Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/ktDJb6NsFzLXOJfTf2L8qI7MJBE.roa
File: ktDJb6NsFzLXOJfTf2L8qI7MJBE.roa (raw, json)
Hash identifier: yPidrlJ3J4cJYrjCxjSusSzFLc6TaxdFIaBxkajMobY=
Subject key identifier: 92:D0:C9:6F:A3:6C:17:32:D7:38:97:D3:7F:62:FC:A8:8E:CC:24:11
Certificate issuer: /CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Certificate serial: 0195385AB1A80B3D73015B8322B8DCB54A51
Authority key identifier: C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/ktDJb6NsFzLXOJfTf2L8qI7MJBE.roa
Signing time: Mon 24 Feb 2025 14:27:02 +0000
ROA not before: Mon 24 Feb 2025 14:27:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 77.81.80.0/23 maxlen: 24
128.65.172.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:38:5a:b1:a8:0b:3d:73:01:5b:83:22:b8:dc:b5:4a:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Validity
Not Before: Feb 24 14:27:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92d0c96fa36c1732d73897d37f62fca88ecc2411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:93:0b:1d:ab:32:2d:15:93:8c:4a:f5:34:74:
a3:67:3c:bf:ea:8e:b4:21:7e:a0:13:18:e3:d2:10:
8d:a7:7c:ba:48:a1:71:c8:5d:a4:d3:8a:2a:34:e8:
47:d3:ef:0f:99:ac:71:5d:9f:82:25:31:c5:c6:b1:
11:25:05:dd:1c:34:4c:ab:9c:88:f1:5b:7b:82:ff:
5c:26:ba:d3:86:6f:0a:d9:c3:82:26:76:6c:10:bd:
8c:2c:f8:e5:f1:62:c6:c6:5d:0c:fe:dd:3a:7c:d1:
bb:31:51:fa:70:03:86:98:17:d4:50:50:c1:f7:a5:
dc:87:df:02:20:ca:a5:5e:f5:62:16:87:00:ed:42:
30:6e:d1:a6:df:d0:70:0a:b1:c9:0e:e7:36:b5:77:
b0:0d:ab:87:46:10:ca:9c:54:35:40:ac:ce:99:24:
6a:a7:ec:6f:fc:b4:1a:de:86:cf:ee:81:b9:43:5f:
18:8e:ce:07:5a:80:09:0f:4e:68:aa:0f:0b:00:e7:
4d:34:8c:4f:9b:fd:7b:ef:66:c9:3e:46:d1:e4:ff:
2a:b3:fb:ee:9a:cc:b9:66:84:26:ff:4d:13:71:32:
43:87:5e:61:bc:ee:4b:74:f9:c5:61:78:bf:2b:0b:
da:69:03:36:7c:f7:23:84:c7:91:dc:1a:f8:81:34:
e0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D0:C9:6F:A3:6C:17:32:D7:38:97:D3:7F:62:FC:A8:8E:CC:24:11
X509v3 Authority Key Identifier:
keyid:C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/ktDJb6NsFzLXOJfTf2L8qI7MJBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/xfn1DKHDSjvmEASNE4rzwHU6-Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.80.0/23
128.65.172.0/22
Signature Algorithm: sha256WithRSAEncryption
c1:09:f6:15:a2:54:52:e0:d3:50:c6:f1:64:1b:c6:3e:45:de:
f6:af:34:91:9c:67:c6:94:a5:80:3e:05:9a:4e:3c:17:0b:3c:
cf:3e:2a:32:76:63:9d:e8:d8:46:3a:43:dd:fd:76:35:79:e7:
59:0b:31:4b:ad:e1:0c:07:f2:24:d8:1e:e4:9f:de:43:8f:13:
52:75:d8:55:4e:3a:90:d7:d4:ec:92:92:40:0b:b4:e6:8a:75:
ed:be:4f:be:34:23:58:02:de:c6:98:02:70:b4:f7:73:e0:77:
3f:54:d6:9b:0f:2a:24:35:9f:f0:22:20:24:3f:7e:7b:90:ad:
03:68:e4:2c:8b:d3:e8:c1:53:6c:38:ca:d3:25:19:26:5a:9c:
66:c6:91:18:9e:18:77:d3:e3:8a:a2:f0:a3:29:f1:bd:6e:a0:
57:db:a9:d9:bd:93:d1:65:99:7b:00:0c:61:ba:93:4a:97:40:
ec:48:de:c4:ea:c0:fb:cc:64:11:e4:81:7f:0a:3a:b3:71:88:
0b:8e:f0:f8:38:c2:85:34:52:b6:49:34:26:83:7a:76:f5:95:
10:37:9b:98:80:20:f2:98:8d:21:00:45:39:07:1c:9b:4f:cc:
4d:4c:39:1f:a8:37:75:41:6b:46:72:b4:9b:e8:07:1c:4e:66:
72:13:a6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:50:41 2025 by rpki-client on console.sobornost.net