Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/gdU2cKMCd_BtDDJgSD2HY00mPGM.roa
File: gdU2cKMCd_BtDDJgSD2HY00mPGM.roa (raw, json)
Hash identifier: RJwgl5pMoPPfHnsTPxLoSvX0DBqj4aREjSsl8MZfpXk=
Subject key identifier: 81:D5:36:70:A3:02:77:F0:6D:0C:32:60:48:3D:87:63:4D:26:3C:63
Certificate issuer: /CN=8e045bfecd2bbe24d33f5309db47c8aa77a3b10c
Certificate serial: 019422203C293588B2C5D1EA402BB82E8186
Authority key identifier: 8E:04:5B:FE:CD:2B:BE:24:D3:3F:53:09:DB:47:C8:AA:77:A3:B1:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jgRb_s0rviTTP1MJ20fIqnejsQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/gdU2cKMCd_BtDDJgSD2HY00mPGM.roa
Signing time: Wed 01 Jan 2025 13:48:45 +0000
ROA not before: Wed 01 Jan 2025 13:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12447
IP address blocks: 77.75.24.0/21 maxlen: 24
185.132.96.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:3c:29:35:88:b2:c5:d1:ea:40:2b:b8:2e:81:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e045bfecd2bbe24d33f5309db47c8aa77a3b10c
Validity
Not Before: Jan 1 13:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81d53670a30277f06d0c3260483d87634d263c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:03:ce:8d:a8:20:a8:45:96:df:20:32:3f:78:
09:ad:da:30:07:e7:90:bf:41:7f:b5:a4:71:da:b0:
8d:b7:b4:08:5c:23:cb:39:1e:01:a0:ed:ac:62:a5:
6d:25:79:d7:72:f9:ec:de:a0:72:f1:ac:cc:45:07:
95:d6:92:a0:b6:76:60:ae:7a:50:5a:31:cb:45:b0:
1f:5e:a6:a8:9a:ad:6a:1f:ef:4f:f3:0c:54:d1:8f:
3d:7d:cd:8d:d2:37:f8:41:21:9c:78:2c:f8:de:79:
fa:6b:04:a9:81:63:56:31:98:4f:58:04:1f:eb:de:
21:6a:66:36:4d:5c:3e:4e:ee:04:48:89:9f:a3:df:
68:e1:45:44:1f:a1:f0:f8:27:51:be:70:32:64:27:
d1:be:a1:cc:6a:32:5c:c3:a4:ad:fe:d8:24:bf:22:
ca:ff:96:2f:94:ca:4f:5d:0c:98:ef:6f:1b:c6:80:
5c:b4:7d:33:3c:5e:05:70:dc:08:8e:b5:92:23:dd:
b0:32:68:b7:1d:ca:c7:b1:76:89:77:d4:9a:86:d1:
05:ec:e7:be:6a:80:d8:3c:ce:e5:e9:9e:5a:43:d4:
c5:b7:d6:12:bf:45:20:10:97:5e:e1:5f:87:16:9c:
9c:ea:f9:d6:ef:47:f0:5a:93:8f:71:3e:ad:55:c2:
ec:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D5:36:70:A3:02:77:F0:6D:0C:32:60:48:3D:87:63:4D:26:3C:63
X509v3 Authority Key Identifier:
keyid:8E:04:5B:FE:CD:2B:BE:24:D3:3F:53:09:DB:47:C8:AA:77:A3:B1:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgRb_s0rviTTP1MJ20fIqnejsQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/gdU2cKMCd_BtDDJgSD2HY00mPGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.24.0/21
185.132.96.0/22
Signature Algorithm: sha256WithRSAEncryption
84:85:d6:f0:c1:71:83:01:86:7e:11:44:3b:28:05:77:93:2f:
41:4a:56:59:96:f4:0d:3f:a2:02:63:2c:ff:07:88:2f:00:60:
b2:d5:fe:2c:b6:ed:01:31:d9:aa:4c:c4:9d:20:7f:49:e2:d3:
c1:7c:ae:bc:f3:3a:ab:57:3a:63:4b:8c:7b:56:bf:0b:59:d8:
81:86:a3:bd:2e:7c:d2:35:d2:9c:68:93:1e:81:1a:a5:09:00:
cc:49:9b:cc:51:dc:1b:bc:eb:8d:47:50:df:5a:ab:5c:d0:90:
ae:24:c5:55:fc:0f:47:04:a7:bb:6f:d5:ff:5f:19:23:16:24:
90:82:a5:53:c2:a8:30:78:4b:44:0b:71:35:bb:a1:7d:46:e7:
2d:34:85:64:9d:e9:15:65:b9:26:d3:c7:c8:2a:e4:e5:c8:1f:
c7:20:b3:43:64:e8:df:2a:e0:6e:02:fb:3b:6a:fa:0b:2d:5d:
77:ff:87:7d:93:5c:99:b7:b7:ce:c1:6a:30:25:c8:8b:8b:20:
e1:f9:ee:20:02:06:21:85:84:ad:aa:82:bf:02:2a:ca:66:7f:
00:76:bb:98:c2:15:a4:3a:51:a0:95:bb:38:a5:95:e8:a2:70:
40:c9:86:ed:d0:27:e5:c8:c2:60:ac:a1:ee:bd:2e:47:f4:ec:
f9:0a:cf:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:34 2025 by rpki-client on console.sobornost.net