Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/u3h3mvt8jO_1-9Tc1-ZpWXazLnE.roa
File: u3h3mvt8jO_1-9Tc1-ZpWXazLnE.roa (raw, json)
Hash identifier: gXd9C0jmc6JkjtwTfiNrXT+kcF/uwTHzTooWSRdETt8=
Subject key identifier: BB:78:77:9A:FB:7C:8C:EF:F5:FB:D4:DC:D7:E6:69:59:76:B3:2E:71
Certificate issuer: /CN=9fac2fdddabf20ea449870e1dcc0915e60148346
Certificate serial: 019421B1DAE2449DEAD3320C065EEC7F072C
Authority key identifier: 9F:AC:2F:DD:DA:BF:20:EA:44:98:70:E1:DC:C0:91:5E:60:14:83:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/u3h3mvt8jO_1-9Tc1-ZpWXazLnE.roa
Signing time: Wed 01 Jan 2025 11:48:11 +0000
ROA not before: Wed 01 Jan 2025 11:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9051
IP address blocks: 77.246.64.0/20 maxlen: 24
92.242.168.0/22 maxlen: 24
2a0d:b340::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:da:e2:44:9d:ea:d3:32:0c:06:5e:ec:7f:07:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fac2fdddabf20ea449870e1dcc0915e60148346
Validity
Not Before: Jan 1 11:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb78779afb7c8ceff5fbd4dcd7e6695976b32e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ee:a0:47:05:a3:a7:08:5f:d1:07:29:08:60:
eb:d7:ed:24:19:26:f5:6a:15:d7:e6:b4:0f:bf:28:
1c:5c:cc:71:17:c2:0d:1a:8e:ee:a3:ed:5b:55:1b:
d0:96:96:cd:2d:3a:fb:62:63:b0:9b:ff:4c:cf:07:
bb:b9:c9:6b:31:71:3d:7f:06:cf:c8:bd:01:cb:06:
09:1d:8e:ba:c6:db:08:27:33:9f:40:f2:9f:6c:1c:
46:27:8b:d3:32:56:f8:a1:97:4d:8f:43:93:82:49:
8a:03:6e:f4:58:ef:5a:af:28:e5:b2:88:c8:f3:6a:
ab:f0:21:30:41:a1:f5:1a:79:be:4e:e7:f5:ce:97:
a2:b1:ca:a5:7b:85:fd:92:1c:62:38:58:78:b3:60:
28:c6:62:3c:47:42:3e:41:bc:c3:fb:f6:2a:f7:b6:
c0:04:bd:26:95:5d:9c:07:98:b5:02:e2:83:4f:0e:
57:4a:18:63:01:f1:1a:f7:fd:a2:60:97:80:6f:ba:
1f:52:22:06:c5:75:fe:60:0c:f0:5d:e1:69:d2:42:
e6:cd:d7:8e:30:e2:b0:fd:87:57:13:18:65:97:27:
25:f3:d0:e5:19:4f:05:fd:5e:7d:23:79:e9:13:aa:
e5:20:52:55:b6:d3:cd:3c:cd:be:e3:7c:35:1a:d1:
ed:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:78:77:9A:FB:7C:8C:EF:F5:FB:D4:DC:D7:E6:69:59:76:B3:2E:71
X509v3 Authority Key Identifier:
keyid:9F:AC:2F:DD:DA:BF:20:EA:44:98:70:E1:DC:C0:91:5E:60:14:83:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/u3h3mvt8jO_1-9Tc1-ZpWXazLnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.64.0/20
92.242.168.0/22
IPv6:
2a0d:b340::/29
Signature Algorithm: sha256WithRSAEncryption
20:fd:c2:55:d5:07:1b:1e:1d:61:03:26:39:26:72:ac:90:d3:
3f:23:2a:ac:fb:4e:8e:7d:92:9b:1d:dc:5e:8d:a7:63:89:1b:
f1:60:60:19:e1:85:48:7c:c1:e1:e4:26:46:9c:a9:e0:7c:b3:
f3:84:b8:82:34:45:f6:75:81:e0:38:27:9f:4f:6a:ba:56:3d:
54:83:ad:ce:c1:5f:d8:e5:0e:6b:35:2f:6d:2c:9b:57:ce:d5:
7d:5f:fa:85:55:6b:29:a3:8d:47:3a:fc:d5:77:49:97:cd:86:
95:d8:e8:e9:5b:99:bd:d5:b6:8e:71:8c:f8:c8:79:3c:d2:2c:
0f:ac:0d:4e:c3:1b:bc:ea:d5:a9:b5:51:27:17:a5:6d:19:f5:
f7:cb:b9:02:38:77:06:8d:2f:43:79:6a:44:87:ea:80:12:16:
41:82:78:5e:a3:fc:54:f0:ae:8c:0b:22:00:8a:63:1f:53:ae:
16:1f:ce:39:39:7c:57:48:7d:0a:93:17:4e:ba:cd:cc:bf:67:
2a:89:2d:48:02:99:f6:a9:9a:2d:10:a9:65:46:8b:53:c5:62:
51:de:ab:30:fc:00:0a:27:26:d5:ab:6e:66:9a:c0:d4:62:42:
c5:7a:72:7c:b4:af:9c:41:87:20:df:85:d6:17:2e:b8:16:bc:
f6:ed:66:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:28 2025 by rpki-client on console.sobornost.net