Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/4bgWSk-iF3_r_jCfSau99_r6CxY.roa
File: 4bgWSk-iF3_r_jCfSau99_r6CxY.roa (raw, json)
Hash identifier: omkQq8g1w9Lx3xpxIPgaOrdb6vO4jdF5Yf3uoDFud+U=
Subject key identifier: E1:B8:16:4A:4F:A2:17:7F:EB:FE:30:9F:49:AB:BD:F7:FA:FA:0B:16
Certificate issuer: /CN=41467c769bf66ada7d5780a69dce1371be9849de
Certificate serial: 01851BD83F2DD82F9E9A115E7E01541C0A28
Authority key identifier: 41:46:7C:76:9B:F6:6A:DA:7D:57:80:A6:9D:CE:13:71:BE:98:49:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/4bgWSk-iF3_r_jCfSau99_r6CxY.roa
Signing time: Fri 16 Dec 2022 16:50:34 +0000
ROA not before: Fri 16 Dec 2022 16:50:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42031
IP address blocks: 77.105.132.0/24 maxlen: 24
77.105.131.0/24 maxlen: 24
77.105.130.0/24 maxlen: 24
77.105.129.0/24 maxlen: 24
77.105.128.0/24 maxlen: 24
77.105.135.0/24 maxlen: 24
77.105.134.0/24 maxlen: 24
77.105.133.0/24 maxlen: 24
77.105.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1b:d8:3f:2d:d8:2f:9e:9a:11:5e:7e:01:54:1c:0a:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41467c769bf66ada7d5780a69dce1371be9849de
Validity
Not Before: Dec 16 16:50:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e1b8164a4fa2177febfe309f49abbdf7fafa0b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:84:98:ff:6d:a5:e9:02:8e:ad:64:b7:0d:a1:
87:da:6f:24:28:55:a1:a9:0f:a4:63:82:cc:e2:8e:
5b:9d:a7:a7:c4:d7:87:8a:a5:a9:f5:94:50:fb:79:
ad:7a:c8:d9:ca:6a:a8:79:54:cd:85:53:66:0d:79:
42:90:40:58:9a:28:1b:20:52:e9:21:da:be:aa:ac:
da:3c:c1:fe:01:6e:2c:2f:1e:41:b8:7d:e5:2a:e7:
c8:5f:9c:a0:7c:cc:65:9e:8c:29:f4:d1:b2:b6:44:
45:52:37:0d:74:e6:7a:83:3b:71:8e:d9:ff:f1:7d:
60:21:03:94:f3:e2:e0:4f:d3:87:a8:2b:e8:ff:a9:
61:82:5c:be:e4:6a:87:6a:79:88:a1:36:c4:09:fc:
70:5f:2a:09:5d:f4:bc:fa:f6:34:ca:94:79:d1:a7:
d7:98:60:48:36:a7:3c:dc:e8:8f:0c:29:db:dc:e1:
8e:d5:dd:2b:56:dd:65:3d:e8:1e:f8:d2:34:e7:35:
94:37:86:7e:fa:41:39:ef:27:76:5f:67:20:63:ba:
f5:c9:08:3a:84:aa:e0:72:62:5c:6d:8b:9f:4a:f1:
2e:d1:38:14:2a:13:94:e0:e5:fc:d4:cb:0d:04:83:
1f:ce:bd:e5:d1:f2:96:e0:66:18:df:5b:4b:46:7d:
1b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B8:16:4A:4F:A2:17:7F:EB:FE:30:9F:49:AB:BD:F7:FA:FA:0B:16
X509v3 Authority Key Identifier:
keyid:41:46:7C:76:9B:F6:6A:DA:7D:57:80:A6:9D:CE:13:71:BE:98:49:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/4bgWSk-iF3_r_jCfSau99_r6CxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.128.0/21
77.105.144.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:59:57:4e:e3:8f:a8:f1:36:13:35:c8:6b:55:41:3d:4f:55:
5e:74:87:a3:7e:da:91:ca:a9:91:86:b9:ed:53:4d:59:99:ef:
e0:d7:15:7f:86:95:a5:85:cb:10:95:66:17:c8:d2:ef:27:60:
45:bd:70:ef:da:2c:7a:94:09:cf:00:5a:6d:3c:86:82:5b:14:
fd:b6:b2:20:45:ca:35:e2:09:20:a5:56:6f:98:27:42:bc:bd:
bd:4e:85:03:8d:e3:f9:28:d2:69:7e:65:77:40:17:b4:7d:b2:
85:d6:ee:3b:2c:4e:93:51:87:cd:a3:d8:37:3f:5c:66:f5:4f:
e2:e8:6c:5c:ff:6c:65:3e:3f:59:4f:51:f6:a1:8f:90:b6:75:
e9:cc:aa:17:e6:2c:ea:f2:05:93:a5:42:b2:27:5e:76:01:06:
05:bf:c6:9b:e2:d6:47:1d:ae:57:87:5d:46:33:60:8f:aa:bb:
3e:ba:b4:8d:c2:e6:fc:da:6d:5a:ea:48:b8:a8:2c:ae:6f:a6:
95:a3:07:c0:12:99:33:11:db:3a:f4:16:5e:38:9b:e9:cc:8e:
64:27:f5:a0:d4:e9:1c:99:6e:22:6c:f3:1b:ab:b9:38:20:fe:
20:36:06:54:cf:df:ba:51:8a:b5:dc:3c:09:46:19:03:6e:68:
0e:b1:3c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:17 2024 by rpki-client on console-fra.rpki-client.org