Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/gomnRiII4UUcGSHuI8nXBgSpWmo.roa
File: gomnRiII4UUcGSHuI8nXBgSpWmo.roa (raw, json)
Hash identifier: Rx7SYdS0kAPSQJ6WBVcTiVGAF8kqx/mt3lPi/ehy1+s=
Subject key identifier: 82:89:A7:46:22:08:E1:45:1C:19:21:EE:23:C9:D7:06:04:A9:5A:6A
Certificate issuer: /CN=2edec9a2096dec103bae2d7c3796e0d47085c202
Certificate serial: 019421446A773A07A24A6000B4B111FC21A1
Authority key identifier: 2E:DE:C9:A2:09:6D:EC:10:3B:AE:2D:7C:37:96:E0:D4:70:85:C2:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lt7Joglt7BA7ri18N5bg1HCFwgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/gomnRiII4UUcGSHuI8nXBgSpWmo.roa
Signing time: Wed 01 Jan 2025 09:48:39 +0000
ROA not before: Wed 01 Jan 2025 09:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2111
IP address blocks: 77.71.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:6a:77:3a:07:a2:4a:60:00:b4:b1:11:fc:21:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2edec9a2096dec103bae2d7c3796e0d47085c202
Validity
Not Before: Jan 1 09:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8289a7462208e1451c1921ee23c9d70604a95a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ac:11:ef:2f:36:13:cb:8f:35:5c:db:0e:7b:
72:36:83:66:f4:93:89:73:23:89:e9:44:1c:d9:9f:
b2:95:2a:32:ea:94:55:c7:bc:cc:02:ab:bb:b0:1d:
5b:37:8a:48:22:dd:3a:46:8a:e5:ba:ba:2e:88:5a:
c3:43:84:f0:52:bb:3c:79:d9:f3:13:cf:cf:15:01:
b7:58:9b:73:4f:af:0a:4f:0e:5a:9c:be:32:f0:ce:
45:b0:e7:3d:ca:6e:00:3c:ce:42:18:4e:99:e7:0c:
4d:47:41:d5:08:48:70:42:4a:69:6d:97:1e:04:f1:
f3:8f:c8:53:20:22:62:bb:44:a2:5c:c6:b0:88:e3:
02:c4:2f:1f:57:32:94:e4:4e:be:ef:e8:fa:16:9c:
f0:94:32:50:5a:02:0b:e0:98:30:33:07:37:cd:13:
87:ec:ee:fc:b4:60:6f:b1:46:5e:8c:3b:67:9d:12:
b0:52:64:b4:d0:81:49:e5:47:5a:4e:04:db:13:03:
b6:50:a8:1f:34:64:63:12:bb:44:68:6a:88:1f:03:
82:36:90:bc:98:3e:ce:b3:9d:2b:43:a6:cb:cb:fd:
47:34:58:eb:00:dc:08:6e:e9:55:85:76:0b:2b:25:
3a:8b:6b:fe:a3:5b:4a:36:6e:5d:4c:59:c9:50:bd:
8b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:89:A7:46:22:08:E1:45:1C:19:21:EE:23:C9:D7:06:04:A9:5A:6A
X509v3 Authority Key Identifier:
keyid:2E:DE:C9:A2:09:6D:EC:10:3B:AE:2D:7C:37:96:E0:D4:70:85:C2:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lt7Joglt7BA7ri18N5bg1HCFwgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/gomnRiII4UUcGSHuI8nXBgSpWmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.71.96.0/24
Signature Algorithm: sha256WithRSAEncryption
61:f9:54:60:48:17:9d:29:52:e7:f5:91:20:f9:7b:3b:f7:e1:
06:91:43:55:6a:b7:07:4b:63:7f:b0:4c:86:9b:c4:b4:a5:8f:
44:a3:48:e4:1a:ee:13:30:c0:99:7e:97:03:d8:c5:12:b9:75:
ff:fb:dc:b1:7a:c8:43:e0:fc:e4:62:23:42:62:f5:cb:0e:d6:
b1:7a:c5:7b:0e:ec:c9:e5:03:e8:25:72:a8:9c:cd:93:a5:f5:
4d:2b:99:03:2b:ba:56:89:43:39:54:72:e7:39:74:4c:fc:bd:
74:2d:c3:97:eb:0f:42:6a:b9:c4:3c:1a:b0:c6:34:69:8f:d5:
c3:6b:a0:8e:10:79:39:f4:15:63:e2:8c:06:51:50:61:d8:20:
c3:a4:13:53:4b:f3:64:dd:89:af:ed:36:5e:51:20:2a:90:59:
3e:83:7e:76:1d:14:6b:26:82:4f:05:75:07:87:3d:07:83:a7:
d9:61:11:fc:14:0a:ef:ef:ff:63:eb:f2:64:2c:07:4f:70:3c:
30:da:f7:79:27:3a:88:f7:6c:a8:e4:e9:be:af:4a:68:6c:38:
cb:9e:00:f0:78:d2:40:e7:34:90:ba:4d:a3:92:c8:03:5b:14:
5a:61:7d:3e:30:29:83:c7:a0:f9:6d:3e:39:01:61:9d:8a:1e:
1f:cc:fa:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:11 2025 by rpki-client on console.sobornost.net