Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/CZQw40ubgHVu1Jof03ClaqRzNO0.roa
File: CZQw40ubgHVu1Jof03ClaqRzNO0.roa (raw, json)
Hash identifier: ryau3A+d+gfpE7i1EIyrHi9oMGq0/6OLOcTA/JPeZzo=
Subject key identifier: 09:94:30:E3:4B:9B:80:75:6E:D4:9A:1F:D3:70:A5:6A:A4:73:34:ED
Certificate issuer: /CN=040dd3d3c52d4c6fa51b7a833578cefb3ab26649
Certificate serial: 01962FA49E2BD1C562139D8CB7F8108B0E1D
Authority key identifier: 04:0D:D3:D3:C5:2D:4C:6F:A5:1B:7A:83:35:78:CE:FB:3A:B2:66:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/CZQw40ubgHVu1Jof03ClaqRzNO0.roa
Signing time: Sun 13 Apr 2025 14:53:59 +0000
ROA not before: Sun 13 Apr 2025 14:53:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210572
IP address blocks: 77.93.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:a4:9e:2b:d1:c5:62:13:9d:8c:b7:f8:10:8b:0e:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=040dd3d3c52d4c6fa51b7a833578cefb3ab26649
Validity
Not Before: Apr 13 14:53:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=099430e34b9b80756ed49a1fd370a56aa47334ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7e:f4:08:7e:06:7d:07:66:89:f2:81:4d:43:
11:bc:e2:36:d8:60:24:1a:a4:1e:80:26:b4:c0:bf:
6f:a2:2a:45:6b:52:a8:83:f6:38:5d:e0:d8:e0:d8:
ab:dd:f8:17:23:58:8b:74:28:03:b7:80:be:04:dd:
c5:9c:b7:28:27:4e:92:c0:0b:79:12:c5:2b:c0:b5:
0f:ef:df:7c:b0:17:f6:1b:59:32:24:b2:ee:5c:c4:
81:3d:ea:55:f4:2c:d5:c9:b3:24:0a:6d:0d:75:2e:
26:b6:90:1a:7f:88:1d:0f:1e:f3:6c:f6:45:4d:9a:
8c:4f:e5:8f:87:04:0b:4f:95:89:f3:49:20:c0:d1:
ce:23:17:15:4a:4e:a8:a6:8e:8a:98:d8:a8:3f:74:
3b:f6:a9:df:75:2a:aa:df:a2:57:11:a7:29:98:b8:
0f:64:9f:f0:27:da:de:60:8a:b3:8a:42:ee:1d:6e:
a8:5c:e7:b3:ff:d7:fc:11:22:0f:c7:e5:86:a5:dc:
66:25:4c:26:50:be:bb:ac:2e:0c:ee:84:e8:c4:48:
e0:9b:b2:46:88:2f:d5:3a:31:bb:9f:c6:14:55:f1:
bd:33:25:7a:68:11:c4:39:ae:9c:06:35:14:c7:c6:
33:ed:65:98:09:f3:2f:3b:32:75:5b:7e:c6:f2:42:
db:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:94:30:E3:4B:9B:80:75:6E:D4:9A:1F:D3:70:A5:6A:A4:73:34:ED
X509v3 Authority Key Identifier:
keyid:04:0D:D3:D3:C5:2D:4C:6F:A5:1B:7A:83:35:78:CE:FB:3A:B2:66:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/CZQw40ubgHVu1Jof03ClaqRzNO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.52.0/24
Signature Algorithm: sha256WithRSAEncryption
65:f0:0c:9d:94:30:fa:b1:74:57:ba:39:7b:d2:99:4e:aa:57:
ee:d0:8a:b7:e3:b4:f5:eb:84:4d:8d:4a:c5:66:25:36:99:80:
46:68:3d:11:d0:89:e7:96:02:25:67:63:cc:7e:7f:ae:1c:a4:
80:11:c8:d3:95:02:e5:8f:c4:22:20:86:dd:a4:1c:11:58:5d:
37:84:a6:15:9f:96:a6:76:e7:3a:76:40:72:9d:ce:f7:db:18:
7c:07:99:a1:34:fd:78:32:24:4f:d1:9b:f8:68:b2:45:ab:5b:
55:0b:f9:ff:82:3f:70:86:a2:ec:6f:56:41:be:fa:b4:a5:4b:
07:e8:2d:ac:82:dd:66:0f:07:b6:49:d9:2e:af:4c:99:b8:90:
f0:93:fd:b3:24:23:95:94:78:12:c6:93:e8:41:49:6a:67:02:
96:eb:61:0d:9f:a1:38:19:93:17:5d:ba:8e:8f:89:43:e0:b4:
af:b7:0e:aa:d7:c2:dc:84:50:ee:b6:5d:5b:06:6d:82:6f:9b:
a0:26:bf:bc:7a:7a:76:29:6e:94:a4:51:47:6d:d9:d6:4c:66:
58:ea:93:0c:60:34:68:d6:23:b7:89:54:15:e3:ff:67:16:21:
51:f1:ee:49:79:8b:61:1c:39:18:da:4a:da:82:d3:2f:4d:a0:
89:ba:46:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:46 2025 by rpki-client on console.sobornost.net