Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/IN2K_3iM7evFtV_julSvdkEu9yk.roa
File: IN2K_3iM7evFtV_julSvdkEu9yk.roa (raw, json)
Hash identifier: IQIEWz0EEN2A3/Ad7+74P6xYdi/Sq3l8glk8NjDhX3w=
Subject key identifier: 20:DD:8A:FF:78:8C:ED:EB:C5:B5:5F:E3:BA:54:AF:76:41:2E:F7:29
Certificate issuer: /CN=41467c769bf66ada7d5780a69dce1371be9849de
Certificate serial: 0183EA41135EB28BBC0B58962E10AC94ED14
Authority key identifier: 41:46:7C:76:9B:F6:6A:DA:7D:57:80:A6:9D:CE:13:71:BE:98:49:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/IN2K_3iM7evFtV_julSvdkEu9yk.roa
Signing time: Tue 18 Oct 2022 08:41:16 +0000
ROA not before: Tue 18 Oct 2022 08:41:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42031
IP address blocks: 77.105.132.0/24 maxlen: 24
77.105.131.0/24 maxlen: 24
77.105.130.0/24 maxlen: 24
77.105.129.0/24 maxlen: 24
77.105.128.0/24 maxlen: 24
77.105.128.0/20 maxlen: 20
77.105.137.0/24 maxlen: 24
77.105.136.0/24 maxlen: 24
77.105.135.0/24 maxlen: 24
77.105.134.0/24 maxlen: 24
77.105.133.0/24 maxlen: 24
77.105.144.0/24 maxlen: 24
77.105.143.0/24 maxlen: 24
77.105.142.0/24 maxlen: 24
77.105.146.0/24 maxlen: 24
77.105.152.0/23 maxlen: 23
77.105.151.0/24 maxlen: 24
77.105.150.0/24 maxlen: 24
77.105.147.0/24 maxlen: 24
77.105.154.0/23 maxlen: 23
185.225.202.0/23 maxlen: 23
185.225.200.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ea:41:13:5e:b2:8b:bc:0b:58:96:2e:10:ac:94:ed:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41467c769bf66ada7d5780a69dce1371be9849de
Validity
Not Before: Oct 18 08:41:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=20dd8aff788cedebc5b55fe3ba54af76412ef729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:18:9b:75:47:c1:d5:e2:80:08:01:c2:8e:25:
65:ce:4d:ac:1d:ee:4d:10:27:8b:b5:a8:e3:ce:bc:
20:7d:be:c7:1e:f8:e8:c5:aa:23:17:90:a8:9b:67:
3b:c0:4e:11:a9:19:7c:c8:b9:8a:d1:2b:cb:d7:22:
d2:b9:f2:ba:1a:9b:d2:d5:8f:5e:7c:67:75:a5:50:
95:c7:47:c7:e3:0f:6e:a3:8e:0a:2e:6b:ff:06:cb:
42:44:fa:24:91:de:d7:f3:40:51:00:37:7f:cf:2e:
6c:7c:61:fa:46:85:80:15:b0:76:e3:f5:2e:68:93:
fd:dd:2c:1a:66:05:66:2c:56:8b:70:b5:fd:44:fa:
09:b8:69:f9:3b:61:2c:4e:10:58:61:4c:7e:c5:8e:
b8:93:8a:6d:71:e1:ae:d2:62:18:10:8d:b6:cd:ea:
f7:06:e6:cb:39:0f:3b:ff:fa:69:0c:ba:5d:07:87:
d0:cb:57:42:aa:67:15:d0:77:da:2e:b7:ab:c2:d0:
56:9a:6f:65:d9:fa:80:a7:56:1f:b9:b4:be:e6:80:
6f:38:25:20:d8:db:31:80:c5:d7:10:53:69:8b:84:
4a:d3:bf:f3:93:88:82:c3:cd:33:b1:7c:b8:57:cc:
3b:d7:b9:4d:cd:99:6a:7a:0d:5d:45:ec:ff:6d:02:
a7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:DD:8A:FF:78:8C:ED:EB:C5:B5:5F:E3:BA:54:AF:76:41:2E:F7:29
X509v3 Authority Key Identifier:
keyid:41:46:7C:76:9B:F6:6A:DA:7D:57:80:A6:9D:CE:13:71:BE:98:49:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/IN2K_3iM7evFtV_julSvdkEu9yk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.128.0-77.105.144.255
77.105.146.0/23
77.105.150.0-77.105.155.255
185.225.200.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:f9:d7:60:ac:52:ad:37:a4:a3:bb:bd:bd:71:35:30:1a:88:
e6:74:9b:ef:21:31:0b:bf:24:59:eb:62:c8:81:aa:87:54:80:
73:6e:88:e9:8a:06:b8:37:61:14:eb:2a:d2:f8:a2:96:77:13:
59:c0:73:8e:a6:54:b2:56:a4:95:0b:11:7c:0b:1b:76:4f:d6:
3c:23:44:be:2c:bb:22:ed:65:be:1e:34:3a:3e:fe:da:06:1a:
8d:68:99:20:58:3b:d7:f4:eb:f6:01:cb:50:43:04:8a:59:8b:
5a:2a:8f:5f:ca:94:ee:70:de:72:b7:f3:e1:4b:02:b5:e5:bc:
dd:5b:f4:7e:02:6f:a8:ad:c1:45:57:30:07:09:be:8d:53:cf:
2c:4a:c3:47:d8:5c:75:42:26:76:99:16:97:4d:52:44:f2:a4:
d1:42:36:72:eb:a4:1b:19:ff:7f:f1:2f:da:2e:34:a6:a0:c4:
95:05:e7:25:34:4b:9c:37:27:e3:a8:84:fa:15:d6:86:d4:35:
e3:03:72:58:ce:73:c9:65:28:44:ab:c9:4e:74:8d:20:f9:c5:
c2:0d:81:c6:10:56:c6:46:02:2f:c3:4b:81:6a:e7:76:3a:af:
fa:a2:1c:73:a8:94:0e:27:24:22:3e:7c:76:68:8a:7a:7b:44:
bb:1f:06:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:17 2024 by rpki-client on console-fra.rpki-client.org