Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/9lo86D24hZw3d_EJUR_G4Om3QpE.roa
File: 9lo86D24hZw3d_EJUR_G4Om3QpE.roa (raw, json)
Hash identifier: XQvvlGak8WJiJjkzJCWieLUnAdjOMobzGecPUy5FTZQ=
Subject key identifier: F6:5A:3C:E8:3D:B8:85:9C:37:77:F1:09:51:1F:C6:E0:E9:B7:42:91
Certificate issuer: /CN=41467c769bf66ada7d5780a69dce1371be9849de
Certificate serial: 01842E684FDF03DD56A0CB30F223454F79A5
Authority key identifier: 41:46:7C:76:9B:F6:6A:DA:7D:57:80:A6:9D:CE:13:71:BE:98:49:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/9lo86D24hZw3d_EJUR_G4Om3QpE.roa
Signing time: Mon 31 Oct 2022 14:18:18 +0000
ROA not before: Mon 31 Oct 2022 14:18:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42031
IP address blocks: 77.105.132.0/24 maxlen: 24
77.105.131.0/24 maxlen: 24
77.105.130.0/24 maxlen: 24
77.105.129.0/24 maxlen: 24
77.105.128.0/24 maxlen: 24
77.105.128.0/20 maxlen: 20
77.105.137.0/24 maxlen: 24
77.105.136.0/24 maxlen: 24
77.105.135.0/24 maxlen: 24
77.105.134.0/24 maxlen: 24
77.105.133.0/24 maxlen: 24
77.105.144.0/24 maxlen: 24
77.105.143.0/24 maxlen: 24
77.105.142.0/24 maxlen: 24
77.105.146.0/24 maxlen: 24
77.105.147.0/24 maxlen: 24
185.225.202.0/23 maxlen: 23
185.225.200.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:2e:68:4f:df:03:dd:56:a0:cb:30:f2:23:45:4f:79:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41467c769bf66ada7d5780a69dce1371be9849de
Validity
Not Before: Oct 31 14:18:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f65a3ce83db8859c3777f109511fc6e0e9b74291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ce:95:e1:44:22:82:3a:c0:3e:1e:36:37:2a:
92:ed:ee:33:8f:2d:ae:02:8a:1a:bd:ec:4e:42:27:
38:a9:cf:67:dd:5b:e1:a4:57:5b:45:a8:ec:4b:8f:
f7:d9:06:85:a5:c6:ed:8d:06:20:bc:4f:98:53:c6:
b2:4b:05:d4:ba:70:d7:86:c5:a8:6b:b9:20:b4:45:
0e:36:be:90:36:8d:f2:15:cd:f2:2d:4f:03:98:5e:
03:c9:0c:f4:90:4f:93:35:05:82:79:16:8a:76:a4:
d7:3f:eb:24:76:9a:ce:f9:93:98:45:31:cb:19:0e:
36:5e:48:7f:18:70:32:94:2d:d1:49:1e:2d:7b:77:
76:4e:c7:6b:43:b1:74:f6:83:0b:d3:5f:09:d0:1c:
5c:a2:81:a7:d6:50:04:47:32:c3:e2:69:80:97:f8:
a3:6b:82:f2:29:9f:2d:af:e4:97:ad:93:f4:aa:c1:
be:72:cc:89:8b:04:fb:b6:fd:9a:b9:90:8d:c4:04:
ad:97:c5:7c:ad:9a:31:b2:a9:6b:b6:57:b2:de:90:
82:ac:5b:98:62:54:c1:4e:45:ae:94:6f:ee:31:eb:
82:7d:c6:c0:01:4e:6c:b0:f2:7d:32:37:53:a0:9b:
66:4d:9c:3b:0c:9f:bc:d7:1a:52:49:c4:ec:c8:8d:
7b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:5A:3C:E8:3D:B8:85:9C:37:77:F1:09:51:1F:C6:E0:E9:B7:42:91
X509v3 Authority Key Identifier:
keyid:41:46:7C:76:9B:F6:6A:DA:7D:57:80:A6:9D:CE:13:71:BE:98:49:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/9lo86D24hZw3d_EJUR_G4Om3QpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.128.0-77.105.144.255
77.105.146.0/23
185.225.200.0/22
Signature Algorithm: sha256WithRSAEncryption
bc:67:ad:f4:60:f4:e4:1b:81:a0:bf:92:04:90:de:3f:10:f8:
26:a5:74:66:24:f1:27:49:60:35:f3:9b:02:f7:1f:fb:96:15:
90:6f:cf:c6:dc:13:cb:af:c4:86:bd:0f:35:97:cb:1c:35:bd:
d9:2a:80:4d:6d:54:e6:b6:81:88:37:76:58:ab:22:be:1a:57:
34:0d:83:85:48:01:2e:be:2f:e0:a6:b9:7f:c1:2f:bf:85:cf:
b8:4b:07:7c:f0:cd:e4:77:6f:06:09:30:95:e7:89:e5:fa:02:
b2:1c:74:57:4f:f0:a9:50:29:85:5b:2c:58:f4:c0:f5:40:26:
65:78:48:f0:0b:fd:6b:7f:6e:1a:37:dc:5a:68:3f:a3:46:dc:
98:17:22:3d:af:b4:7f:4a:d8:d5:d9:5c:b7:41:28:30:40:d4:
88:92:1b:c2:91:55:10:ec:c8:68:11:3b:79:cb:68:94:cc:f8:
83:da:2e:fe:52:cf:c4:17:c6:e0:85:88:28:b7:61:a1:eb:74:
7e:f0:51:3d:05:23:16:59:67:ab:64:da:21:15:e1:5f:6e:1e:
40:cd:0e:86:f2:6c:8e:fe:1c:7d:23:89:94:4b:34:3e:ff:c2:
8a:e5:22:a2:83:35:26:2b:15:cd:35:fb:b4:8a:fd:27:03:11:
c9:f6:f4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:17 2024 by rpki-client on console-fra.rpki-client.org