Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/xfeGCbXD-YF0qFrPXVL_VBgsViY.roa
File: xfeGCbXD-YF0qFrPXVL_VBgsViY.roa (raw, json)
Hash identifier: +QvSz3wl8pHqddA2o6rF3CbvD6JrTHLlFmQPhouhbbc=
Subject key identifier: C5:F7:86:09:B5:C3:F9:81:74:A8:5A:CF:5D:52:FF:54:18:2C:56:26
Certificate issuer: /CN=27ce1e9a6522616ab30b0f123e09d305a82304af
Certificate serial: 019422FB1DDE94D797BFE927A22610824C84
Authority key identifier: 27:CE:1E:9A:65:22:61:6A:B3:0B:0F:12:3E:09:D3:05:A8:23:04:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J84emmUiYWqzCw8SPgnTBagjBK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/xfeGCbXD-YF0qFrPXVL_VBgsViY.roa
Signing time: Wed 01 Jan 2025 17:47:50 +0000
ROA not before: Wed 01 Jan 2025 17:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39739
IP address blocks: 37.77.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:1d:de:94:d7:97:bf:e9:27:a2:26:10:82:4c:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27ce1e9a6522616ab30b0f123e09d305a82304af
Validity
Not Before: Jan 1 17:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c5f78609b5c3f98174a85acf5d52ff54182c5626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d1:c9:30:d1:3c:8b:cb:53:36:09:07:8a:ec:
b8:96:6b:df:cc:4f:94:e1:58:e3:03:62:b0:33:87:
53:47:ac:f6:6a:64:bc:f5:ff:3a:65:c8:ba:a4:00:
93:f1:f8:47:09:97:93:78:a2:8d:47:bb:dd:81:fc:
0b:cd:3e:b0:51:3e:90:b9:73:12:4d:95:35:bf:33:
bd:00:82:76:68:d5:c6:d7:59:53:3d:8b:7f:e5:ef:
77:de:0d:cc:5f:c5:ae:8b:2e:1f:66:e5:07:e6:0b:
0f:5b:78:8e:07:40:1f:26:93:c0:25:3c:68:e1:a1:
4f:fe:92:b0:f6:2a:48:02:92:de:53:f9:f0:24:9d:
3c:8a:d0:67:07:b4:7c:f2:8a:31:6c:b3:f1:90:d2:
37:c4:e6:e3:31:66:ec:24:04:b6:90:a5:3a:8f:e6:
e1:53:26:2c:63:86:06:8a:dd:f3:1f:90:bc:16:3b:
6f:c3:e9:9e:0f:9e:42:a2:5f:26:e1:0c:5e:19:3b:
60:1a:6a:9f:96:2a:6b:63:e7:dc:47:a1:48:da:cf:
3b:02:c7:45:2b:a1:75:b8:6f:11:9d:ab:20:8b:3e:
8f:9c:53:c6:8b:71:1f:f2:d7:15:17:25:ac:54:30:
a7:21:62:3e:3e:42:37:3d:7f:9d:8a:5b:e8:c6:41:
9a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F7:86:09:B5:C3:F9:81:74:A8:5A:CF:5D:52:FF:54:18:2C:56:26
X509v3 Authority Key Identifier:
keyid:27:CE:1E:9A:65:22:61:6A:B3:0B:0F:12:3E:09:D3:05:A8:23:04:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J84emmUiYWqzCw8SPgnTBagjBK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/xfeGCbXD-YF0qFrPXVL_VBgsViY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/J84emmUiYWqzCw8SPgnTBagjBK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.103.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:49:cc:00:c6:0c:28:d6:5e:d7:2d:7e:22:2b:73:84:cf:e0:
55:e1:91:e2:11:4d:ea:99:58:91:2c:14:d1:a9:43:34:72:5a:
47:10:f2:cf:d4:b3:73:1d:65:fb:a1:87:6c:86:b9:26:8c:2a:
b2:2e:2e:e8:1b:bb:0c:83:02:b6:ba:ed:d6:8a:47:9d:e6:14:
f2:7b:ed:60:8f:58:51:f1:f0:1a:1d:e6:fb:c6:d0:10:ca:24:
4d:31:67:ba:10:dc:c0:8e:b0:bf:18:e1:81:14:06:cb:89:11:
09:1b:8f:ae:71:d7:04:aa:c6:b1:8c:32:57:1b:66:22:a4:af:
36:44:3a:d9:4c:bc:0f:1b:29:7a:af:de:57:d5:2b:bc:f6:8a:
3e:db:47:bf:7a:05:c2:63:ed:06:f0:93:75:17:1f:13:12:1b:
07:21:2e:e1:89:36:5c:3a:7e:63:01:b6:ed:1e:4d:a0:99:87:
76:05:e0:ff:69:84:83:78:eb:b4:46:5f:c6:55:19:e6:19:51:
dc:70:4b:ff:f4:ee:fe:4d:76:de:a7:d0:2b:3e:82:f2:d9:73:
8e:07:24:d4:86:b4:8e:9f:55:c5:6b:9e:ef:96:8a:44:86:97:
65:97:3c:da:49:be:0f:ec:f1:fa:2b:c1:74:4c:99:55:98:f0:
e7:d8:e9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:45 2025 by rpki-client on console.sobornost.net