bd:f7:7c:e3:e8:1f:ee:
7a:56:f3:09:84:b2:b8:45:97:eb:2f:63:f3:df:26:
b9:22:cc:3b:99:f7:e2:ba:d7:b2:51:51:3a:6d:53:
f1:2c:80:71:ac:83:a8:3f:25:72:22:e7:df:fc:d6:
29:d6:65:12:ad:03:f4:a6:f1:38:3d:7c:c6:03:36:
05:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:FA:50:7D:06:7C:D8:A5:F5:F4:AE:2E:77:3A:C3:3E:C6:B9:E0:B5
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/fvpQfQZ82KX19K4udzrDPsa54LU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.237.77.0/24
Signature Algorithm: sha256WithRSAEncryption
10:c3:86:6d:8b:e1:e1:ac:d2:f1:41:20:ca:98:86:c1:94:e7:
fa:1b:3d:e6:0e:33:4f:0e:a3:16:9b:fe:8b:cd:df:a0:83:1e:
6e:4f:06:cd:74:5f:d6:85:2a:f6:62:75:79:11:ed:00:b5:cf:
b2:66:0a:25:69:c8:b4:f9:50:11:33:1e:d9:96:13:56:1c:38:
b2:87:d0:92:28:ab:39:02:d4:3b:a7:5d:25:52:c1:74:cc:1d:
af:84:62:a3:23:df:74:7b:5d:11:cd:4c:a1:b0:05:90:e6:a8:
9e:6f:66:18:88:02:4b:90:1b:38:f8:94:53:0d:1c:c2:00:7f:
c1:ce:6b:09:8b:d0:dc:d9:3c:37:3a:a5:92:60:42:6d:2d:13:
9f:aa:bf:4f:89:1e:a5:2c:27:87:0f:4e:30:4d:ea:f6:16:9f:
65:b5:37:69:45:70:6e:d3:6a:d2:f3:3e:9f:15:02:41:05:ac:
cd:58:13:f3:e9:2e:0d:d9:2e:8f:f2:ec:84:ee:fc:f8:3b:f3:
b4:58:a6:52:89:ad:42:7f:e6:dc:66:b0:bd:96:f4:59:a5:50:
e6:c2:88:3f:9b:31:a0:0b:99:4c:b6:4b:4b:da:b3:0c:36:c7:
9a:42:9f:12:59:2e:59:cb:36:56:24:25:9c:75:58:4b:0a:eb:
53:8f:a8:39
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZPk1fNkdu5O4PodpOVf+UoVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxY2NhOWYxNWUxOTIxOTUzYTYyOGM4YWQyYWM0YmU5Nzdi
NmMzMDMwHhcNMjQxMjIwMTYxMDQ2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZWZhNTA3ZDA2N2NkOGE1ZjVmNGFlMmU3NzNhYzMzZWM2YjllMGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkIKwx/TADNB5FMWMJMIK7+7cEyY
yjySDXNfZx/ju2lkkZmxWKVd1JNkh4uN7kZQOZDR8KojfarHqqTkQBqMJUJK7dqu
sZ71UkJ68Y3BKF8xP4TQmgDLnO9nfMntxuz0WS+YJMD/cfdl2jJJ5/umG7X1ZNmp
JHktTaT1vh6dAkPRV57Af/vxRUQYFEDn4wn0XFkcu1qrFel+Mv8APuXrsDCW8u4l
+A5n40rDOB/gC2DISurpTHuzkbgFyb33fOPoH+56VvMJhLK4RZfrL2Pz3ya5Isw7
mffiuteyUVE6bVPxLIBxrIOoPyVyIuff/NYp1mUSrQP0pvE4PXzGAzYF4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH76UH0GfNil9fSuLnc6wz7GueC1MB8GA1UdIwQY
MBaAFIHMqfFeGSGVOmKMitKsS+l3tsMDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2N5cDhWNFpJWlU2WW95SzBxeEw2WGUyd3dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xZWEyYjAtNmI5YS00NGQ3LWEyZTUt
MjIwNmNjMmU2OTFjLzEvZnZwUWZRWjgyS1gxOUs0dWR6ckRQc2E1NExVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8xZWEyYjAtNmI5YS00NGQ3LWEyZTUtMjIwNmNjMmU2OTFj
LzEvZ2N5cDhWNFpJWlU2WW95SzBxeEw2WGUyd3dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATe1NMA0G
CSqGSIb3DQEBCwUAA4IBAQAQw4Zti+HhrNLxQSDKmIbBlOf6Gz3mDjNPDqMWm/6L
zd+ggx5uTwbNdF/WhSr2YnV5Ee0Atc+yZgolaci0+VARMx7ZlhNWHDiyh9CSKKs5
AtQ7p10lUsF0zB2vhGKjI990e10RzUyhsAWQ5qieb2YYiAJLkBs4+JRTDRzCAH/B
zmsJi9Dc2Tw3OqWSYEJtLROfqr9PiR6lLCeHD04wTer2Fp9ltTdpRXBu02rS8z6f
FQJBBazNWBPz6S4N2S6P8uyE7vz4O/O0WKZSia1Cf+bcZrC9lvRZpVDmwog/mzGg
C5lMtktL2rMMNseaQp8SWS5ZyzZWJCWcdVhLCutTj6g5
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:54 2024 by rpki-client on console.sobornost.net