Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/HCwbjhnoKr1Up2fx1PWt7LWnCwI.roa
File: HCwbjhnoKr1Up2fx1PWt7LWnCwI.roa (raw, json)
Hash identifier: Up982xuSxjLfvBXJmG5jbbhUvaZ8EJNi4epwnmntmnc=
Subject key identifier: 1C:2C:1B:8E:19:E8:2A:BD:54:A7:67:F1:D4:F5:AD:EC:B5:A7:0B:02
Certificate issuer: /CN=41467c769bf66ada7d5780a69dce1371be9849de
Certificate serial: 01851B2D0D623043503B7AC9003D8ECD4CE9
Authority key identifier: 41:46:7C:76:9B:F6:6A:DA:7D:57:80:A6:9D:CE:13:71:BE:98:49:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/HCwbjhnoKr1Up2fx1PWt7LWnCwI.roa
Signing time: Fri 16 Dec 2022 13:43:35 +0000
ROA not before: Fri 16 Dec 2022 13:43:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42031
IP address blocks: 77.105.132.0/24 maxlen: 24
77.105.131.0/24 maxlen: 24
77.105.130.0/24 maxlen: 24
77.105.129.0/24 maxlen: 24
77.105.128.0/24 maxlen: 24
77.105.135.0/24 maxlen: 24
77.105.134.0/24 maxlen: 24
77.105.133.0/24 maxlen: 24
77.105.145.0/24 maxlen: 24
77.105.144.0/24 maxlen: 24
77.105.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1b:2d:0d:62:30:43:50:3b:7a:c9:00:3d:8e:cd:4c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41467c769bf66ada7d5780a69dce1371be9849de
Validity
Not Before: Dec 16 13:43:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1c2c1b8e19e82abd54a767f1d4f5adecb5a70b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c8:f5:19:16:64:79:8a:e2:de:b7:a7:bb:18:
8d:d2:ef:2a:df:3a:1f:c5:85:f7:42:21:99:9a:cf:
ac:9c:2e:f2:3e:79:fc:a2:20:fb:70:b7:16:75:c6:
70:57:e8:61:f4:f0:9f:51:bf:eb:f2:65:01:cf:ab:
2a:c5:7e:90:c7:04:10:fb:73:19:f5:13:f0:5c:67:
14:05:55:c0:a3:fb:cb:b2:e0:fe:4b:75:24:41:3d:
65:0b:63:d3:90:84:df:02:e3:ab:61:f8:d2:ba:22:
df:1e:35:4f:5a:c1:c4:3a:c8:ef:01:fd:34:9e:2b:
3b:cb:1a:90:12:e4:32:53:e8:39:ec:78:dd:20:8d:
fb:d7:14:7b:db:2d:ac:ad:c1:93:82:de:72:72:d0:
56:9d:48:55:f9:3a:c9:4d:49:d6:6e:61:52:2b:04:
52:85:5c:75:b6:d5:07:84:10:86:0a:71:30:47:4b:
cf:08:5b:1c:7e:f9:d3:d0:ee:52:28:82:22:a0:bf:
c3:56:b7:2a:09:99:00:fb:8c:60:8b:e4:93:d5:4f:
7f:66:40:23:3a:14:90:be:13:27:b2:f2:24:99:ef:
63:6b:7e:90:01:97:b2:b7:d8:bc:b1:50:47:3f:c2:
ef:ca:1e:77:aa:96:04:9b:bd:4a:2c:0f:c2:7b:3b:
38:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:2C:1B:8E:19:E8:2A:BD:54:A7:67:F1:D4:F5:AD:EC:B5:A7:0B:02
X509v3 Authority Key Identifier:
keyid:41:46:7C:76:9B:F6:6A:DA:7D:57:80:A6:9D:CE:13:71:BE:98:49:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/HCwbjhnoKr1Up2fx1PWt7LWnCwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.128.0/21
77.105.144.0/23
77.105.165.0/24
Signature Algorithm: sha256WithRSAEncryption
08:f8:e6:18:bd:71:b1:2d:b2:c1:f3:84:10:aa:cd:f0:4e:56:
21:e8:69:49:af:eb:16:3f:e0:74:0e:01:38:61:5b:16:fa:8e:
87:f5:b4:e8:b6:30:7d:02:ca:cb:f3:1a:0d:6a:8e:c6:0b:3c:
e0:e5:65:0f:b7:5e:a7:ce:6c:78:e1:44:df:5a:e2:f3:48:64:
9c:32:61:87:35:6a:10:bb:ab:f9:29:15:6c:ee:d8:74:18:9c:
41:98:ab:6b:9e:c6:ca:35:5e:70:ae:76:51:84:62:2e:d4:98:
52:81:c3:89:f2:18:db:6b:53:81:1a:f4:ae:8c:ac:03:2c:69:
83:a1:2b:47:b1:72:40:78:12:6e:32:e8:ec:c5:13:a5:dd:16:
a0:bd:c9:27:0f:9e:35:e1:c6:e4:63:ef:36:94:18:cd:89:53:
41:2c:c4:05:4b:1e:ee:87:27:2c:0f:9b:f4:cc:a7:05:63:47:
f6:85:29:19:b6:a7:4c:b1:45:76:5e:21:ae:65:3e:44:61:60:
f8:6c:0a:a4:11:17:ee:f1:d2:ba:3c:09:8e:47:8c:6e:87:51:
51:1b:3e:96:81:38:7c:b9:b1:16:e8:0f:4f:7c:af:65:ba:ac:
f5:8a:cb:95:3f:18:76:f4:3d:24:66:62:9f:c0:e1:a1:53:47:
61:91:a6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:17 2024 by rpki-client on console-fra.rpki-client.org