Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/TqDzXylobmv5YZZYBBs97jYKvU0.roa
File: TqDzXylobmv5YZZYBBs97jYKvU0.roa (raw, json)
Hash identifier: NHV6Fswg/e8zrywVYBxwjK/JaW1VOFVPHkfR6/mh8w8=
Subject key identifier: 4E:A0:F3:5F:29:68:6E:6B:F9:61:96:58:04:1B:3D:EE:36:0A:BD:4D
Certificate issuer: /CN=02d6e8273f9051ac31cb95792cb51400dab714aa
Certificate serial: 01942143F156912D09F52F6B3CD88D021CB1
Authority key identifier: 02:D6:E8:27:3F:90:51:AC:31:CB:95:79:2C:B5:14:00:DA:B7:14:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/TqDzXylobmv5YZZYBBs97jYKvU0.roa
Signing time: Wed 01 Jan 2025 09:48:08 +0000
ROA not before: Wed 01 Jan 2025 09:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51918
IP address blocks: 77.73.170.0/23 maxlen: 23
77.73.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:f1:56:91:2d:09:f5:2f:6b:3c:d8:8d:02:1c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d6e8273f9051ac31cb95792cb51400dab714aa
Validity
Not Before: Jan 1 09:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ea0f35f29686e6bf9619658041b3dee360abd4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:19:f8:d4:1a:18:e2:fb:e4:e9:fd:c5:65:8e:
5a:fb:3d:64:3e:c3:25:17:17:81:24:12:b6:49:8a:
c5:45:50:96:ee:a3:5b:35:f8:6e:d9:ad:90:f3:63:
17:bd:27:c9:7d:6f:fc:cc:ef:e9:28:c0:6c:53:32:
54:67:7c:fc:e7:6b:e3:04:45:ed:90:2b:5c:2b:96:
b3:57:19:0b:95:cf:be:a8:0a:74:b5:94:70:58:64:
02:96:be:b0:55:60:96:33:46:14:56:1b:75:dc:99:
6e:81:60:d4:56:f8:cc:e4:93:ca:de:f1:39:bb:b2:
66:03:f8:ce:2b:18:ab:b5:91:fb:54:b4:25:f6:9b:
a4:dc:63:63:99:0b:a8:57:6f:ed:a6:82:0d:de:15:
8a:a4:74:e4:e3:dd:01:71:7e:5a:e3:59:02:b4:d1:
1d:52:66:13:1b:a0:14:98:86:42:e8:d1:76:8a:fa:
a2:0d:d7:23:66:c6:05:cc:7d:11:d4:33:2b:f4:57:
a9:ce:42:60:40:e0:fa:c9:89:3a:ad:97:0c:df:16:
a7:48:19:cd:9f:58:e2:cc:9c:54:f6:1b:64:81:cd:
18:52:26:9e:8e:16:d0:f9:87:96:ee:e4:77:1c:e0:
48:8c:a9:3e:31:2a:42:5d:5b:b9:3c:fa:fb:df:d9:
c1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A0:F3:5F:29:68:6E:6B:F9:61:96:58:04:1B:3D:EE:36:0A:BD:4D
X509v3 Authority Key Identifier:
keyid:02:D6:E8:27:3F:90:51:AC:31:CB:95:79:2C:B5:14:00:DA:B7:14:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/TqDzXylobmv5YZZYBBs97jYKvU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.170.0-77.73.172.255
Signature Algorithm: sha256WithRSAEncryption
59:3c:79:60:75:2c:51:8e:22:b7:66:14:bf:01:5e:9b:0d:92:
78:f3:39:8d:00:e7:5a:a1:c6:cd:e0:d2:01:37:b5:ed:96:45:
98:2b:12:c4:18:86:ed:81:21:c3:49:4b:6e:ca:ae:e5:2d:eb:
3b:0f:41:f5:c3:cb:56:90:9d:c8:ac:3d:89:9e:99:2d:f5:76:
70:a9:3c:5f:26:d0:75:7f:29:7e:59:07:12:74:d3:a7:b3:d0:
ec:27:16:2c:ad:fb:69:6a:c2:34:5d:99:c2:78:28:d1:d7:da:
d0:ff:80:ed:06:5f:4a:f0:d1:81:04:38:6e:f1:ba:bc:b7:60:
c1:c3:53:8a:0f:0b:8a:ba:79:b6:4c:a3:bf:cf:d2:48:d4:26:
68:72:39:55:f3:0e:5c:80:b8:a7:68:42:ef:e1:67:0c:34:63:
32:b5:ca:f4:51:b7:ed:b7:85:76:2d:00:57:f2:40:4d:81:db:
3e:47:75:89:81:b1:14:f5:09:2a:75:80:36:be:94:21:86:37:
9d:21:41:0d:65:4e:4f:9e:e2:21:f8:54:0b:26:54:56:56:78:
96:1b:35:40:0d:59:35:bf:0c:e4:0a:bd:c5:e8:80:76:f9:a8:
bc:d3:d1:39:12:01:57:f5:4c:83:82:3f:0a:7f:01:22:b9:c4:
9d:35:0e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:49 2025 by rpki-client on console.sobornost.net