Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/1--dh8h3abapBU31_SJb0tICxWyY.roa
File: 1--dh8h3abapBU31_SJb0tICxWyY.roa (raw, json)
Hash identifier: gh7e8+8RLdU8Cqp+9LrY341h9N8Mjd03If+6kczgoM8=
Subject key identifier: FB:E7:61:F2:1D:DA:6D:AA:41:53:7D:7F:48:96:F4:B4:80:B1:5B:26
Certificate issuer: /CN=2edec9a2096dec103bae2d7c3796e0d47085c202
Certificate serial: 019421446B0559B04CBDC355CE53F0043C78
Authority key identifier: 2E:DE:C9:A2:09:6D:EC:10:3B:AE:2D:7C:37:96:E0:D4:70:85:C2:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lt7Joglt7BA7ri18N5bg1HCFwgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/1--dh8h3abapBU31_SJb0tICxWyY.roa
Signing time: Wed 01 Jan 2025 09:48:39 +0000
ROA not before: Wed 01 Jan 2025 09:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57619
IP address blocks: 77.71.112.0/24 maxlen: 24
77.71.113.0/24 maxlen: 24
77.71.114.0/24 maxlen: 24
77.71.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:6b:05:59:b0:4c:bd:c3:55:ce:53:f0:04:3c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2edec9a2096dec103bae2d7c3796e0d47085c202
Validity
Not Before: Jan 1 09:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fbe761f21dda6daa41537d7f4896f4b480b15b26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:da:a5:ee:78:a5:9e:b5:d1:55:ed:04:cc:24:
97:93:4f:cb:f1:b8:95:cf:96:be:8b:ba:d3:76:40:
c3:c5:b7:d1:93:65:a4:07:f9:75:b9:82:b7:d3:4a:
7e:59:ea:7f:cb:dd:bf:ab:96:b1:d8:5a:1e:19:31:
b0:f7:6b:7e:45:a4:13:c4:49:ca:7b:31:87:4d:8f:
f2:8a:f1:a0:47:dc:d0:1a:95:6f:30:d2:05:dd:fe:
5c:75:7b:06:57:6a:56:50:91:80:ea:fa:17:89:0e:
6e:ed:74:7e:9e:a5:3e:e5:fc:5d:bd:7f:b6:58:a4:
81:c8:9c:1c:77:9a:38:5c:e1:5d:6f:dc:73:e7:43:
9f:40:10:8b:ce:64:82:89:39:e5:b7:b4:39:be:44:
7c:db:57:78:09:4d:9f:84:90:d1:8b:d4:0e:54:37:
59:5f:ba:b8:1f:41:32:05:a3:07:cc:69:3d:83:e8:
2e:26:aa:c5:a9:a5:4b:de:85:a3:f8:06:ed:74:62:
e9:69:39:79:4a:57:04:70:b9:80:42:40:23:9d:d1:
e6:66:20:cf:3b:66:de:0e:58:50:b3:77:2b:65:f3:
40:24:42:4e:8c:a6:7b:31:70:27:7e:41:8c:73:6f:
27:d0:cf:13:fa:59:02:b3:2e:b6:8a:cf:63:46:5b:
b9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E7:61:F2:1D:DA:6D:AA:41:53:7D:7F:48:96:F4:B4:80:B1:5B:26
X509v3 Authority Key Identifier:
keyid:2E:DE:C9:A2:09:6D:EC:10:3B:AE:2D:7C:37:96:E0:D4:70:85:C2:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lt7Joglt7BA7ri18N5bg1HCFwgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/1--dh8h3abapBU31_SJb0tICxWyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.71.112.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:e2:54:8e:30:da:c1:59:29:18:3c:31:a0:8c:b5:32:a6:a7:
f9:9b:0e:ad:25:82:41:b8:45:0b:d2:33:86:ed:48:8e:56:f1:
13:b2:ef:31:ea:da:40:09:5f:9f:e1:0c:61:76:c7:c1:1e:4e:
85:4d:a2:db:64:b7:28:93:87:72:33:5a:34:a3:70:33:72:7e:
2b:9f:a7:13:e8:9f:cb:b0:25:11:47:6e:11:ce:ac:7e:40:f6:
ae:17:63:81:b7:56:21:43:c0:b1:f1:ea:2e:a2:23:4c:76:ef:
ca:bf:cf:cb:ab:0d:5b:fc:b9:85:5e:5d:40:a5:36:2a:dc:a3:
7b:c1:c9:a5:41:c2:29:f2:2e:70:90:2a:14:79:14:34:dc:b9:
4e:da:f2:25:34:0b:ee:e3:18:fe:70:af:87:8a:56:af:92:64:
c3:b6:a5:a2:38:12:a9:14:4a:88:ea:51:86:d0:b9:3e:99:41:
87:0a:58:15:36:7d:b8:00:58:d9:93:0f:ca:15:ba:d7:e0:1c:
9b:8b:e8:44:11:b4:65:8d:43:1a:2b:a6:bd:30:b1:a3:70:f2:
8d:6d:81:f0:33:d5:18:4f:c7:da:93:16:36:db:74:b3:2d:aa:
7c:04:f2:be:65:d2:10:10:b0:e2:ff:b4:c6:ba:98:67:8f:80:
ed:92:d0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:11 2025 by rpki-client on console.sobornost.net