Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/df4945-f532-4a01-a7fa-53a998de63e3/1/IVTm7Sk0HOhJBNyed6XFY_Z2R94.roa
File: IVTm7Sk0HOhJBNyed6XFY_Z2R94.roa (raw, json)
Hash identifier: i1RGEeFc6A0tWd9gQ48945gkWc6E43q8yFMFeZXbGTI=
Subject key identifier: 21:54:E6:ED:29:34:1C:E8:49:04:DC:9E:77:A5:C5:63:F6:76:47:DE
Certificate issuer: /CN=85e1567b1681833c944a5f2640a9e03be8ef0bf4
Certificate serial: 0194266B500112ABA1D8F2AAF485410385BB
Authority key identifier: 85:E1:56:7B:16:81:83:3C:94:4A:5F:26:40:A9:E0:3B:E8:EF:0B:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/heFWexaBgzyUSl8mQKngO-jvC_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/df4945-f532-4a01-a7fa-53a998de63e3/1/IVTm7Sk0HOhJBNyed6XFY_Z2R94.roa
Signing time: Thu 02 Jan 2025 09:49:14 +0000
ROA not before: Thu 02 Jan 2025 09:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42334
IP address blocks: 77.235.128.0/24 maxlen: 24
77.235.129.0/24 maxlen: 24
77.235.130.0/24 maxlen: 24
77.235.131.0/24 maxlen: 24
77.235.132.0/24 maxlen: 24
77.235.133.0/24 maxlen: 24
77.235.134.0/24 maxlen: 24
77.235.135.0/24 maxlen: 24
77.235.136.0/24 maxlen: 24
77.235.137.0/24 maxlen: 24
77.235.138.0/24 maxlen: 24
77.235.139.0/24 maxlen: 24
77.235.140.0/24 maxlen: 24
77.235.141.0/24 maxlen: 24
77.235.143.0/24 maxlen: 24
77.235.144.0/24 maxlen: 24
77.235.145.0/24 maxlen: 24
77.235.146.0/24 maxlen: 24
77.235.147.0/24 maxlen: 24
77.235.148.0/24 maxlen: 24
77.235.149.0/24 maxlen: 24
77.235.150.0/24 maxlen: 24
77.235.151.0/24 maxlen: 24
77.235.152.0/24 maxlen: 24
77.235.154.0/24 maxlen: 24
77.235.157.0/24 maxlen: 24
77.235.158.0/24 maxlen: 24
77.235.159.0/24 maxlen: 24
185.131.36.0/24 maxlen: 24
185.131.37.0/24 maxlen: 24
185.131.38.0/24 maxlen: 24
185.131.39.0/24 maxlen: 24
2a02:4180::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:50:01:12:ab:a1:d8:f2:aa:f4:85:41:03:85:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85e1567b1681833c944a5f2640a9e03be8ef0bf4
Validity
Not Before: Jan 2 09:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2154e6ed29341ce84904dc9e77a5c563f67647de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a6:a2:05:eb:ee:96:80:e9:2f:c5:8a:53:fb:
42:91:32:f2:6c:5a:70:df:e1:5b:cb:32:42:31:dc:
36:54:70:84:f3:2a:51:95:61:6c:c5:b3:f2:1a:5c:
36:49:04:9e:9a:10:56:d6:a3:e0:8f:b1:4b:05:4a:
48:cb:b0:da:af:06:05:da:09:1d:9a:17:d8:ba:37:
dd:6b:3d:8e:b0:86:98:e4:b8:a5:cd:9a:c6:dd:1f:
25:97:e2:93:55:04:be:e1:ef:28:d6:87:91:71:c3:
59:f5:c9:9d:ed:d2:14:6e:0f:82:f6:9e:87:cb:de:
45:28:47:06:c0:6c:42:ef:d3:8c:58:d2:27:ce:bf:
b9:7f:5f:52:15:c1:50:78:f8:9c:c9:e2:e1:0d:66:
c7:e7:2b:b8:fd:59:5e:18:bf:bb:bb:1b:5e:1a:b3:
39:12:72:b1:22:8b:b2:68:fd:a3:30:9e:26:ba:f0:
5d:60:fe:08:6c:4c:76:bd:2b:b6:db:0e:e5:66:64:
f2:55:86:7c:1f:4b:a5:cc:9e:67:4f:d7:34:7f:ab:
ac:70:b2:f0:ff:b3:f7:ee:85:af:b4:48:0a:3a:1c:
0c:3c:31:b0:26:41:fb:3f:d9:30:0a:52:e8:93:fd:
e2:e8:62:97:68:78:b6:a9:94:15:41:8b:4d:df:bb:
19:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:54:E6:ED:29:34:1C:E8:49:04:DC:9E:77:A5:C5:63:F6:76:47:DE
X509v3 Authority Key Identifier:
keyid:85:E1:56:7B:16:81:83:3C:94:4A:5F:26:40:A9:E0:3B:E8:EF:0B:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/heFWexaBgzyUSl8mQKngO-jvC_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/df4945-f532-4a01-a7fa-53a998de63e3/1/IVTm7Sk0HOhJBNyed6XFY_Z2R94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/df4945-f532-4a01-a7fa-53a998de63e3/1/heFWexaBgzyUSl8mQKngO-jvC_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.235.128.0-77.235.141.255
77.235.143.0-77.235.152.255
77.235.154.0/24
77.235.157.0-77.235.159.255
185.131.36.0/22
IPv6:
2a02:4180::/32
Signature Algorithm: sha256WithRSAEncryption
73:82:a0:50:0e:9a:53:df:5f:cb:33:65:09:ef:90:65:77:f5:
3d:b0:78:a7:6a:89:7e:88:0c:4e:7b:44:3f:1c:2f:09:26:83:
09:e8:39:2a:7b:07:6e:ee:71:2b:ba:13:df:26:9e:c4:d3:30:
9a:4d:8b:fd:44:6f:e5:92:d5:61:a6:85:41:d2:c2:cd:79:4c:
0c:44:cd:29:76:76:e8:e0:01:76:4d:fd:11:83:d8:76:1f:06:
ad:7f:15:ca:aa:7e:5e:75:5f:c3:84:63:23:26:6e:ec:0f:ce:
88:b2:47:e3:12:6d:b7:d3:45:93:98:95:4f:5d:c5:82:4b:f4:
17:75:62:ba:ad:3b:cc:0c:52:ee:2d:66:34:9d:d2:e8:3c:64:
b1:c9:dd:07:71:e7:cc:01:f8:3b:6b:28:db:f0:95:b7:88:62:
e5:23:08:33:22:9d:74:50:44:1e:65:d1:ad:a8:6f:83:4b:e1:
bd:cd:1e:fe:85:80:88:1d:fa:ed:d7:b8:9b:bc:81:91:aa:c1:
21:66:a8:0c:e2:c2:90:c2:d7:43:f9:80:e6:08:91:37:fe:d8:
b4:a1:2e:fa:07:90:71:0b:bf:25:57:02:e2:9f:2c:f2:83:0e:
02:56:41:7a:92:13:2a:ba:7c:a8:ae:76:b5:a5:38:24:07:2b:
1e:39:be:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:31 2025 by rpki-client on console.sobornost.net