Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/V78L3J5oIjHVBChvXIOgu9Ohs78.roa
File: V78L3J5oIjHVBChvXIOgu9Ohs78.roa (raw, json)
Hash identifier: CdwTBRVREg2srUT+l5SA7LltUlSHpLsaVjkjqAH9C7o=
Subject key identifier: 57:BF:0B:DC:9E:68:22:31:D5:04:28:6F:5C:83:A0:BB:D3:A1:B3:BF
Certificate issuer: /CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Certificate serial: 019420D625FB0FD3459EA8FCBE23BFAE672C
Authority key identifier: A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/V78L3J5oIjHVBChvXIOgu9Ohs78.roa
Signing time: Wed 01 Jan 2025 07:48:12 +0000
ROA not before: Wed 01 Jan 2025 07:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41983
IP address blocks: 77.74.180.0/22 maxlen: 22
91.103.64.0/21 maxlen: 21
93.159.224.0/23 maxlen: 23
2a03:2480::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:25:fb:0f:d3:45:9e:a8:fc:be:23:bf:ae:67:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Validity
Not Before: Jan 1 07:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57bf0bdc9e682231d504286f5c83a0bbd3a1b3bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:20:54:e1:df:aa:1b:e5:34:e5:34:c1:9a:cd:
43:08:47:5b:d5:9e:b2:7a:9d:6f:e1:5d:1f:94:64:
c3:7c:8a:37:5a:7c:3c:f6:b4:7d:64:b5:23:e0:81:
f4:45:29:4a:7d:8f:a4:f5:3c:97:94:03:36:40:f1:
43:40:79:89:e2:2c:a8:9e:5b:53:ee:2e:fe:c0:de:
22:9a:07:65:b1:2b:50:24:43:d9:4a:56:52:62:c5:
da:c2:73:6d:4c:d3:f9:24:b9:6d:6b:46:e0:50:83:
fe:5c:f3:3d:5f:a9:38:3f:51:54:1b:dd:66:c6:5c:
0b:81:50:96:a9:a8:0a:06:37:7f:d9:9b:4e:50:06:
6d:13:11:0b:69:98:48:d4:52:5f:00:f0:b9:55:f2:
c0:45:c4:d5:1c:48:89:d1:39:ad:45:4b:85:cd:c0:
3d:22:b5:0f:35:5f:d9:f5:95:10:ff:31:10:77:65:
5a:59:e0:d2:32:e4:a2:6e:3b:ad:be:93:1a:86:8b:
73:8b:74:7f:81:e6:38:8b:c8:03:de:b4:72:31:cb:
35:28:b1:48:b6:38:05:fe:f4:60:64:5f:ab:d8:c4:
12:7a:19:6e:4f:80:af:d0:4e:27:0b:1b:cc:77:8b:
19:2d:c6:b1:e7:3d:6a:ec:52:cf:8c:ed:11:38:8d:
dd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:BF:0B:DC:9E:68:22:31:D5:04:28:6F:5C:83:A0:BB:D3:A1:B3:BF
X509v3 Authority Key Identifier:
keyid:A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/V78L3J5oIjHVBChvXIOgu9Ohs78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.180.0/22
91.103.64.0/21
93.159.224.0/23
IPv6:
2a03:2480::/33
Signature Algorithm: sha256WithRSAEncryption
98:d6:ec:63:17:f3:e6:e5:3d:ba:0c:1a:9f:9e:af:83:f4:1b:
fa:55:0c:e5:22:03:51:52:02:c5:cd:c3:b7:93:20:9a:ce:1a:
8d:23:f7:06:a6:52:7c:c6:7b:32:1e:83:48:fe:3d:87:31:4a:
52:e9:16:ec:c8:8a:ee:90:c3:9c:82:8d:a6:d5:98:60:8b:08:
bb:b1:35:4a:4e:dd:34:10:60:ed:bb:2d:40:de:9a:cc:88:79:
67:26:2e:8c:8d:df:48:04:6d:1f:58:8f:fc:4f:95:5e:10:5c:
2d:ca:ef:64:5a:9a:c7:a8:f4:ea:a3:67:af:40:c6:2f:ab:ea:
b0:d7:d4:47:38:23:2f:bf:c9:f4:45:1d:ab:a0:0a:23:52:4c:
08:83:59:74:ef:55:a8:eb:bd:bc:b3:1b:6a:12:3e:3a:77:8e:
66:4b:62:5b:d8:91:39:50:68:0d:d0:77:42:bc:ba:0c:d3:cf:
e4:fa:e4:d4:92:d9:f5:f8:d2:36:a3:e4:7b:c4:85:63:91:59:
b9:c9:26:ea:37:63:4e:41:90:10:fe:da:7c:f7:e9:40:6f:0d:
9a:93:fe:f4:3d:05:19:94:2f:46:42:43:75:3a:bf:0a:dc:07:
36:56:9d:20:f1:7a:54:72:ab:d4:bc:a2:01:36:62:9f:55:41:
da:bf:b1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:36 2025 by rpki-client on console.sobornost.net