Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/EK29MklvZd8lgxCm06wtFhgYTm4.roa
File: EK29MklvZd8lgxCm06wtFhgYTm4.roa (raw, json)
Hash identifier: BzTT133eRrM9YOfUguSdDC+5c5qOT3xsmR/BVxg62v8=
Subject key identifier: 10:AD:BD:32:49:6F:65:DF:25:83:10:A6:D3:AC:2D:16:18:18:4E:6E
Certificate issuer: /CN=41467c769bf66ada7d5780a69dce1371be9849de
Certificate serial: 01850617FD09F4494828FA44FB17BC80EB01
Authority key identifier: 41:46:7C:76:9B:F6:6A:DA:7D:57:80:A6:9D:CE:13:71:BE:98:49:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/EK29MklvZd8lgxCm06wtFhgYTm4.roa
Signing time: Mon 12 Dec 2022 11:28:33 +0000
ROA not before: Mon 12 Dec 2022 11:28:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42031
IP address blocks: 77.105.132.0/24 maxlen: 24
77.105.131.0/24 maxlen: 24
77.105.130.0/24 maxlen: 24
77.105.129.0/24 maxlen: 24
77.105.128.0/24 maxlen: 24
77.105.137.0/24 maxlen: 24
77.105.136.0/24 maxlen: 24
77.105.135.0/24 maxlen: 24
77.105.134.0/24 maxlen: 24
77.105.133.0/24 maxlen: 24
77.105.145.0/24 maxlen: 24
77.105.144.0/24 maxlen: 24
77.105.143.0/24 maxlen: 24
77.105.142.0/24 maxlen: 24
77.105.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:06:17:fd:09:f4:49:48:28:fa:44:fb:17:bc:80:eb:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41467c769bf66ada7d5780a69dce1371be9849de
Validity
Not Before: Dec 12 11:28:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=10adbd32496f65df258310a6d3ac2d1618184e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:78:e5:1c:3f:d4:5f:ad:fc:48:10:30:18:af:
7d:13:05:5d:38:ae:84:ff:84:15:c2:c9:ae:46:e0:
1f:dd:38:a8:a4:4e:f4:84:fd:2b:4d:d1:3c:d0:b6:
d1:68:9e:30:19:ba:6a:92:51:f5:f0:fe:2f:07:67:
35:9d:88:44:02:08:01:00:49:cb:4f:66:a6:b5:da:
62:9d:d5:d5:06:9c:af:9b:ba:e1:7f:46:57:e9:c7:
cf:1a:1c:d8:77:1c:81:c9:48:da:d7:96:f1:e1:ed:
bd:5b:37:fb:a1:d5:0d:1d:df:fd:1a:70:a8:ff:ae:
7f:8a:4a:a6:9f:47:a2:69:d8:7e:b9:af:79:a0:c6:
02:ba:24:e2:f9:75:9b:66:46:e7:1d:97:2f:11:95:
f1:be:a0:84:7e:bc:71:73:a8:cc:35:38:14:fe:d8:
28:94:c2:d6:d7:0e:83:d7:df:8a:aa:bb:a0:6c:d7:
32:31:de:a1:fe:5b:89:14:67:40:0d:d8:97:23:d6:
cd:ad:17:c4:ef:e7:f6:f3:f5:c0:06:29:d7:09:76:
ef:ce:9f:0d:55:3c:a9:e0:13:76:8a:fb:85:55:6c:
df:27:c0:fd:92:72:d4:e4:01:58:5c:74:a7:48:92:
61:ea:19:99:cd:0e:39:05:48:4b:23:a8:5d:30:0a:
30:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:AD:BD:32:49:6F:65:DF:25:83:10:A6:D3:AC:2D:16:18:18:4E:6E
X509v3 Authority Key Identifier:
keyid:41:46:7C:76:9B:F6:6A:DA:7D:57:80:A6:9D:CE:13:71:BE:98:49:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/EK29MklvZd8lgxCm06wtFhgYTm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.128.0-77.105.137.255
77.105.142.0-77.105.145.255
77.105.165.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:4e:30:07:5d:83:94:5a:85:b6:ba:74:57:40:7b:b8:4d:6e:
15:0f:e5:00:c5:24:20:77:6c:23:3b:b4:e8:09:9d:25:ef:0a:
d9:52:a9:22:00:94:ad:bd:8b:50:86:65:d9:7b:9e:c6:37:19:
7f:91:77:06:77:e5:d0:0a:62:55:33:95:9c:3a:69:7f:3f:62:
3d:6e:0f:e5:65:96:a6:20:b4:17:d8:23:7c:e9:6f:a4:54:ca:
d7:96:82:30:2a:60:22:3a:96:a6:07:cc:ed:b0:31:d0:44:0c:
35:7a:eb:03:68:a3:0c:32:86:f6:e3:0a:1d:b4:78:e4:36:c3:
92:86:0f:e4:06:b4:13:3b:75:46:77:67:a2:5c:aa:fb:39:e0:
d4:00:aa:17:7e:0c:7c:78:de:b8:22:c1:33:5a:31:b5:2c:af:
17:1f:c1:26:6c:6c:b0:63:94:a4:3e:67:c4:be:99:dc:55:7c:
48:e8:34:94:a0:d9:fa:9f:42:a6:a7:64:3f:6b:97:0f:3a:cb:
b5:fc:63:10:dd:87:f1:93:e7:d6:3f:64:d9:9b:89:e4:d3:ad:
da:a0:fa:a5:81:23:d2:e0:65:a1:cb:02:a8:49:a2:57:f0:d5:
e1:69:35:73:ee:f0:46:a8:56:c2:07:83:05:43:8f:13:d7:9c:
f8:2a:23:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:30 2024 by rpki-client on console-ams.rpki-client.org