Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/0qDEBFpOXut-4loka9fnf5eUImY.roa
File: 0qDEBFpOXut-4loka9fnf5eUImY.roa (raw, json)
Hash identifier: ncbEa/GV6X03sVaB8m+KIAQ6tDl6KO3hE6RyW9zWiMw=
Subject key identifier: D2:A0:C4:04:5A:4E:5E:EB:7E:E2:5A:24:6B:D7:E7:7F:97:94:22:66
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019427483985B6C2AE26F6460C13A26816AF
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/0qDEBFpOXut-4loka9fnf5eUImY.roa
Signing time: Thu 02 Jan 2025 13:50:32 +0000
ROA not before: Thu 02 Jan 2025 13:50:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39838
IP address blocks: 77.247.120.0/22 maxlen: 22
89.42.112.0/23 maxlen: 23
89.45.208.0/23 maxlen: 23
217.26.188.0/22 maxlen: 22
217.76.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:39:85:b6:c2:ae:26:f6:46:0c:13:a2:68:16:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 2 13:50:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2a0c4045a4e5eeb7ee25a246bd7e77f97942266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b8:f5:dc:65:67:1a:95:71:57:42:c2:e5:ca:
24:0f:68:d4:ea:92:23:5b:0a:85:df:e9:01:9d:29:
d2:c4:0d:44:93:d9:03:81:45:99:a5:97:6a:8f:ef:
57:67:17:12:c9:4b:a3:2c:ae:30:bc:b9:fb:14:1e:
d1:ed:f3:2c:b1:b1:28:a1:96:dd:52:ee:b1:f4:ff:
b3:c2:13:b9:92:47:e4:0a:6b:62:e0:64:b4:3d:7c:
ea:17:f3:d5:a4:3f:d7:a7:67:9b:6c:bf:36:ce:1a:
0d:64:47:e5:33:47:0e:2f:13:0f:b8:2e:f0:89:bc:
83:5f:b4:4b:41:98:23:c4:92:f0:e3:ea:54:7f:21:
43:ed:82:b0:93:44:cc:19:5c:d2:c4:27:78:f4:90:
ca:10:cb:54:ef:03:76:21:5a:52:58:95:bc:6a:88:
0b:f7:3f:1a:c8:46:c0:0f:cd:7c:c7:b5:15:75:4e:
f7:37:f0:96:07:74:96:68:df:7b:21:91:d3:53:0a:
8b:fa:13:6c:bb:98:8a:83:75:cb:a6:69:cb:55:f3:
8b:38:65:74:76:03:bb:d6:6d:68:11:9f:10:a8:fe:
9c:2e:73:e6:0d:44:1c:bf:ba:4e:59:ac:03:19:e2:
7a:33:fc:ba:db:aa:3c:4d:91:5d:07:de:8f:83:5c:
b8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A0:C4:04:5A:4E:5E:EB:7E:E2:5A:24:6B:D7:E7:7F:97:94:22:66
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/0qDEBFpOXut-4loka9fnf5eUImY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.247.120.0/22
89.42.112.0/23
89.45.208.0/23
217.26.188.0/22
217.76.247.0/24
Signature Algorithm: sha256WithRSAEncryption
77:20:fd:e5:9a:38:51:7a:3c:88:e3:b5:8d:d3:ed:62:56:d9:
06:b7:a7:d4:de:cc:c6:c4:a3:a5:cf:8a:26:ca:95:a8:3c:c3:
ac:fd:81:77:03:48:b1:a5:e5:92:6b:0c:03:90:70:06:84:12:
c5:f8:a4:3a:66:20:dc:f6:a2:ec:4e:0a:3d:ed:e6:8a:ec:27:
2a:06:e5:71:5e:82:93:34:c8:20:9c:5d:06:70:12:d4:d2:7a:
b2:e4:9e:33:47:b9:ff:29:12:24:00:4f:93:9d:bc:8d:19:35:
aa:6c:3f:28:54:0f:b0:03:11:89:7a:96:64:bc:33:00:31:82:
49:c4:33:69:f2:26:4c:76:e7:16:46:1b:45:be:27:05:de:b9:
ab:9c:5e:36:7f:fa:fe:31:e0:a5:e2:5c:69:a6:f9:7a:c6:e5:
96:23:20:33:a2:ca:f9:f0:0d:eb:d3:f6:97:c6:4b:f6:f6:2f:
05:05:f3:f5:04:6f:8b:b8:dd:95:e3:bb:3d:41:a6:b4:df:b0:
44:c3:7b:be:f9:3b:f2:68:0b:18:7a:37:dc:d8:52:76:17:89:
fe:79:cf:6e:c1:7d:e5:b1:b8:bf:55:f4:17:24:ba:ed:9e:df:
dd:5d:1f:67:71:0b:2f:36:56:40:cc:4a:7b:cd:e5:7e:87:68:
36:f7:76:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:49:25 2025 by rpki-client on console.sobornost.net