Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/3hXrcGfYN6hSZqeZ02eW6e-eygg.roa
File: 3hXrcGfYN6hSZqeZ02eW6e-eygg.roa (raw, json)
Hash identifier: BPI2H7VPbc2nUtUr/Qd8yyYp4yB6yxnreWV6zKUE+U8=
Subject key identifier: DE:15:EB:70:67:D8:37:A8:52:66:A7:99:D3:67:96:E9:EF:9E:CA:08
Certificate issuer: /CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Certificate serial: 0193BF4D1E1A1360394344D20310421B9987
Authority key identifier: A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/3hXrcGfYN6hSZqeZ02eW6e-eygg.roa
Signing time: Fri 13 Dec 2024 09:15:22 +0000
ROA not before: Fri 13 Dec 2024 09:15:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41983
IP address blocks: 77.74.180.0/22 maxlen: 22
91.103.64.0/21 maxlen: 21
93.159.224.0/23 maxlen: 23
2a03:2480::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:bf:4d:1e:1a:13:60:39:43:44:d2:03:10:42:1b:99:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Validity
Not Before: Dec 13 09:15:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=de15eb7067d837a85266a799d36796e9ef9eca08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:65:82:e8:17:1e:d5:9d:ba:3a:d0:64:d6:f4:
b3:70:02:82:86:ce:55:07:e4:41:be:69:d1:02:4e:
eb:06:17:1c:3f:20:be:fd:33:6d:99:71:f7:5d:b1:
3d:4d:16:12:d2:26:f4:b1:6a:45:93:1e:3f:f1:85:
34:13:18:98:cc:72:79:dd:80:9d:03:57:09:c0:1c:
e6:ce:f4:e1:13:46:74:7f:b9:36:c1:fe:f7:1c:ea:
3b:fd:5e:8f:de:e8:fd:52:c8:01:9d:5a:01:08:37:
99:e0:56:6a:59:86:4c:c1:b3:1d:63:0a:87:5d:6e:
64:94:4a:bf:f2:45:11:96:c8:ca:99:09:70:d5:47:
a6:de:58:53:9e:30:21:e8:29:be:38:a6:b3:12:35:
08:a6:20:55:69:8b:26:f6:44:77:36:64:84:d4:19:
1f:48:fb:4f:14:80:ea:a1:3d:dd:1c:b7:5a:d9:3d:
38:45:17:08:8d:4d:67:2a:95:a8:04:46:2c:94:03:
88:a8:f8:ca:ae:2f:5c:a6:1b:20:b0:70:7a:2b:b4:
bb:4d:66:e8:62:05:a1:d3:72:58:aa:27:9a:a1:a4:
bb:e6:56:4a:b2:62:fc:81:bb:03:b1:e9:56:b7:66:
97:75:ea:9c:19:c7:27:d4:13:f6:82:4b:11:64:c3:
1d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:15:EB:70:67:D8:37:A8:52:66:A7:99:D3:67:96:E9:EF:9E:CA:08
X509v3 Authority Key Identifier:
keyid:A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/3hXrcGfYN6hSZqeZ02eW6e-eygg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.180.0/22
91.103.64.0/21
93.159.224.0/23
IPv6:
2a03:2480::/33
Signature Algorithm: sha256WithRSAEncryption
35:56:54:3a:9b:01:c4:8d:5d:4e:f1:50:23:b1:33:e9:5f:6f:
70:b4:97:8f:88:10:20:cb:6c:ef:78:c2:36:7d:6f:ce:39:76:
88:1d:ad:28:ba:aa:ee:07:2e:73:e7:7f:b9:12:45:29:d1:af:
22:d2:71:a5:a0:57:9b:e0:10:7f:70:69:d6:cc:24:df:77:77:
d0:d7:10:68:f6:66:e0:de:ea:62:f0:f6:b6:5d:5d:2d:a7:46:
b0:09:20:9f:31:88:4d:a0:10:3f:71:cf:2a:69:7d:41:af:aa:
a7:4b:b3:27:c7:3b:c9:8b:66:c0:81:65:ce:c3:c0:78:eb:be:
7b:ab:84:7d:54:36:e9:a1:2a:b9:5d:66:f3:73:b9:dc:be:be:
00:8b:e5:3e:9f:90:01:2a:e7:df:25:3f:dd:ba:70:b9:b8:d5:
4f:b7:22:b8:fa:f3:b8:89:e1:31:4e:45:84:d3:3e:76:d0:8a:
25:06:17:cb:79:ab:a2:c0:de:07:1b:0d:3d:a9:95:cd:f7:0e:
fd:89:bf:db:4b:31:a5:ae:27:a3:50:25:b6:02:de:87:3f:ef:
61:0c:ce:ba:7a:da:dd:39:9f:51:dc:96:41:b0:f5:b3:a3:94:
e3:11:30:76:6c:21:d2:f4:1a:cf:ad:20:1c:97:86:bf:b5:c9:
ad:32:fa:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:10 2024 by rpki-client on console.sobornost.net