Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Elv8Gn_jP1V7IbCvyZQfYdHxCxk.roa
File: Elv8Gn_jP1V7IbCvyZQfYdHxCxk.roa (raw, json)
Hash identifier: THIuY0ujOG3YCPplHYM9E6ql5GO6UIxZJPvQi18EiY4=
Subject key identifier: 12:5B:FC:1A:7F:E3:3F:55:7B:21:B0:AF:C9:94:1F:61:D1:F1:0B:19
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01942746B2A19961E88EFECBFD984998F615
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Elv8Gn_jP1V7IbCvyZQfYdHxCxk.roa
Signing time: Thu 02 Jan 2025 13:48:52 +0000
ROA not before: Thu 02 Jan 2025 13:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210099
IP address blocks: 77.92.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:b2:a1:99:61:e8:8e:fe:cb:fd:98:49:98:f6:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 13:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=125bfc1a7fe33f557b21b0afc9941f61d1f10b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:cc:9c:d9:e4:c4:30:f3:7e:ea:83:dd:43:29:
4d:f9:7a:b4:6f:e0:1b:b5:02:4b:a6:9e:de:23:c7:
8b:56:46:3d:eb:62:2c:6c:47:04:9e:ff:28:70:18:
9e:e1:87:75:44:bb:51:66:be:48:b5:23:3c:f7:ad:
ea:44:3f:c5:96:b1:db:b9:85:00:3c:94:5e:85:2a:
33:66:c3:bd:2b:d7:84:cd:9b:7d:67:b2:fc:d5:87:
58:83:69:89:cd:87:d0:42:70:e3:04:b7:74:d9:f4:
e0:f3:a2:f2:62:b8:17:80:de:44:c4:62:25:59:c9:
8c:a9:74:12:9e:8b:ca:d2:4c:30:54:bf:18:76:d4:
ec:51:4d:b9:35:8f:ab:16:b1:4b:7a:0d:56:94:24:
9e:c0:ca:cc:37:0c:31:1d:59:f7:35:41:00:b0:b2:
87:45:6e:ab:90:f0:68:62:24:f0:20:b1:de:52:36:
61:87:e5:84:84:db:57:e3:5a:a3:7e:a7:f9:3f:61:
1a:93:84:9b:d3:02:9c:87:42:f5:43:45:14:6e:d3:
20:6a:42:71:58:03:27:e5:35:72:37:66:0f:80:88:
65:d1:ef:2f:b2:71:75:02:af:f8:7b:86:d3:ef:9a:
ef:78:87:6b:08:ad:48:00:ad:e2:d9:8f:4a:9d:e1:
84:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:5B:FC:1A:7F:E3:3F:55:7B:21:B0:AF:C9:94:1F:61:D1:F1:0B:19
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Elv8Gn_jP1V7IbCvyZQfYdHxCxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.153.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:e4:98:4d:07:9e:af:76:9e:e3:14:bd:3f:e5:8a:b5:09:1a:
f5:9a:5d:bd:d6:89:e4:50:77:9c:8d:e4:a0:02:27:d8:e9:f0:
82:23:03:bb:eb:19:b9:cc:0a:2f:a5:d9:10:c2:7e:c4:68:62:
17:83:e3:fc:00:30:dd:4e:ec:01:88:64:fb:45:0d:5c:b1:c2:
c9:b7:12:82:24:bf:e7:67:02:57:04:ab:72:35:10:71:5f:b9:
0e:f3:96:ca:8f:1b:1c:e7:78:2d:aa:9d:32:21:1e:79:2f:48:
ee:9f:2e:b2:60:70:bf:5f:3a:24:22:b2:ca:1f:0c:e7:46:cd:
0e:17:51:b5:2e:fa:b8:d0:37:24:1a:cd:7b:9a:ea:a8:98:86:
b9:a8:de:d3:22:e2:3a:a7:7e:67:54:64:98:35:fe:e2:9b:3a:
ce:06:52:48:9f:b9:e7:56:7e:85:8d:1b:ae:ee:a9:20:22:46:
54:dd:16:a0:e7:82:31:eb:11:72:41:35:f2:31:e0:e0:41:82:
dc:61:3e:e8:dc:b6:a1:ba:88:70:6b:22:fe:32:4b:7a:4d:d5:
c3:31:50:4f:1f:50:41:83:f6:6a:d5:a6:ea:ec:b5:fe:71:63:
9d:89:88:a0:ed:3d:e1:fe:b5:1f:ac:31:8d:84:6b:47:8f:9b:
1f:b5:57:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 16:02:37 2025 by rpki-client on console.sobornost.net