Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/zHFsSZojvy_X7uL-vPL2okM6zhI.roa
File: zHFsSZojvy_X7uL-vPL2okM6zhI.roa (raw, json)
Hash identifier: n8rylT6z4CcEms6K9HKeeDe6KPQo1phvGPnzqc1vlUc=
Subject key identifier: CC:71:6C:49:9A:23:BF:2F:D7:EE:E2:FE:BC:F2:F6:A2:43:3A:CE:12
Certificate issuer: /CN=bd82e60d072e5185435a900e323f463806d433c9
Certificate serial: 019427B3EC779EF6CF0F599885904A826CDD
Authority key identifier: BD:82:E6:0D:07:2E:51:85:43:5A:90:0E:32:3F:46:38:06:D4:33:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vYLmDQcuUYVDWpAOMj9GOAbUM8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/zHFsSZojvy_X7uL-vPL2okM6zhI.roa
Signing time: Thu 02 Jan 2025 15:48:10 +0000
ROA not before: Thu 02 Jan 2025 15:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43356
IP address blocks: 77.92.0.0/20 maxlen: 20
77.92.1.0/24 maxlen: 24
77.92.2.0/24 maxlen: 24
77.92.3.0/24 maxlen: 24
77.92.4.0/24 maxlen: 24
77.92.5.0/24 maxlen: 24
77.92.6.0/24 maxlen: 24
77.92.7.0/24 maxlen: 24
77.92.8.0/22 maxlen: 22
77.92.12.0/24 maxlen: 24
77.92.13.0/24 maxlen: 24
77.92.14.0/24 maxlen: 24
77.92.15.0/24 maxlen: 24
77.92.16.0/22 maxlen: 22
77.92.20.0/24 maxlen: 24
77.92.21.0/24 maxlen: 24
77.92.22.0/24 maxlen: 24
77.92.23.0/24 maxlen: 24
77.92.24.0/24 maxlen: 24
77.92.25.0/24 maxlen: 24
77.92.26.0/24 maxlen: 24
193.201.128.0/24 maxlen: 24
193.201.129.0/24 maxlen: 24
193.201.130.0/24 maxlen: 24
193.201.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:ec:77:9e:f6:cf:0f:59:98:85:90:4a:82:6c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd82e60d072e5185435a900e323f463806d433c9
Validity
Not Before: Jan 2 15:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc716c499a23bf2fd7eee2febcf2f6a2433ace12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b7:5a:6a:da:c4:4d:db:17:11:8a:63:fb:6c:
d4:f9:ab:22:5e:0a:be:88:62:29:d7:42:04:ed:d4:
09:03:76:ed:d0:45:34:c0:c5:e7:93:ae:09:46:26:
b4:af:4d:41:3a:2a:14:fb:30:e5:64:23:a4:8e:3d:
c2:5c:6b:61:d0:32:d1:4f:01:14:a8:d1:cf:54:c2:
32:13:d6:9f:4a:e4:d6:cf:9a:76:81:17:c7:83:77:
67:66:b5:26:92:b3:02:24:bf:0b:f8:ae:09:f9:1b:
a6:b3:f9:79:c1:40:92:25:14:a8:2f:b3:a6:7e:3d:
e2:b0:85:97:98:c8:2c:e4:d7:e8:90:17:eb:72:9e:
57:39:07:46:98:a5:c6:aa:2f:c6:e4:bb:69:e9:82:
41:9b:49:f0:b3:41:23:bf:94:81:b5:28:a9:13:85:
7a:19:5c:c4:f0:c8:31:c1:95:12:29:88:19:a1:34:
91:4d:4a:7f:5e:81:f9:8f:e1:8f:a8:3d:af:57:f5:
be:80:42:cc:59:9d:bf:b3:2e:b6:bc:ee:29:b3:21:
55:b6:57:db:00:62:67:7c:bf:5a:2b:b6:1f:08:81:
e1:0d:81:a4:08:06:b4:f3:41:71:39:47:a9:ac:a0:
c3:00:c5:0c:f9:4a:b1:e8:10:04:d2:25:f8:3c:dd:
97:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:71:6C:49:9A:23:BF:2F:D7:EE:E2:FE:BC:F2:F6:A2:43:3A:CE:12
X509v3 Authority Key Identifier:
keyid:BD:82:E6:0D:07:2E:51:85:43:5A:90:0E:32:3F:46:38:06:D4:33:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vYLmDQcuUYVDWpAOMj9GOAbUM8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/zHFsSZojvy_X7uL-vPL2okM6zhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.0.0-77.92.26.255
193.201.128.0/22
Signature Algorithm: sha256WithRSAEncryption
76:85:27:ab:08:a6:65:9e:d3:ea:0d:70:6b:9c:52:5e:27:2d:
c9:7b:ed:de:db:63:fb:8d:29:7d:59:09:3f:5b:92:a2:65:c6:
5f:41:5b:5d:8b:d8:aa:9b:7c:a8:e1:60:ec:fb:19:76:fa:10:
82:b9:84:95:c7:44:b2:6e:4e:1a:29:75:b1:6b:1e:06:0c:a5:
11:16:f9:79:e9:d9:40:ed:9e:d0:96:b1:ce:b0:85:7c:40:d1:
13:77:06:ad:e8:ac:42:48:07:fd:18:7f:e2:6a:d0:2a:fc:34:
2a:8c:e3:84:1e:f3:66:d3:b2:61:0e:32:99:15:4a:41:15:c5:
05:cd:ab:c3:dd:96:c5:c0:89:d1:89:d2:d2:36:f4:bb:15:4d:
fe:fe:cc:db:2b:b2:b5:48:65:4a:99:46:ee:e2:d5:c2:6b:50:
f4:13:7b:d5:15:5a:6f:74:1b:90:b3:06:29:81:43:84:c7:67:
78:8c:49:b6:77:fc:f4:4f:15:67:a0:ce:a6:c3:bb:30:0c:0b:
eb:e4:76:23:f7:7f:ef:58:c2:3f:08:74:32:8f:b8:b0:2c:9e:
8e:e2:f4:d4:6d:c2:9c:a4:8d:9d:26:c4:2e:98:93:54:94:09:
25:0a:59:b5:9b:56:5b:d3:28:d6:65:ec:83:c0:4f:d2:40:cd:
1c:b9:9a:61
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:45 2025 by rpki-client on console.sobornost.net