Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/6hgKpsdlK6GUgCq-rwztVz_Bhck.roa
File: 6hgKpsdlK6GUgCq-rwztVz_Bhck.roa (raw, json)
Hash identifier: x7Nnzb3+BjsMGfCWv6tnmGZkmedf5cnHnxqvvpjotow=
Subject key identifier: EA:18:0A:A6:C7:65:2B:A1:94:80:2A:BE:AF:0C:ED:57:3F:C1:85:C9
Certificate issuer: /CN=7302cdc29fdca09e9a0f3f7d2113da85a7e1d654
Certificate serial: 0194E13C6A1AAF9E5741AA5E0BCF1AC1316C
Authority key identifier: 73:02:CD:C2:9F:DC:A0:9E:9A:0F:3F:7D:21:13:DA:85:A7:E1:D6:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/6hgKpsdlK6GUgCq-rwztVz_Bhck.roa
Signing time: Fri 07 Feb 2025 16:27:00 +0000
ROA not before: Fri 07 Feb 2025 16:27:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206648
IP address blocks: 77.223.140.0/24 maxlen: 24
77.223.150.0/24 maxlen: 24
195.244.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:e1:3c:6a:1a:af:9e:57:41:aa:5e:0b:cf:1a:c1:31:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7302cdc29fdca09e9a0f3f7d2113da85a7e1d654
Validity
Not Before: Feb 7 16:27:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea180aa6c7652ba194802abeaf0ced573fc185c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:35:02:8d:e7:cb:ce:e8:a4:53:e3:4b:5d:38:
e5:16:23:c8:36:7d:3e:31:d2:b6:65:a4:b4:75:e2:
41:3b:38:02:d0:1a:dd:90:50:28:11:01:48:06:24:
30:30:7f:8a:a5:d1:76:12:4a:df:96:8a:d7:73:eb:
21:05:07:28:2b:48:e2:2a:d6:4b:d1:78:dc:93:25:
88:87:d5:fe:3d:fc:1f:30:0c:dd:63:37:c9:c3:9b:
3f:5e:96:20:f3:3e:08:ae:ab:64:1b:53:9c:cf:86:
64:32:14:e8:c8:67:70:12:ef:e7:7c:61:78:4c:55:
cd:56:b7:04:87:b3:fd:7e:42:47:ba:8e:10:cd:8e:
1e:eb:68:a5:0a:59:54:50:f3:53:5d:4f:a8:8a:f5:
1d:ac:bc:49:83:d9:dc:66:33:20:70:a8:8f:5f:78:
ea:1e:b8:2d:58:d2:08:62:86:4e:12:65:4e:a2:89:
46:2d:2b:46:11:49:3e:11:d0:12:5e:2f:7c:23:63:
a4:7c:ab:48:81:84:26:66:08:28:56:22:0f:8e:b1:
3c:b1:4b:c3:82:cd:d6:f3:0d:60:eb:38:aa:52:a5:
e0:0b:6a:3b:6c:a0:5c:1a:f6:c5:48:6a:06:85:d6:
72:f7:18:d8:46:68:61:0d:a0:10:48:6f:78:7d:cd:
22:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:18:0A:A6:C7:65:2B:A1:94:80:2A:BE:AF:0C:ED:57:3F:C1:85:C9
X509v3 Authority Key Identifier:
keyid:73:02:CD:C2:9F:DC:A0:9E:9A:0F:3F:7D:21:13:DA:85:A7:E1:D6:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/6hgKpsdlK6GUgCq-rwztVz_Bhck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.223.140.0/24
77.223.150.0/24
195.244.45.0/24
Signature Algorithm: sha256WithRSAEncryption
48:18:39:9f:b3:d4:91:38:63:72:5e:66:04:37:f6:2a:43:32:
84:a8:e1:e4:8e:e4:c8:77:1a:0c:f9:e9:73:2d:a0:a7:01:0d:
3d:d1:9a:d9:35:9f:a6:8a:c4:1e:29:8b:84:6a:16:04:f6:dc:
a2:50:66:9c:fa:91:56:7e:ee:9a:14:67:54:72:61:3d:6b:5c:
92:7f:37:c7:fd:e7:3d:75:e8:cd:dc:91:53:42:b8:8e:4f:f5:
cd:0d:f2:43:14:a7:5b:4b:0e:85:87:56:88:6f:80:f7:82:ac:
32:c2:a2:3b:ba:00:dd:15:f2:e1:da:75:1f:f6:94:20:6f:c5:
f9:bd:72:25:2b:b3:66:84:29:25:38:9d:68:f8:8d:8a:72:17:
8e:38:65:3e:13:e7:c0:b1:90:eb:9d:2a:54:60:5e:9c:64:e8:
0f:d3:c4:62:ec:c0:16:34:e0:de:e1:44:55:5e:a2:34:27:7d:
84:3c:2d:a0:fa:0a:ea:83:8c:d6:87:c2:08:58:d2:65:4f:01:
53:4b:20:4f:ba:05:47:7f:7d:06:85:e7:94:d0:ba:65:30:bc:
ea:d6:94:f7:d9:79:3b:27:30:eb:eb:67:98:e8:6b:17:a5:a0:
63:eb:6d:b1:29:76:13:18:96:14:bf:bf:aa:14:8b:5a:46:2a:
32:92:7d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:29 2025 by rpki-client on console.sobornost.net