Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/9FsdwBHHKhrqFudA3k7oZL7r4Q4.roa
File: 9FsdwBHHKhrqFudA3k7oZL7r4Q4.roa (raw, json)
Hash identifier: uRZsjNPkJy3rziszRje5Wynzc2FpiFWCTrsptTM+nWo=
Subject key identifier: F4:5B:1D:C0:11:C7:2A:1A:EA:16:E7:40:DE:4E:E8:64:BE:EB:E1:0E
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 01962367428D3590888D74E8E8C93C2B9B6D
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/9FsdwBHHKhrqFudA3k7oZL7r4Q4.roa
Signing time: Fri 11 Apr 2025 05:51:31 +0000
ROA not before: Fri 11 Apr 2025 05:51:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 77.246.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:23:67:42:8d:35:90:88:8d:74:e8:e8:c9:3c:2b:9b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Apr 11 05:51:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f45b1dc011c72a1aea16e740de4ee864beebe10e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9e:3b:f0:15:7f:31:fd:ba:26:ad:63:14:e9:
e1:f9:db:40:47:c6:5a:ff:8c:6f:d9:49:99:00:fb:
26:9a:7c:f1:ea:58:b8:fb:2c:fc:2b:3d:5f:29:cf:
b4:c6:7a:79:34:85:dd:2c:6d:b4:2c:22:a5:8f:9f:
78:6c:76:00:98:af:6a:ba:b0:04:de:2d:ba:f1:84:
97:bc:6b:ac:7d:f4:33:e8:aa:7c:49:4e:11:0d:7a:
7a:99:59:9f:a4:31:4e:79:7b:a0:8f:d6:82:09:aa:
0b:7c:06:cf:f8:27:c5:a7:39:e1:71:94:85:b1:53:
8c:bd:ed:4d:da:2f:6c:73:25:60:28:79:ac:61:bf:
23:3b:d4:85:ef:bf:a4:f3:54:12:c7:e6:04:f0:f3:
b4:db:3d:05:a4:b4:ab:26:ec:a6:e3:ea:41:01:0d:
4c:ab:80:1a:3e:ad:5a:b6:4c:da:19:e5:68:ab:96:
65:90:08:ad:93:fb:21:cf:10:55:91:54:3b:1e:9b:
79:93:7c:fa:89:a2:fc:37:a7:c4:fa:51:6e:09:72:
7f:58:1e:f7:bd:c2:17:17:76:8e:29:90:e7:03:d3:
50:db:9c:76:9d:d0:1f:fd:af:a1:8d:98:74:50:32:
57:d3:76:9e:68:d8:21:b5:e9:90:5f:1f:19:a9:83:
41:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:5B:1D:C0:11:C7:2A:1A:EA:16:E7:40:DE:4E:E8:64:BE:EB:E1:0E
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/9FsdwBHHKhrqFudA3k7oZL7r4Q4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.220.0/24
Signature Algorithm: sha256WithRSAEncryption
61:35:e2:f3:59:90:c4:96:c9:ca:c5:c8:a5:37:80:2e:9c:cf:
90:42:15:65:75:67:42:45:83:bd:fa:f1:8b:02:60:6d:23:77:
a1:7e:d8:41:c3:04:9e:27:8d:ef:32:c3:9c:f5:9a:51:57:ce:
3a:15:72:4d:38:ad:e1:88:c3:d2:cf:2b:51:37:4f:ca:67:5f:
f6:14:6c:1b:2b:b8:6b:7f:3e:34:c6:dd:d7:66:7f:cb:1f:72:
52:1a:06:d5:66:9b:c6:c3:2f:3d:32:1e:f1:ec:52:20:04:06:
10:3a:ca:12:6d:45:de:b0:62:cf:b8:3f:2d:ab:e3:62:92:f8:
48:66:72:e3:0c:1b:95:4d:c6:27:53:b3:f1:40:15:ec:b5:16:
91:a7:70:73:07:41:0e:8c:01:6e:76:98:24:36:24:9b:a8:a9:
d8:9e:b6:e8:03:4c:a6:9d:79:65:90:80:42:3f:1c:2f:bf:68:
ee:99:1a:ac:c7:79:99:f1:79:f7:91:05:b2:a8:99:7d:6c:a5:
b6:b3:02:bf:1e:8c:22:61:90:cc:d4:58:42:5a:3d:fc:04:c1:
c4:b9:54:ba:8a:9a:0a:6b:3b:f9:53:67:b1:b0:6f:01:c1:ea:
4c:83:e1:a3:45:e6:d6:a6:a4:93:22:29:93:68:3b:33:0e:aa:
fb:3b:e1:07
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZYjZ0KNNZCIjXTo6Mk8K5ttMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2
MzFiZmIwHhcNMjUwNDExMDU1MTMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDViMWRjMDExYzcyYTFhZWExNmU3NDBkZTRlZTg2NGJlZWJlMTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJ478BV/Mf26Jq1jFOnh+dtAR8Za
/4xv2UmZAPsmmnzx6li4+yz8Kz1fKc+0xnp5NIXdLG20LCKlj594bHYAmK9qurAE
3i268YSXvGusffQz6Kp8SU4RDXp6mVmfpDFOeXugj9aCCaoLfAbP+CfFpznhcZSF
sVOMve1N2i9scyVgKHmsYb8jO9SF77+k81QSx+YE8PO02z0FpLSrJuym4+pBAQ1M
q4AaPq1atkzaGeVoq5ZlkAitk/shzxBVkVQ7Hpt5k3z6iaL8N6fE+lFuCXJ/WB73
vcIXF3aOKZDnA9NQ25x2ndAf/a+hjZh0UDJX03aeaNghtemQXx8ZqYNBrwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPRbHcARxyoa6hbnQN5O6GS+6+EOMB8GA1UdIwQY
MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt
YWI4ZjFmMzM4N2VlLzEvOUZzZHdCSEhLaHJxRnVkQTNrN29aTDdyNFE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl
LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATfbcMA0G
CSqGSIb3DQEBCwUAA4IBAQBhNeLzWZDElsnKxcilN4AunM+QQhVldWdCRYO9+vGL
AmBtI3ehfthBwwSeJ43vMsOc9ZpRV846FXJNOK3hiMPSzytRN0/KZ1/2FGwbK7hr
fz40xt3XZn/LH3JSGgbVZpvGwy89Mh7x7FIgBAYQOsoSbUXesGLPuD8tq+NikvhI
ZnLjDBuVTcYnU7PxQBXstRaRp3BzB0EOjAFudpgkNiSbqKnYnrboA0ymnXllkIBC
Pxwvv2jumRqsx3mZ8Xn3kQWyqJl9bKW2swK/HowiYZDM1FhCWj38BMHEuVS6ipoK
azv5U2exsG8BwepMg+GjRebWpqSTIimTaDszDqr7O+EH
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:25 2025 by rpki-client on console.sobornost.net