Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/O70GT68vwWfJzxgZFj3a2l3YxVY.roa
File: O70GT68vwWfJzxgZFj3a2l3YxVY.roa (raw, json)
Hash identifier: gE7ZGe8Ye9Zu8XYK9rFlzXfayXdrvGu4UE4mkjvxYxQ=
Subject key identifier: 3B:BD:06:4F:AF:2F:C1:67:C9:CF:18:19:16:3D:DA:DA:5D:D8:C5:56
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 0195F580BDF31B3493D62C765F29E8BFC852
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/O70GT68vwWfJzxgZFj3a2l3YxVY.roa
Signing time: Wed 02 Apr 2025 07:56:49 +0000
ROA not before: Wed 02 Apr 2025 07:56:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207459
IP address blocks: 77.92.154.0/24 maxlen: 24
78.135.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f5:80:bd:f3:1b:34:93:d6:2c:76:5f:29:e8:bf:c8:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Apr 2 07:56:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3bbd064faf2fc167c9cf1819163ddada5dd8c556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:22:f5:63:c7:27:bd:1b:42:ee:e1:a5:67:e5:
46:bc:93:d4:48:be:17:60:f1:ef:f6:e1:45:0f:9b:
1d:ab:92:de:6b:69:96:0d:1c:c9:76:d8:82:fc:bf:
f0:af:b3:e0:df:dd:cc:d3:dc:1b:c9:f5:f4:e3:ed:
40:c3:ba:d5:94:0b:58:44:99:b1:9a:27:2c:50:37:
68:a7:95:56:f8:bc:a7:80:3c:c0:ac:c3:c1:3a:fd:
80:37:f6:49:8a:4e:aa:17:c7:f7:85:7f:39:82:9f:
c6:7e:69:c9:a3:01:73:f4:d2:09:d0:16:91:ea:39:
55:5b:e7:c7:38:7f:13:62:3a:c2:ad:63:8e:14:67:
34:42:63:7d:5e:66:b5:19:ff:c6:14:db:26:4d:82:
42:e3:26:4b:c4:a6:1a:6e:40:15:62:8c:df:26:48:
02:20:2a:20:36:52:1b:1e:14:e5:dd:4a:4d:e4:7d:
99:ce:8e:90:4f:24:bc:67:25:bb:6d:88:88:6e:41:
7e:43:1f:e7:ba:4f:a7:88:a8:3d:8d:28:8d:87:98:
61:c2:f3:b9:52:9a:a1:46:fb:05:4c:bd:86:c8:7c:
ae:ea:30:7d:57:6e:dd:a9:9e:13:4d:eb:d2:18:58:
3d:99:2c:49:47:31:4b:fd:4f:f8:8f:4d:ec:f5:7e:
4c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:BD:06:4F:AF:2F:C1:67:C9:CF:18:19:16:3D:DA:DA:5D:D8:C5:56
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/O70GT68vwWfJzxgZFj3a2l3YxVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.154.0/24
78.135.87.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:02:8f:e2:7e:9e:6d:81:62:49:b4:8c:5f:b5:77:ef:52:eb:
70:69:91:32:ed:74:dc:08:e3:62:b6:0d:9c:b7:f2:af:97:47:
d2:a2:a1:fc:5c:82:7c:93:2f:ac:95:09:d8:75:4d:a3:98:4f:
a0:cf:ea:45:87:0a:37:8b:c7:a6:a3:4a:a8:fe:f8:60:17:30:
19:85:ce:ca:ba:24:7a:58:6f:ad:37:75:db:73:a9:23:70:04:
f3:08:94:d8:03:08:26:d9:91:65:70:21:8b:56:c6:28:2f:5b:
d4:d3:1b:a3:8c:1d:5c:cd:0c:93:15:41:f0:95:ae:15:52:da:
3a:63:b0:fe:86:88:ea:4b:15:84:e9:19:00:07:48:9a:17:1a:
4c:d3:80:79:f5:fe:23:98:f0:23:fb:1b:df:56:7e:3e:0f:5e:
d4:17:d6:a8:dc:3c:50:78:0c:78:8e:7a:de:3f:83:4d:26:05:
48:1a:4d:95:9f:f4:4b:34:5f:db:fc:51:e8:f5:99:58:5c:fe:
c4:49:21:99:e6:6d:7f:e6:7b:68:8d:54:c9:17:37:ec:a8:24:
45:9d:ef:6a:52:e3:ed:16:af:3d:de:f8:b5:e6:87:02:ee:de:
27:97:70:78:fc:dd:66:76:43:f3:97:e0:6d:bb:3b:9d:7e:4e:
e8:05:38:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:06 2025 by rpki-client on console.sobornost.net