Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/DXjpRwrIr-AIU-hjz60qwKsBalA.roa
File: DXjpRwrIr-AIU-hjz60qwKsBalA.roa (raw, json)
Hash identifier: NfCytqVNN1dq1MNjUSUhA2/UwSVyFAKlp8j11E9ydcQ=
Subject key identifier: 0D:78:E9:47:0A:C8:AF:E0:08:53:E8:63:CF:AD:2A:C0:AB:01:6A:50
Certificate issuer: /CN=cc777a08a4564548b518ec3864b341e1fa5225ea
Certificate serial: 01956675EF02B6DB590A325A9D02FB75967E
Authority key identifier: CC:77:7A:08:A4:56:45:48:B5:18:EC:38:64:B3:41:E1:FA:52:25:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/DXjpRwrIr-AIU-hjz60qwKsBalA.roa
Signing time: Wed 05 Mar 2025 13:19:19 +0000
ROA not before: Wed 05 Mar 2025 13:19:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202779
IP address blocks: 91.201.220.0/22 maxlen: 24
91.201.220.0/24 maxlen: 24
91.201.221.0/24 maxlen: 24
91.201.222.0/24 maxlen: 24
185.154.156.0/22 maxlen: 24
185.154.156.0/24 maxlen: 24
185.154.157.0/24 maxlen: 24
213.173.96.0/19 maxlen: 24
213.173.96.0/23 maxlen: 23
213.173.99.0/24 maxlen: 24
213.244.248.0/21 maxlen: 24
213.244.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:66:75:ef:02:b6:db:59:0a:32:5a:9d:02:fb:75:96:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc777a08a4564548b518ec3864b341e1fa5225ea
Validity
Not Before: Mar 5 13:19:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d78e9470ac8afe00853e863cfad2ac0ab016a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:55:38:4a:28:2f:5e:7d:52:0d:f9:16:d8:c3:
6c:42:bb:2c:ce:81:66:0d:b3:30:74:87:c2:64:cc:
37:09:03:2d:ae:34:6e:2f:d9:db:d9:90:4c:e7:eb:
4c:e2:a5:9f:b6:49:60:bc:88:88:a5:45:11:73:dd:
96:81:23:7e:b1:49:99:4a:f0:81:46:f6:ce:9d:ba:
48:72:a5:97:12:fb:e4:d8:42:1f:c9:76:67:bc:6b:
31:f0:1f:d0:9c:98:f6:84:f3:13:ef:ab:1e:42:23:
5f:96:a5:7b:30:aa:8b:25:bd:90:94:6a:24:96:da:
37:f4:b4:0b:10:0f:8b:02:8b:f2:42:f0:d4:e8:9d:
ed:fc:52:07:0a:a0:8c:04:e1:c4:87:bc:48:74:4f:
f6:94:73:a2:29:a0:00:c3:8b:b2:31:65:a6:8e:40:
43:bb:0d:1f:04:b7:93:73:f0:d4:5c:e3:c9:bb:e5:
3d:d8:ef:c2:43:c1:09:e5:12:48:cc:9c:cb:4f:f5:
db:c6:5c:fe:c7:73:e0:ad:d5:21:5d:a2:41:c8:91:
09:8c:ee:ef:37:bd:83:cb:aa:45:d3:2a:e4:80:95:
48:60:47:50:11:95:d3:7f:4f:fa:73:9e:70:d8:64:
c8:4f:4a:20:d1:9a:3e:93:0b:a9:d5:24:67:b7:28:
b9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:78:E9:47:0A:C8:AF:E0:08:53:E8:63:CF:AD:2A:C0:AB:01:6A:50
X509v3 Authority Key Identifier:
keyid:CC:77:7A:08:A4:56:45:48:B5:18:EC:38:64:B3:41:E1:FA:52:25:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/DXjpRwrIr-AIU-hjz60qwKsBalA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.220.0/22
185.154.156.0/22
213.173.96.0/19
213.244.248.0/21
Signature Algorithm: sha256WithRSAEncryption
31:43:dd:bb:ab:a3:6f:40:ac:75:68:c2:b7:0d:b2:50:ba:0b:
ee:26:68:04:af:07:78:5f:dc:9c:04:75:6d:a6:02:31:6f:96:
20:12:db:a3:b2:3a:15:5b:b9:27:ee:54:de:a8:6a:25:61:ef:
fb:a7:86:fc:5e:22:14:78:e2:7b:2c:3a:c3:b1:93:cd:d1:e1:
9f:aa:6b:51:8c:66:40:2f:3f:09:85:f5:fa:7e:a4:23:3e:3a:
59:96:e8:0f:b9:35:70:92:24:85:4a:ac:58:b4:a3:6c:c8:51:
23:41:89:99:21:07:66:bb:f9:02:a2:5f:42:fa:b3:3a:b1:73:
38:4f:58:b9:e7:8f:73:9d:d7:cf:4b:0d:15:8e:34:8d:54:85:
f3:50:b9:8f:3d:fa:8c:08:62:f4:35:41:cb:ce:c8:cb:16:ac:
a8:46:8e:2b:3f:d2:e7:80:5b:f1:5b:9d:c1:80:8c:1d:a3:ef:
71:51:3d:74:05:75:96:aa:b7:5a:f3:f0:f9:c2:a5:2e:7c:77:
84:48:8c:18:b3:25:d3:69:5f:c2:78:a3:07:4c:4f:6d:ac:0d:
2f:67:24:8c:e5:9d:ba:ab:f4:5e:38:04:28:d5:10:d6:2e:64:
79:e3:29:a0:29:f4:65:22:b3:5f:63:f2:06:37:65:11:b2:0e:
e3:ad:28:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:03 2025 by rpki-client on console.sobornost.net