Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/DmY4OlpSGtRwQGNkVI6pwwKmQOM.roa
File: DmY4OlpSGtRwQGNkVI6pwwKmQOM.roa (raw, json)
Hash identifier: QsmPHxvFnUbBb8Hdz5mPLnRJfO8cxjGYjuC9mmKC/hY=
Subject key identifier: 0E:66:38:3A:5A:52:1A:D4:70:40:63:64:54:8E:A9:C3:02:A6:40:E3
Certificate issuer: /CN=4f2f3bc99a79503e09757477e8ef643e11886c8b
Certificate serial: 01953D5D59C3BDF29E1C1FC59F6ED5195DD2
Authority key identifier: 4F:2F:3B:C9:9A:79:50:3E:09:75:74:77:E8:EF:64:3E:11:88:6C:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ty87yZp5UD4JdXR36O9kPhGIbIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/DmY4OlpSGtRwQGNkVI6pwwKmQOM.roa
Signing time: Tue 25 Feb 2025 13:48:02 +0000
ROA not before: Tue 25 Feb 2025 13:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207741
IP address blocks: 77.81.143.0/24 maxlen: 24
193.192.0.0/24 maxlen: 24
212.102.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3d:5d:59:c3:bd:f2:9e:1c:1f:c5:9f:6e:d5:19:5d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f2f3bc99a79503e09757477e8ef643e11886c8b
Validity
Not Before: Feb 25 13:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e66383a5a521ad470406364548ea9c302a640e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1f:16:20:49:bd:47:80:8a:cd:d5:39:5f:bf:
1b:ba:30:67:96:69:0f:13:e4:a7:38:21:be:d0:5b:
98:d6:53:37:ac:ee:cb:a1:3a:4d:9f:97:04:8c:e6:
a3:d6:44:a8:95:c0:e4:2f:c9:36:98:23:de:36:ab:
c2:71:b6:0d:57:5f:2e:52:75:37:79:48:da:1f:dc:
c4:62:6f:db:9b:ac:7a:bf:7f:97:6c:65:4d:98:b3:
d1:0a:19:e3:ae:28:f9:d3:37:33:4f:53:5a:b9:eb:
7b:0d:7d:2d:98:87:6c:49:7e:23:69:c0:63:c7:e0:
61:9c:87:9a:ef:3a:b5:28:11:9c:70:d3:3b:72:8c:
14:b0:22:fa:00:18:8a:0d:83:d0:69:3d:04:27:98:
6d:ec:11:d4:19:d8:30:e1:21:89:2c:1f:5e:f8:de:
ff:54:6a:2f:cf:ba:dc:7a:3b:82:31:c8:30:9e:6e:
8f:06:1d:53:61:bc:dc:7c:42:c9:0e:9b:05:b2:59:
24:8c:00:6e:a1:2f:18:65:82:af:1b:f6:e2:0d:43:
b3:bd:f8:e4:ce:b3:ca:17:82:2d:98:ad:c6:d6:b9:
0a:27:39:aa:0b:70:e2:a7:16:06:c3:e1:22:8e:85:
0b:f5:64:09:0e:e1:81:3e:df:58:eb:a8:0d:ef:e8:
77:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:66:38:3A:5A:52:1A:D4:70:40:63:64:54:8E:A9:C3:02:A6:40:E3
X509v3 Authority Key Identifier:
keyid:4F:2F:3B:C9:9A:79:50:3E:09:75:74:77:E8:EF:64:3E:11:88:6C:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty87yZp5UD4JdXR36O9kPhGIbIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/DmY4OlpSGtRwQGNkVI6pwwKmQOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.143.0/24
193.192.0.0/24
212.102.117.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:ac:2c:19:9a:7c:fe:a0:39:32:7b:a5:00:ec:1d:c9:33:17:
34:06:e7:f5:3a:3c:9c:8f:cc:43:a4:e4:6d:85:58:77:c0:4a:
9b:2c:87:d0:25:ea:5b:ba:e4:4d:36:81:b1:cf:ce:48:1b:f9:
24:c2:7d:f2:60:05:37:e2:d0:8b:33:d0:fe:bf:4c:7d:20:01:
52:25:84:a2:f7:cb:54:8d:9d:c5:82:a9:8a:c5:d5:83:5c:ce:
12:d1:51:b5:98:7b:ce:b4:04:09:15:ad:a6:df:e4:9a:1e:f7:
93:ba:53:c3:54:49:cc:35:57:50:0f:30:29:34:3f:39:f7:69:
b9:38:13:e1:23:1c:b3:e7:f5:ad:2b:dc:28:a2:ca:ae:62:81:
c5:80:c3:c7:dc:da:8a:f5:2d:a3:f4:ba:74:c2:03:e6:df:38:
b3:ea:36:69:9c:eb:b4:04:94:74:ee:ec:c0:b7:ee:9e:28:57:
e7:44:ba:23:ab:c0:07:40:3c:c1:e6:e1:5f:68:e7:44:17:08:
b4:e2:1d:94:6f:17:7f:4a:e7:c2:e1:ea:cd:39:05:ca:72:9e:
7f:31:60:cd:de:ee:70:d4:01:16:aa:44:74:7c:fb:34:ad:5c:
03:6d:08:33:b7:0d:bf:fe:da:3b:6c:c1:43:93:94:5c:2f:9d:
48:e0:bd:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:47 2025 by rpki-client on console.sobornost.net