Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/p10y8t_WBLoKxkKhbrvVO3CBo7s.roa
File: p10y8t_WBLoKxkKhbrvVO3CBo7s.roa (raw, json)
Hash identifier: bR+UE5G2Oqk8wUwtmF/tWOLA+Bc3PLN2bliUn37gDYg=
Subject key identifier: A7:5D:32:F2:DF:D6:04:BA:0A:C6:42:A1:6E:BB:D5:3B:70:81:A3:BB
Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Certificate serial: 019611020F582ABFAC2AF4FCF19F1D57B811
Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/p10y8t_WBLoKxkKhbrvVO3CBo7s.roa
Signing time: Mon 07 Apr 2025 16:07:49 +0000
ROA not before: Mon 07 Apr 2025 16:07:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6762
IP address blocks: 77.83.132.0/24 maxlen: 24
77.83.134.0/23 maxlen: 24
89.222.80.0/23 maxlen: 24
89.222.82.0/23 maxlen: 24
89.222.84.0/23 maxlen: 24
89.222.86.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:02:0f:58:2a:bf:ac:2a:f4:fc:f1:9f:1d:57:b8:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Validity
Not Before: Apr 7 16:07:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a75d32f2dfd604ba0ac642a16ebbd53b7081a3bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:69:10:69:d0:87:28:53:9f:a7:c0:ba:79:ff:
db:7c:0b:f5:5a:d0:54:37:f5:77:b1:10:5f:16:72:
dc:4c:d3:37:0f:66:44:a8:55:06:7c:7b:58:cd:8c:
25:5e:9b:67:a0:b4:c0:be:49:ed:d0:4a:6e:5d:82:
ae:21:b3:9c:49:fd:01:8c:22:15:89:04:87:7c:ec:
96:54:c2:b9:7f:5a:87:a6:3d:11:3e:93:3c:06:19:
3b:00:58:9f:d2:e3:63:90:d5:18:38:64:13:9d:a1:
5d:c7:77:c2:2f:31:20:38:19:a2:36:c3:97:78:8d:
54:f3:b8:bc:07:9a:2f:cb:0b:ad:c2:e6:ae:43:80:
ee:af:1b:87:b4:dc:0d:44:18:0b:60:a1:da:e6:9c:
cc:df:36:ce:a1:df:4e:a3:bf:94:21:34:04:98:81:
02:6f:64:d8:34:07:76:76:48:ab:5a:a4:ef:6b:a9:
f0:fe:56:da:84:89:7e:2b:a7:d7:05:ac:6f:47:8f:
cd:61:f8:bc:2e:46:1f:3c:57:fd:f4:e1:95:a0:bb:
2a:1c:32:60:7a:ec:c6:47:35:21:fc:bb:f5:92:0c:
f6:8b:60:73:cc:ac:19:4a:6b:01:a5:e8:24:aa:2b:
4a:81:e8:7b:cd:2e:fb:85:96:6e:48:6c:1b:44:25:
34:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:5D:32:F2:DF:D6:04:BA:0A:C6:42:A1:6E:BB:D5:3B:70:81:A3:BB
X509v3 Authority Key Identifier:
keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/p10y8t_WBLoKxkKhbrvVO3CBo7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.132.0/24
77.83.134.0/23
89.222.80.0/21
Signature Algorithm: sha256WithRSAEncryption
21:6d:f8:88:86:e9:fd:dc:46:db:a0:73:ef:fa:d7:11:dc:dd:
28:6d:e9:4e:08:a4:75:13:25:24:35:c3:e7:77:dc:99:f9:a0:
6a:6b:92:02:79:c8:ce:21:f3:76:17:60:17:11:9a:7e:6a:bf:
c2:00:af:a8:6a:f4:2c:04:45:f8:93:a3:12:ea:e8:0e:b2:2e:
bb:d3:8c:27:77:5b:bc:91:54:d2:25:ef:99:53:72:0c:d4:0b:
e7:b7:dc:53:cf:1b:db:d3:4e:1e:23:23:97:23:e5:d1:1c:aa:
76:ac:59:5d:52:21:73:e2:62:11:4b:27:40:34:25:e7:f2:93:
2f:7a:da:b0:f5:cb:0b:1c:0e:b7:08:25:d4:46:24:2d:a8:a0:
b9:d7:fe:50:62:1a:8e:bc:1e:5d:a6:38:86:09:a7:40:50:ac:
b9:f9:9e:3c:0e:99:7c:ea:9b:5f:5e:3d:65:c5:ab:14:e7:74:
f3:1e:ec:a7:f7:03:c3:49:be:16:b4:44:1e:de:d0:a8:35:30:
89:3d:86:1b:d6:9d:ed:93:3c:b6:39:01:ff:5a:f2:ef:9b:06:
f0:a4:ab:3b:21:27:25:c7:e2:ad:46:40:47:e3:41:76:f1:5b:
6f:da:8b:ad:2f:ba:6e:0d:db:af:8f:b1:26:c0:53:1e:0e:6c:
d3:55:f6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:25 2025 by rpki-client on console.sobornost.net