Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/OIkkjQwZ_e6aDM2pqG-Fj1w8mes.roa
File: OIkkjQwZ_e6aDM2pqG-Fj1w8mes.roa (raw, json)
Hash identifier: kiBoCvjRCAtFXqkYo08aOVgrjaQ8F+gLoLWUXi6kvM8=
Subject key identifier: 38:89:24:8D:0C:19:FD:EE:9A:0C:CD:A9:A8:6F:85:8F:5C:3C:99:EB
Certificate issuer: /CN=1c8e17411e0100c914b040d514c28e1d7d36991e
Certificate serial: 019423D7D9583F44375FCCF91B361143BE67
Authority key identifier: 1C:8E:17:41:1E:01:00:C9:14:B0:40:D5:14:C2:8E:1D:7D:36:99:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HI4XQR4BAMkUsEDVFMKOHX02mR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/OIkkjQwZ_e6aDM2pqG-Fj1w8mes.roa
Signing time: Wed 01 Jan 2025 21:48:55 +0000
ROA not before: Wed 01 Jan 2025 21:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41931
IP address blocks: 77.46.4.0/22 maxlen: 22
77.46.8.0/21 maxlen: 21
77.46.16.0/20 maxlen: 20
77.46.32.0/19 maxlen: 19
77.46.64.0/20 maxlen: 20
77.46.80.0/20 maxlen: 20
77.46.96.0/20 maxlen: 20
77.46.112.0/20 maxlen: 20
195.177.196.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:d9:58:3f:44:37:5f:cc:f9:1b:36:11:43:be:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c8e17411e0100c914b040d514c28e1d7d36991e
Validity
Not Before: Jan 1 21:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3889248d0c19fdee9a0ccda9a86f858f5c3c99eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:14:c5:0a:7b:c7:7d:78:01:14:a2:3b:7d:38:
a7:84:a1:9c:81:16:cf:e9:3d:47:90:19:bd:9b:01:
e7:80:63:6c:45:3f:da:04:9c:a8:3a:d4:a0:cf:37:
f9:67:1a:2d:34:f3:ab:94:5f:e9:77:1b:e0:f5:b4:
f4:b3:7a:e9:41:8f:5c:a1:95:76:d1:9f:e1:44:d2:
8b:85:e9:56:ea:0a:d1:82:57:b3:c2:35:4c:fd:f2:
0c:70:4d:a3:48:77:51:4b:49:95:77:94:12:d6:31:
22:9f:c7:f2:93:fc:be:04:3f:95:a3:0f:00:28:2d:
4b:18:cb:9f:9b:62:12:c4:49:c2:a0:07:39:71:1e:
0c:64:9d:be:cf:bc:cd:94:c4:97:af:9e:8f:bf:85:
17:33:97:ea:04:e4:7f:24:e0:0f:25:2d:4d:06:86:
95:10:92:3c:d0:21:31:74:a0:56:20:58:40:95:f5:
42:9f:2d:e1:60:59:02:eb:5a:c6:d3:33:d9:5c:30:
32:ce:2d:16:fd:22:7d:4e:0e:1d:6a:a3:24:61:2d:
ed:a5:47:df:90:95:84:f1:50:ff:03:34:87:5d:dc:
90:ef:53:63:15:6c:7c:19:18:93:e2:f3:5e:fc:82:
0d:29:6f:27:11:74:15:49:50:70:b2:dd:7c:fb:aa:
cd:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:89:24:8D:0C:19:FD:EE:9A:0C:CD:A9:A8:6F:85:8F:5C:3C:99:EB
X509v3 Authority Key Identifier:
keyid:1C:8E:17:41:1E:01:00:C9:14:B0:40:D5:14:C2:8E:1D:7D:36:99:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HI4XQR4BAMkUsEDVFMKOHX02mR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/OIkkjQwZ_e6aDM2pqG-Fj1w8mes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.46.4.0-77.46.127.255
195.177.196.0/23
Signature Algorithm: sha256WithRSAEncryption
44:6b:62:06:b3:8a:17:92:7a:d8:e2:23:dd:00:53:f8:ef:5b:
4f:a4:dd:de:e5:3c:19:96:a3:05:54:40:a0:75:57:a0:26:30:
b4:5b:57:59:6d:d2:39:11:66:ec:aa:d3:a3:95:f6:00:4e:f5:
56:fd:e5:63:6a:4c:dc:c0:6c:ea:12:86:27:16:a8:2a:52:b2:
0d:d9:0c:37:2f:ff:dd:54:97:e9:27:59:d6:49:4d:03:ed:da:
a7:92:64:de:e8:fb:a2:3d:69:68:43:2a:d5:53:a5:62:a3:85:
8f:9f:6a:c6:70:7f:55:c8:3d:d9:07:36:72:24:00:e5:c3:fa:
cb:b7:41:b7:89:4f:54:27:5f:a3:74:fd:4d:a7:4d:9f:41:66:
f7:31:99:44:45:7a:c3:3d:e4:e5:2a:bf:44:41:7b:e8:3b:c8:
c1:97:b8:4f:fb:dc:9a:1b:8c:cb:14:b4:af:a4:f8:fd:23:ab:
07:a8:2a:e3:f2:8f:fa:52:0c:be:a2:8e:8b:47:b4:f3:59:04:
80:25:ec:8f:9c:b8:4d:cf:80:2c:f0:dc:63:60:1c:3f:f7:ae:
3f:66:0d:63:d2:9a:12:57:ff:08:6c:90:08:96:3e:ba:64:2a:
7b:78:81:14:35:e8:e2:17:80:b4:ac:b0:ac:e0:aa:63:5b:d1:
70:f0:ed:7e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:43 2025 by rpki-client on console.sobornost.net