Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/XeTdM9cnm-nj4Gui4gyEqLrQLaw.roa
File: XeTdM9cnm-nj4Gui4gyEqLrQLaw.roa (raw, json)
Hash identifier: byMWJNOsSPMVajbPUM5liOZkm9+BQbQeZEZJwK73A2Y=
Subject key identifier: 5D:E4:DD:33:D7:27:9B:E9:E3:E0:6B:A2:E2:0C:84:A8:BA:D0:2D:AC
Certificate issuer: /CN=dca46b1fcd92b47f4f55fad038c9581340a9d370
Certificate serial: 01948DE9A2EA83120204EB3EA03F48DB02DC
Authority key identifier: DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/XeTdM9cnm-nj4Gui4gyEqLrQLaw.roa
Signing time: Wed 22 Jan 2025 12:08:06 +0000
ROA not before: Wed 22 Jan 2025 12:08:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43019
IP address blocks: 77.75.88.0/24 maxlen: 24
77.75.89.0/24 maxlen: 24
77.75.90.0/24 maxlen: 24
77.75.91.0/24 maxlen: 24
77.75.92.0/24 maxlen: 24
77.75.92.32/27 maxlen: 27
77.75.93.0/24 maxlen: 24
77.75.94.0/24 maxlen: 24
77.75.95.0/24 maxlen: 24
77.75.95.128/27 maxlen: 27
185.206.200.0/24 maxlen: 24
185.206.201.0/24 maxlen: 24
185.206.201.144/28 maxlen: 28
185.206.201.212/30 maxlen: 30
185.206.202.0/24 maxlen: 24
185.206.203.0/24 maxlen: 24
2a0b:3f80::/29 maxlen: 29
2a0b:3f80::/32 maxlen: 32
2a0b:3f80:0:201::/64 maxlen: 64
2a0b:3f80:0:202::/64 maxlen: 64
2a0b:3f80:0:203::/64 maxlen: 64
2a0b:3f80:0:204::/64 maxlen: 64
2a0b:3f80:2::/126 maxlen: 126
2a0b:3f80:3::/126 maxlen: 126
2a0b:3f80:15::/48 maxlen: 48
2a0b:3f81::/32 maxlen: 32
2a0b:3f81::/48 maxlen: 48
2a0b:3f82::/32 maxlen: 32
2a0b:3f83::/32 maxlen: 32
2a0b:3f84::/32 maxlen: 32
2a0b:3f85::/32 maxlen: 32
2a0b:3f85:0:202::/64 maxlen: 64
2a0b:3f85:3::/126 maxlen: 126
2a0b:3f86::/32 maxlen: 32
2a0b:3f87::/32 maxlen: 32
2a0b:3f87:fc18::/48 maxlen: 48
2a0b:3f87:fc19::/48 maxlen: 48
2a0b:3f87:fc1a::/48 maxlen: 48
2a0b:3f87:fc1b::/48 maxlen: 48
2a0b:3f87:fc20::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8d:e9:a2:ea:83:12:02:04:eb:3e:a0:3f:48:db:02:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca46b1fcd92b47f4f55fad038c9581340a9d370
Validity
Not Before: Jan 22 12:08:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5de4dd33d7279be9e3e06ba2e20c84a8bad02dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a4:94:ff:99:6c:d0:a6:08:20:ff:d1:1b:03:
71:5a:5a:4f:e8:d7:68:11:27:c5:e4:9e:d9:6a:ce:
22:53:2b:6d:60:a8:84:62:34:09:36:da:5a:c5:a1:
51:bc:65:7e:c7:e0:45:71:00:35:4e:4e:81:2d:88:
2d:2b:3b:5a:2f:cb:61:77:71:bf:53:de:f8:32:5a:
b0:84:80:1a:2b:7b:a8:0c:a1:6e:27:95:c1:d5:18:
99:61:62:74:65:1c:93:8b:7f:01:ef:91:a1:98:67:
de:c6:57:c0:fc:47:8b:9a:cf:7c:05:05:4b:1e:95:
00:f5:46:1e:9f:42:77:a5:8f:bb:0a:8b:a5:1b:0e:
98:bb:fe:ec:29:f5:5b:b4:2a:c8:72:d6:3c:ff:a0:
5c:5a:0c:34:a1:ec:aa:18:1b:df:0f:09:2e:bf:54:
bf:5d:79:83:a7:eb:ee:fd:34:0a:26:b8:63:a7:31:
f5:0b:3a:b8:6c:8b:2b:68:92:2e:fa:a4:32:2d:8b:
3a:2e:ab:8a:be:32:95:37:4f:c4:70:0e:69:26:7f:
d8:cc:a6:3c:88:12:a9:da:58:27:a1:f1:2a:3c:b6:
25:9e:87:e2:15:7f:7f:88:7b:0d:cb:50:22:b6:9e:
a8:64:53:ce:4b:cf:a4:e8:7f:f7:93:3b:f4:ba:ed:
ee:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E4:DD:33:D7:27:9B:E9:E3:E0:6B:A2:E2:0C:84:A8:BA:D0:2D:AC
X509v3 Authority Key Identifier:
keyid:DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/XeTdM9cnm-nj4Gui4gyEqLrQLaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.88.0/21
185.206.200.0/22
IPv6:
2a0b:3f80::/29
Signature Algorithm: sha256WithRSAEncryption
67:e9:c5:8b:dd:20:84:97:db:46:2a:01:a6:53:71:aa:61:cc:
5b:70:09:3f:91:df:e8:50:48:31:0b:77:39:5b:70:d4:c7:2c:
45:c4:ad:51:92:28:a8:f5:bc:56:2b:94:29:5e:17:46:bf:e6:
0d:83:a6:b2:87:f1:0c:01:eb:ec:d6:f1:02:d9:a6:4f:f4:19:
f1:6e:5e:66:7f:d6:ea:16:d5:36:23:b9:4b:6d:08:8f:ed:9f:
6d:89:17:a3:af:dc:e0:f8:2b:ae:35:7d:03:e2:d5:dd:ba:c4:
0b:4a:eb:8a:66:e1:d9:81:ae:ee:00:56:b0:58:d7:d4:a3:21:
bd:1c:7e:85:f0:45:81:e5:76:a4:6c:d3:b1:99:4f:58:4d:02:
03:9b:70:e8:ff:94:bd:6f:c1:bd:df:ad:d8:c1:b4:9b:21:0f:
f8:59:a7:c6:4e:1a:54:23:fb:73:d7:b4:f5:92:1f:e0:1b:e8:
2d:45:c4:00:92:a6:14:ce:35:59:6b:62:76:bd:d4:ef:be:be:
17:ac:d7:44:b0:88:ef:ed:76:56:09:54:8a:a1:e9:fb:48:37:
6f:2d:76:e0:aa:48:09:6f:4f:a0:c3:fc:c8:bb:ca:77:5f:f4:
a7:08:72:36:dc:6a:7c:fb:1e:8e:7c:f6:7e:d3:d4:d6:14:ff:
80:c4:b3:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:04 2025 by rpki-client on console.sobornost.net