Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/CJq1hGSWey5b9jyjhyXQZ1w2DE4.roa
File: CJq1hGSWey5b9jyjhyXQZ1w2DE4.roa (raw, json)
Hash identifier: ISUiaqAdn2f7LpPBJI2h99MJFKFIxbj7e5eKD81YJBY=
Subject key identifier: 08:9A:B5:84:64:96:7B:2E:5B:F6:3C:A3:87:25:D0:67:5C:36:0C:4E
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01950062B288320C545D2DE4FC5C14E5A7F2
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/CJq1hGSWey5b9jyjhyXQZ1w2DE4.roa
Signing time: Thu 13 Feb 2025 17:37:03 +0000
ROA not before: Thu 13 Feb 2025 17:37:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44948
IP address blocks: 77.81.50.0/23 maxlen: 23
194.50.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:00:62:b2:88:32:0c:54:5d:2d:e4:fc:5c:14:e5:a7:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 13 17:37:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=089ab58464967b2e5bf63ca38725d0675c360c4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:45:eb:dd:22:a1:b6:c9:a7:d4:30:6e:7b:e1:
7d:33:d5:6a:3e:fd:11:39:21:ba:5c:c1:8e:f1:4d:
a8:00:b9:a0:b4:0a:60:8f:bb:9b:b2:fc:fe:e2:a4:
f5:e2:dc:f3:4a:15:ae:97:c2:27:a7:bc:87:2b:73:
e3:10:38:7d:6f:9a:69:9e:2c:b5:51:4d:fb:9c:77:
97:f2:db:6f:42:8f:ab:c9:90:ef:73:62:18:1b:93:
07:f6:54:c8:45:f7:a2:17:2c:0c:64:07:e8:a0:96:
e9:be:c8:5c:83:1f:55:93:58:c4:79:93:9f:ab:62:
93:96:df:7d:38:5f:9f:5d:ca:22:fb:c2:38:5e:d6:
50:71:ce:85:83:2b:e9:88:c0:83:70:c0:d9:35:ab:
6e:51:a5:9f:df:76:02:38:60:c5:51:fa:6a:b7:50:
6e:27:b6:c8:37:d6:dd:b1:e3:9d:08:b6:95:21:df:
17:66:21:93:cc:19:db:4b:9b:f1:c0:f8:7f:38:85:
10:91:b7:60:af:b1:29:ac:aa:58:96:06:44:91:f1:
83:15:ad:fd:ce:89:8f:28:e7:a3:9a:ea:ab:f2:c9:
e8:e3:b1:26:27:5a:21:e9:b1:a4:d7:7f:35:aa:58:
2c:48:5c:3e:d0:46:d7:8b:4b:f1:3e:16:6f:58:fd:
6e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:9A:B5:84:64:96:7B:2E:5B:F6:3C:A3:87:25:D0:67:5C:36:0C:4E
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/CJq1hGSWey5b9jyjhyXQZ1w2DE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.50.0/23
194.50.111.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:fd:d1:52:ae:bb:13:32:fd:3b:33:be:07:82:0c:7d:3c:14:
34:1a:34:b6:e6:1b:aa:ac:f5:94:cc:3d:69:da:bc:18:cc:c5:
28:16:60:39:7f:b0:c1:9d:67:eb:03:b9:6c:6c:16:c3:2a:e3:
4b:08:8a:70:f9:f3:3b:99:81:f4:e1:b6:cb:52:c1:cf:cd:17:
ca:d8:d3:fc:ea:61:a8:eb:e4:30:cd:ae:c0:0b:75:3f:43:54:
2a:09:46:3b:46:2d:f2:8e:07:dd:5b:24:37:c7:af:bf:88:5a:
40:74:ba:9e:de:51:d2:ce:3e:eb:5e:4f:4f:3d:e9:cc:40:47:
f8:06:f9:90:0a:33:bc:f9:e1:0d:01:c7:d7:9b:42:90:d0:1a:
0c:6b:1a:12:64:c7:54:17:e4:5f:f0:e1:99:b3:74:6a:3a:01:
f3:3b:62:1f:d3:66:35:6e:10:8a:58:cc:fb:65:ca:a8:f9:ec:
11:65:2e:66:99:59:dc:f2:a6:ed:e9:dd:c8:a1:ff:84:59:f7:
86:a9:12:fa:c8:f0:7e:ea:ad:96:15:31:6c:5b:20:ea:0d:e7:
e8:29:32:cf:29:c5:2a:9e:74:6c:c3:1d:e5:c6:f2:3b:59:b0:
bf:3d:ad:9c:c3:c1:62:3a:e7:00:8d:f3:8b:16:1e:ce:3b:4c:
12:c8:74:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:49:14 2025 by rpki-client on console.sobornost.net