Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/cjJlYHZqE-gE_SXbmiXIqx2fNZk.roa
File: cjJlYHZqE-gE_SXbmiXIqx2fNZk.roa (raw, json)
Hash identifier: 9vivL0YwWhsXGDyDf4zb5XsV5Wh0saDdZDc2eObdPvk=
Subject key identifier: 72:32:65:60:76:6A:13:E8:04:FD:25:DB:9A:25:C8:AB:1D:9F:35:99
Certificate issuer: /CN=b9930359b5469112e6e2bfae8595b05485551d37
Certificate serial: 01942143F35569E3A3E0A9AAA8D2E1E1FA47
Authority key identifier: B9:93:03:59:B5:46:91:12:E6:E2:BF:AE:85:95:B0:54:85:55:1D:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/cjJlYHZqE-gE_SXbmiXIqx2fNZk.roa
Signing time: Wed 01 Jan 2025 09:48:08 +0000
ROA not before: Wed 01 Jan 2025 09:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212441
IP address blocks: 77.232.36.0/24 maxlen: 24
77.232.37.0/24 maxlen: 24
77.232.38.0/24 maxlen: 24
77.232.39.0/24 maxlen: 24
77.232.40.0/24 maxlen: 24
77.232.41.0/24 maxlen: 24
77.232.42.0/24 maxlen: 24
77.232.43.0/24 maxlen: 24
91.142.76.0/24 maxlen: 24
91.142.77.0/24 maxlen: 24
91.142.78.0/24 maxlen: 24
91.142.79.0/24 maxlen: 24
185.173.36.0/24 maxlen: 24
185.173.37.0/24 maxlen: 24
185.173.38.0/24 maxlen: 24
185.173.39.0/24 maxlen: 24
193.163.175.0/24 maxlen: 24
2a10:9200::/48 maxlen: 48
2a10:9200:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:f3:55:69:e3:a3:e0:a9:aa:a8:d2:e1:e1:fa:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9930359b5469112e6e2bfae8595b05485551d37
Validity
Not Before: Jan 1 09:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=72326560766a13e804fd25db9a25c8ab1d9f3599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4b:ef:ef:d3:66:7c:8a:b6:08:b3:6e:48:38:
f0:09:be:56:8b:fb:ae:fc:e1:15:91:58:18:d8:6c:
77:04:dc:b7:f9:da:a8:bf:ed:ba:63:bf:aa:41:02:
92:f4:b5:5c:66:e2:0a:37:4d:4d:91:db:bf:37:e1:
c9:2f:c2:65:08:bb:ad:a6:ee:30:46:95:58:78:31:
fd:9c:74:62:83:4f:18:ca:27:f9:9a:dd:32:3a:ba:
7d:1b:d9:9e:7e:04:bf:5f:28:e1:31:e6:93:85:d3:
de:18:26:0b:c3:55:19:bf:24:01:7b:8d:19:63:a0:
3a:80:f5:6a:a0:18:08:17:be:89:ec:a7:bc:ff:6c:
93:3b:f9:a2:41:34:62:e2:9d:81:a6:cb:a2:be:d0:
ab:7a:cd:7e:ee:9d:52:28:d1:78:4b:66:71:2c:2e:
37:36:56:ad:07:68:2e:89:e8:a7:43:65:05:02:58:
42:2d:26:b5:5d:0b:83:01:33:79:0e:4f:42:97:15:
e2:48:e4:ab:a4:21:40:3f:0a:54:9e:cb:b0:7e:1e:
9c:22:8f:b6:31:f7:1a:b2:b9:33:0f:01:62:4a:7e:
0c:7f:a7:df:4a:53:17:fe:66:4b:56:49:2e:61:ff:
af:15:c5:b0:aa:e3:09:da:a0:7a:bc:4b:a0:6d:22:
90:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:32:65:60:76:6A:13:E8:04:FD:25:DB:9A:25:C8:AB:1D:9F:35:99
X509v3 Authority Key Identifier:
keyid:B9:93:03:59:B5:46:91:12:E6:E2:BF:AE:85:95:B0:54:85:55:1D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/cjJlYHZqE-gE_SXbmiXIqx2fNZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.232.36.0-77.232.43.255
91.142.76.0/22
185.173.36.0/22
193.163.175.0/24
IPv6:
2a10:9200::/47
Signature Algorithm: sha256WithRSAEncryption
5e:7e:ac:46:cb:d9:ed:49:99:2d:54:57:43:58:46:5d:f1:f0:
15:6c:2f:53:35:e9:80:52:15:e0:ea:26:e1:13:ab:a7:b3:2f:
1c:c2:59:94:5a:fc:38:64:0d:ad:d7:79:f8:f3:7a:4b:15:59:
38:97:5f:27:dc:fd:43:81:54:cc:e1:bb:8e:f4:e5:54:d1:08:
40:55:06:98:8d:36:b1:67:7a:e8:e9:24:04:f1:4a:b6:ea:f6:
8a:4a:a4:e8:58:35:f6:14:f4:2a:3f:ea:0b:a8:93:80:45:50:
9c:b5:47:e0:ec:98:18:0b:5a:bb:2b:10:5a:6b:cb:87:7c:87:
4a:21:a5:82:4b:54:77:0e:9a:5a:67:dd:4c:64:f8:e7:7d:81:
5b:56:a8:e1:a1:8d:6f:c9:22:f9:ed:05:cb:fa:ca:c9:93:b8:
d2:d1:1f:34:06:d2:4f:b0:9c:96:77:1f:1a:97:5f:21:e5:da:
e3:43:d9:eb:23:df:fb:65:96:c6:e3:83:72:c7:cf:f8:f3:e6:
f0:c6:d7:fc:09:74:67:b3:31:0c:38:4b:2a:9b:95:12:68:97:
74:44:f5:01:df:7a:77:c9:dd:b5:62:ae:68:e2:25:61:45:db:
90:a5:f8:4e:ff:00:11:a2:d6:be:29:2f:eb:6e:a2:43:c7:be:
48:6a:2d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:25 2025 by rpki-client on console.sobornost.net