Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6123c4-2bc5-4df9-ad13-e1d99b8706e4/1/1-oywLdb_fTClaD87m6tdnutytow.roa
File: 1-oywLdb_fTClaD87m6tdnutytow.roa (raw, json)
Hash identifier: 85G/s34H92lI3gWWd+jbSoQ0zU6D8YYTSS9g9aEjRLM=
Subject key identifier: FA:8C:B0:2D:D6:FF:7D:30:A5:68:3F:3B:9B:AB:5D:9E:EB:72:B6:8C
Certificate issuer: /CN=1008ba5429a709bc58ecdbae3f17e1bc9d3a4d5c
Certificate serial: 0194266A4B69991969D6D95EE05BACC704E3
Authority key identifier: 10:08:BA:54:29:A7:09:BC:58:EC:DB:AE:3F:17:E1:BC:9D:3A:4D:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EAi6VCmnCbxY7NuuPxfhvJ06TVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6123c4-2bc5-4df9-ad13-e1d99b8706e4/1/1-oywLdb_fTClaD87m6tdnutytow.roa
Signing time: Thu 02 Jan 2025 09:48:07 +0000
ROA not before: Thu 02 Jan 2025 09:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50083
IP address blocks: 185.77.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:4b:69:99:19:69:d6:d9:5e:e0:5b:ac:c7:04:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1008ba5429a709bc58ecdbae3f17e1bc9d3a4d5c
Validity
Not Before: Jan 2 09:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa8cb02dd6ff7d30a5683f3b9bab5d9eeb72b68c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f5:f9:c2:ca:05:2d:6a:57:98:9e:b1:fa:13:
9c:01:54:ce:59:21:61:5d:22:bf:7a:ab:71:f4:5c:
dd:0c:60:ed:cd:f1:2a:e4:22:ee:cc:36:b1:87:59:
14:1f:22:18:01:ce:db:46:0a:a7:f8:34:2d:4d:5f:
1e:a5:01:5b:62:5b:54:f1:f5:67:03:2d:87:1d:49:
7f:05:60:16:aa:32:b9:0f:e8:f5:10:bc:38:3b:b7:
a8:15:37:99:ce:43:02:12:6d:b1:6c:46:31:8a:cf:
d4:5e:04:68:92:19:87:f4:b4:b5:2f:bc:b3:04:30:
67:7e:d9:b7:d3:61:12:2e:03:67:e7:71:50:1f:f6:
37:13:4a:3c:a2:27:63:9a:10:fe:b7:34:70:83:6f:
24:ed:eb:35:18:81:e0:e9:73:d7:db:df:7c:0b:1b:
a6:17:ee:e4:ef:fa:ed:a0:22:5f:43:7e:da:a6:fb:
d2:40:a9:dd:de:17:7b:aa:b2:92:70:34:0b:53:8a:
f9:38:8c:de:fd:a2:b4:4b:b9:a3:07:1a:fa:61:d1:
a0:f7:cc:e6:78:51:04:41:d0:30:3e:fb:15:e3:08:
bf:5e:1c:a2:79:39:ee:23:4d:1d:e3:ae:7d:fd:ea:
42:2d:26:c6:ed:55:71:ca:1f:22:26:02:51:dc:3f:
3c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:8C:B0:2D:D6:FF:7D:30:A5:68:3F:3B:9B:AB:5D:9E:EB:72:B6:8C
X509v3 Authority Key Identifier:
keyid:10:08:BA:54:29:A7:09:BC:58:EC:DB:AE:3F:17:E1:BC:9D:3A:4D:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EAi6VCmnCbxY7NuuPxfhvJ06TVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6123c4-2bc5-4df9-ad13-e1d99b8706e4/1/1-oywLdb_fTClaD87m6tdnutytow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6123c4-2bc5-4df9-ad13-e1d99b8706e4/1/EAi6VCmnCbxY7NuuPxfhvJ06TVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.15.0/24
Signature Algorithm: sha256WithRSAEncryption
12:f8:9f:9d:89:a1:06:8d:83:d8:2f:11:36:28:42:82:39:b7:
3a:c7:a1:8f:b7:5c:45:76:db:7b:00:f6:dd:1b:d5:23:f6:e9:
8a:bd:9b:f2:61:f4:ee:4d:47:72:d6:d8:53:c8:a2:a8:64:c3:
41:f4:72:ed:ad:d1:13:c8:af:a7:a2:04:3e:c8:df:a6:84:e9:
95:42:94:f1:aa:11:3d:a4:77:92:6e:10:d7:2d:13:ee:73:27:
03:00:08:35:ea:54:93:91:77:5f:e8:d7:8e:5b:df:cf:2e:e0:
8c:0b:6e:8d:86:83:a9:0c:29:5b:7e:07:36:47:60:c3:a4:72:
bb:d5:14:6e:2f:6c:7b:56:b3:12:c0:7d:c1:5d:1a:0c:fc:99:
34:f8:f8:0d:d8:de:c5:32:aa:6e:ca:2d:5a:69:06:15:e3:95:
86:5a:4e:a6:79:88:8c:44:d2:e0:fe:f9:d8:7e:c6:b1:7b:78:
20:a5:2e:cb:0f:65:a8:70:3f:05:6e:94:78:11:8f:a4:b0:cc:
71:df:d4:ea:db:31:5c:1f:d1:1e:70:2b:c6:ee:c5:59:2d:53:
df:41:92:c8:05:b8:12:42:3a:48:51:97:42:ed:3b:3f:13:36:
5a:f8:d1:1e:a6:5b:68:83:1a:40:4f:12:df:dc:ad:d7:bb:6c:
99:d0:12:21
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQmaktpmRlp1tle4FusxwTjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwMDhiYTU0MjlhNzA5YmM1OGVjZGJhZTNmMTdlMWJjOWQz
YTRkNWMwHhcNMjUwMTAyMDk0ODA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYThjYjAyZGQ2ZmY3ZDMwYTU2ODNmM2I5YmFiNWQ5ZWViNzJiNjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fX5wsoFLWpXmJ6x+hOcAVTOWSFh
XSK/eqtx9FzdDGDtzfEq5CLuzDaxh1kUHyIYAc7bRgqn+DQtTV8epQFbYltU8fVn
Ay2HHUl/BWAWqjK5D+j1ELw4O7eoFTeZzkMCEm2xbEYxis/UXgRokhmH9LS1L7yz
BDBnftm302ESLgNn53FQH/Y3E0o8oidjmhD+tzRwg28k7es1GIHg6XPX2998Cxum
F+7k7/rtoCJfQ37apvvSQKnd3hd7qrKScDQLU4r5OIze/aK0S7mjBxr6YdGg98zm
eFEEQdAwPvsV4wi/XhyieTnuI00d4659/epCLSbG7VVxyh8iJgJR3D884wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPqMsC3W/30wpWg/O5urXZ7rcraMMB8GA1UdIwQY
MBaAFBAIulQppwm8WOzbrj8X4bydOk1cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUFpNlZDbW5DYnhZN051dVB4Zmh2SjA2VFZ3LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS82MTIzYzQtMmJjNS00ZGY5LWFkMTMt
ZTFkOTliODcwNmU0LzEvMS1veXdMZGJfZlRDbGFEODdtNnRkbnV0eXRvdy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMzEvNjEyM2M0LTJiYzUtNGRmOS1hZDEzLWUxZDk5Yjg3MDZl
NC8xL0VBaTZWQ21uQ2J4WTdOdXVQeGZodkowNlRWdy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALlNDzAN
BgkqhkiG9w0BAQsFAAOCAQEAEvifnYmhBo2D2C8RNihCgjm3Osehj7dcRXbbewD2
3RvVI/bpir2b8mH07k1HctbYU8iiqGTDQfRy7a3RE8ivp6IEPsjfpoTplUKU8aoR
PaR3km4Q1y0T7nMnAwAINepUk5F3X+jXjlvfzy7gjAtujYaDqQwpW34HNkdgw6Ry
u9UUbi9se1azEsB9wV0aDPyZNPj4DdjexTKqbsotWmkGFeOVhlpOpnmIjETS4P75
2H7GsXt4IKUuyw9lqHA/BW6UeBGPpLDMcd/U6tsxXB/RHnArxu7FWS1T30GSyAW4
EkI6SFGXQu07PxM2WvjRHqZbaIMaQE8S39yt17tsmdASIQ==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:34 2025 by rpki-client on console.sobornost.net