Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/rWTlkbZNrrsZjKWZTJP_rkzWTv0.roa
File: rWTlkbZNrrsZjKWZTJP_rkzWTv0.roa (raw, json)
Hash identifier: OOrIatFR59tEQa9JkYCnHVEOWGvvetBIFgDhOWDZNAQ=
Subject key identifier: AD:64:E5:91:B6:4D:AE:BB:19:8C:A5:99:4C:93:FF:AE:4C:D6:4E:FD
Certificate issuer: /CN=71c1690ef57afcffae73bdb9934309f8b70ebb61
Certificate serial: 019427B48F3B7A370439B16B198598148F04
Authority key identifier: 71:C1:69:0E:F5:7A:FC:FF:AE:73:BD:B9:93:43:09:F8:B7:0E:BB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/rWTlkbZNrrsZjKWZTJP_rkzWTv0.roa
Signing time: Thu 02 Jan 2025 15:48:52 +0000
ROA not before: Thu 02 Jan 2025 15:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51373
IP address blocks: 77.87.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:8f:3b:7a:37:04:39:b1:6b:19:85:98:14:8f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71c1690ef57afcffae73bdb9934309f8b70ebb61
Validity
Not Before: Jan 2 15:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad64e591b64daebb198ca5994c93ffae4cd64efd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8f:6e:a4:54:e8:11:eb:ea:da:34:e3:d8:f6:
0d:97:b1:8a:07:c9:7e:7d:b4:87:38:e1:43:ca:79:
5b:0a:75:49:e0:55:6f:7a:7e:0e:c4:b9:8d:80:f7:
76:7e:fc:79:ee:db:fb:34:68:2d:5c:c8:67:f6:a5:
bd:02:82:22:54:b4:52:f4:e0:8d:45:b5:5c:19:6d:
9f:d2:41:08:e7:47:ea:65:1a:48:92:78:ed:3d:ae:
74:d6:86:30:19:5f:be:30:9a:e6:92:cb:31:9e:66:
76:91:45:96:eb:85:3f:46:5f:e8:e7:aa:05:d0:61:
b3:10:bb:2b:6d:03:5d:ff:9d:1e:72:f2:da:a7:90:
75:38:c1:aa:e6:fe:6f:d8:2c:74:d3:10:95:2d:4b:
e1:91:2a:53:d2:43:eb:ef:e0:3e:91:4d:7e:a0:2f:
7d:fa:dc:3f:d9:05:dc:e3:b4:8d:74:06:03:9c:81:
53:42:9e:f0:c1:8e:94:35:7c:4a:1b:04:19:12:0b:
42:9d:d9:e4:7d:18:a3:0b:a0:6b:f7:1a:e2:9a:fb:
10:f7:9a:a2:00:f2:41:f3:b3:8d:57:49:bf:dd:b1:
1a:fa:09:83:ee:7a:87:42:fb:5d:16:5b:2d:b0:99:
43:e1:73:43:ad:f9:16:7d:05:4c:e1:52:a5:f7:7a:
d0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:64:E5:91:B6:4D:AE:BB:19:8C:A5:99:4C:93:FF:AE:4C:D6:4E:FD
X509v3 Authority Key Identifier:
keyid:71:C1:69:0E:F5:7A:FC:FF:AE:73:BD:B9:93:43:09:F8:B7:0E:BB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/rWTlkbZNrrsZjKWZTJP_rkzWTv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.72.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:9d:71:df:c3:d4:e7:2c:30:93:aa:4f:99:0b:b4:c5:96:30:
0a:25:18:94:9c:45:04:cb:1b:c0:fc:61:42:08:cc:1f:ee:d4:
a2:32:48:af:8d:b9:5d:a9:03:39:02:1a:ef:37:27:c8:7b:c2:
49:7b:6b:4f:d9:16:e2:95:fb:8f:97:ca:fa:77:c5:61:d3:13:
ed:b3:0d:ec:e4:a8:aa:0c:8d:8d:d7:d2:fa:dc:b4:9c:8a:eb:
e2:65:a0:59:6f:95:92:7d:bf:45:87:1a:5a:99:7d:a0:83:3c:
a4:0e:aa:0b:57:30:23:48:5d:60:15:62:0b:9c:2e:41:d2:e6:
68:41:e6:13:b6:33:31:e5:06:30:8a:c5:e7:23:3d:20:19:18:
13:af:10:ce:88:68:e4:e0:b0:a6:e4:f7:b7:60:61:da:22:9a:
a3:eb:9e:63:cc:6d:4e:51:e3:67:8a:81:4d:2d:d0:21:87:01:
f2:16:04:93:f1:88:70:f3:dc:87:b0:3b:73:de:78:ac:f5:0b:
22:32:f2:b0:e9:c5:ab:22:a3:3c:3e:4a:d5:16:4d:51:76:3b:
03:57:56:dd:1a:c8:40:60:2b:cb:a3:f9:06:23:41:70:86:db:
90:a1:e1:3e:a0:07:b4:a9:0e:d8:f4:88:c5:a6:5d:a2:58:a4:
72:d2:f1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:28 2025 by rpki-client on console.sobornost.net