Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/_hamS7rzw0J6OXKNXdVH7OeaT4Q.roa
File: _hamS7rzw0J6OXKNXdVH7OeaT4Q.roa (raw, json)
Hash identifier: ppVJlVMuhJ5jDD41r02lsschJxrv6DpfcMAAlxrf2Hc=
Subject key identifier: FE:16:A6:4B:BA:F3:C3:42:7A:39:72:8D:5D:D5:47:EC:E7:9A:4F:84
Certificate issuer: /CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Certificate serial: 01942746D278E06A204B9FA71B01790E43B5
Authority key identifier: 48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/_hamS7rzw0J6OXKNXdVH7OeaT4Q.roa
Signing time: Thu 02 Jan 2025 13:49:00 +0000
ROA not before: Thu 02 Jan 2025 13:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201029
IP address blocks: 185.77.76.0/24 maxlen: 24
185.77.77.0/24 maxlen: 24
2a00:8dc0:ff00::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:d2:78:e0:6a:20:4b:9f:a7:1b:01:79:0e:43:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48e06a351a5189bcdc44840948dbfb40abf58be5
Validity
Not Before: Jan 2 13:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe16a64bbaf3c3427a39728d5dd547ece79a4f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:29:27:29:f3:37:21:5f:8d:3e:e5:10:60:73:
3d:52:4a:0b:46:06:a5:c1:58:f0:34:d5:e4:a5:76:
da:ed:65:d9:88:c3:0b:04:26:08:37:2b:e7:8b:7d:
18:8b:bf:e2:fa:f2:a9:a9:cf:76:19:41:27:a4:ce:
d0:dd:cb:42:ae:f6:58:e8:79:72:f3:af:5b:c0:d4:
7e:3a:7f:ef:27:6d:82:d8:9f:85:92:47:50:23:c4:
42:51:28:6d:38:c4:c7:4e:26:27:96:b9:8e:4f:b5:
7e:2c:cb:27:18:b7:af:ca:2e:61:ae:eb:8a:46:16:
b8:32:c9:e7:bc:f0:2a:cd:b5:68:3c:b0:f3:7f:f8:
af:73:c4:67:02:26:db:13:ff:87:50:95:24:61:b9:
01:a9:35:c2:77:52:7a:95:bc:90:10:99:3c:50:d8:
5a:71:86:9d:b7:b5:bf:d4:56:94:26:86:0c:ed:b9:
a2:02:68:fd:19:88:d2:4e:88:67:e6:61:54:3f:c9:
e3:7c:af:4f:96:be:64:81:b0:8f:84:2a:1b:64:81:
6b:63:1c:e2:42:cc:59:fa:f1:ed:f2:a4:38:9f:1d:
a7:b1:73:26:d2:a4:87:ab:46:38:11:07:40:fe:30:
ec:2d:4e:74:ee:84:98:d5:81:36:68:24:02:81:cf:
38:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:16:A6:4B:BA:F3:C3:42:7A:39:72:8D:5D:D5:47:EC:E7:9A:4F:84
X509v3 Authority Key Identifier:
keyid:48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/_hamS7rzw0J6OXKNXdVH7OeaT4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.76.0/23
IPv6:
2a00:8dc0:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
a0:68:24:3d:b7:e1:8e:f4:96:37:d5:da:ba:47:ab:4b:7d:fd:
1b:b0:fd:c9:b3:8f:cf:ab:9c:af:23:1d:68:f9:7a:db:de:1a:
fc:6f:65:e0:ba:d4:d3:19:12:e2:11:38:e7:e0:04:9b:4f:6c:
89:ca:af:32:7c:90:78:e5:e5:54:eb:00:a5:a0:7f:9f:b0:d4:
24:33:e5:4e:a7:b3:8d:ed:78:b3:4c:87:0e:0f:cd:e8:87:19:
5c:a5:b1:88:51:b5:d6:8b:1b:06:48:32:bc:5d:6e:45:02:b7:
e8:4c:c0:ee:17:39:aa:6b:22:5a:90:1d:a9:ad:3d:5a:81:17:
61:b6:ee:37:b9:ae:e6:d0:6d:5b:a3:d0:d7:86:9e:56:6b:d5:
27:6a:3b:2d:7e:b2:57:70:59:97:fc:e1:d7:c0:1b:5c:5d:ba:
d4:2a:dd:8f:07:9d:ef:0f:d4:94:3f:e1:b3:70:45:01:47:e7:
b1:d6:6a:76:62:7f:a1:8f:e2:54:ce:1b:38:42:4b:22:6a:ee:
06:88:12:f0:9a:36:26:94:1e:d7:8d:ee:c5:d3:e7:08:49:d9:
cb:2d:66:89:55:ab:7b:2d:68:e3:75:7f:1e:65:fe:6a:07:2a:
c8:c6:c3:84:c5:c2:ee:c5:82:16:8d:58:ac:7e:b6:a1:72:35:
fe:0d:f4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:29 2025 by rpki-client on console.sobornost.net