Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/0b2d1c0eIhfqUzknxCXBbc29sBw.roa
File: 0b2d1c0eIhfqUzknxCXBbc29sBw.roa (raw, json)
Hash identifier: fTb/wFQGtnvJhJADby3asBVLbaL6u2JGK1hNUrDdfSE=
Subject key identifier: D1:BD:9D:D5:CD:1E:22:17:EA:53:39:27:C4:25:C1:6D:CD:BD:B0:1C
Certificate issuer: /CN=0283a8c69a2630cd8f6fa70af2a53fe019f2cc07
Certificate serial: 0194688CA94F268E92949A3E79A0E01818F5
Authority key identifier: 02:83:A8:C6:9A:26:30:CD:8F:6F:A7:0A:F2:A5:3F:E0:19:F2:CC:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/0b2d1c0eIhfqUzknxCXBbc29sBw.roa
Signing time: Wed 15 Jan 2025 06:00:36 +0000
ROA not before: Wed 15 Jan 2025 06:00:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16322
IP address blocks: 46.167.128.0/19 maxlen: 19
77.77.64.0/18 maxlen: 18
77.77.64.0/19 maxlen: 19
77.77.77.0/24 maxlen: 24
77.77.96.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:68:8c:a9:4f:26:8e:92:94:9a:3e:79:a0:e0:18:18:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0283a8c69a2630cd8f6fa70af2a53fe019f2cc07
Validity
Not Before: Jan 15 06:00:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1bd9dd5cd1e2217ea533927c425c16dcdbdb01c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:19:cb:36:63:f2:1e:29:5c:de:c1:47:00:66:
52:20:16:65:c3:9d:3b:cd:86:d2:20:c6:a9:cc:e9:
f0:ef:d1:83:b7:fc:73:12:86:92:e1:95:56:a4:b3:
d0:be:cb:95:c9:28:dc:a0:e5:35:bb:d7:b4:79:7e:
c7:ea:08:7a:a8:de:28:2a:a9:87:4c:52:ad:8a:d0:
83:db:f3:a4:67:65:e9:ba:63:c4:ae:ed:ee:60:d4:
06:a9:60:74:cc:51:73:df:18:1a:85:8f:09:d8:a7:
cf:55:87:27:f8:8c:7a:a3:67:5a:e7:f7:f1:1a:97:
fb:8b:82:2f:c9:58:bc:58:5b:59:25:3a:f5:36:fc:
d5:a8:98:fc:4e:93:86:12:e6:50:a7:3b:20:a4:b0:
85:49:c3:81:52:29:be:d2:12:0a:b4:6d:5f:2e:fd:
60:cb:f1:bf:69:18:a0:0c:4e:40:f5:7d:74:d2:57:
a7:db:0f:59:a2:eb:97:0d:a3:7d:59:a2:9e:2b:b7:
aa:e3:d1:28:7e:39:d4:7c:40:c6:e9:9d:84:bc:dc:
4a:ee:3f:cc:4a:b8:fa:e7:04:da:a1:5e:a5:68:91:
3e:1c:28:84:cd:10:7d:b4:0b:86:da:f9:db:e2:01:
78:d2:54:cd:f8:fa:50:ea:c6:1b:12:82:2f:6e:28:
bd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:BD:9D:D5:CD:1E:22:17:EA:53:39:27:C4:25:C1:6D:CD:BD:B0:1C
X509v3 Authority Key Identifier:
keyid:02:83:A8:C6:9A:26:30:CD:8F:6F:A7:0A:F2:A5:3F:E0:19:F2:CC:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/0b2d1c0eIhfqUzknxCXBbc29sBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.167.128.0/19
77.77.64.0/18
Signature Algorithm: sha256WithRSAEncryption
6a:9f:23:d3:bc:24:5f:28:25:b6:33:f0:60:f7:76:02:39:ee:
71:a9:85:12:a6:2d:ba:c2:6d:21:3b:49:b7:cd:32:3e:a7:b8:
17:4c:56:fd:7c:00:6a:96:0c:28:9d:04:35:3a:ec:86:06:4e:
b7:6b:e1:bd:15:6e:7d:f0:d8:03:8e:89:4b:ef:ca:b0:f6:71:
98:e7:63:27:2b:17:e8:57:77:b3:dc:3b:51:88:6a:44:e3:a9:
ff:54:5c:88:f1:16:45:bc:47:27:8e:46:d7:59:84:69:6e:63:
35:d1:08:0b:04:e2:ea:a7:6b:ce:81:a5:02:fc:f5:af:e8:0c:
af:6d:1e:fb:e1:64:2b:eb:9a:20:4e:13:0f:79:ab:03:4c:da:
c6:a7:b1:2e:69:37:67:b9:6a:89:4c:60:d0:64:e0:aa:37:3f:
48:3c:ef:c8:a9:de:08:dd:f5:21:c6:25:12:4e:c1:a9:5a:fe:
b9:5d:72:ee:f2:c2:13:66:38:5c:04:98:64:36:63:27:bc:62:
0c:e0:52:de:a4:c4:a3:84:d2:9f:c3:d0:88:69:f1:47:57:d2:
ed:99:50:34:f8:fb:1c:e0:f2:d1:9e:8d:d7:fc:ea:ca:7f:ff:
e4:9f:1d:80:97:ba:ed:76:7c:9e:48:3b:de:37:95:fb:ba:ff:
51:19:8d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:25 2025 by rpki-client on console.sobornost.net