Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/Y-bYgiKmEB1cm69ta2348lGxbDU.roa
File: Y-bYgiKmEB1cm69ta2348lGxbDU.roa (raw, json)
Hash identifier: 8txL4egPfT9DR6+mlYoPtnkMz5nHcyo2le7/o9yMw9w=
Subject key identifier: 63:E6:D8:82:22:A6:10:1D:5C:9B:AF:6D:6B:6D:F8:F2:51:B1:6C:35
Certificate issuer: /CN=41467c769bf66ada7d5780a69dce1371be9849de
Certificate serial: 0184ED0CF5096E57CB88319C7B82EB48FA2E
Authority key identifier: 41:46:7C:76:9B:F6:6A:DA:7D:57:80:A6:9D:CE:13:71:BE:98:49:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/Y-bYgiKmEB1cm69ta2348lGxbDU.roa
Signing time: Wed 07 Dec 2022 14:46:00 +0000
ROA not before: Wed 07 Dec 2022 14:46:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42031
IP address blocks: 77.105.132.0/24 maxlen: 24
77.105.131.0/24 maxlen: 24
77.105.130.0/24 maxlen: 24
77.105.129.0/24 maxlen: 24
77.105.128.0/24 maxlen: 24
77.105.137.0/24 maxlen: 24
77.105.136.0/24 maxlen: 24
77.105.135.0/24 maxlen: 24
77.105.134.0/24 maxlen: 24
77.105.133.0/24 maxlen: 24
77.105.145.0/24 maxlen: 24
77.105.144.0/24 maxlen: 24
77.105.143.0/24 maxlen: 24
77.105.142.0/24 maxlen: 24
77.105.165.0/24 maxlen: 24
185.225.200.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ed:0c:f5:09:6e:57:cb:88:31:9c:7b:82:eb:48:fa:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41467c769bf66ada7d5780a69dce1371be9849de
Validity
Not Before: Dec 7 14:46:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63e6d88222a6101d5c9baf6d6b6df8f251b16c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b2:46:99:30:2d:c5:b4:b6:9b:bd:7e:28:9e:
b4:49:a0:21:2f:6d:e3:43:c0:d6:01:7b:66:2b:6e:
04:3a:b8:fc:14:0a:0b:86:18:54:6e:ce:d2:b9:6f:
5f:17:f0:37:f4:b4:0a:31:d1:74:6b:90:94:70:ea:
bd:77:c1:16:15:74:72:b2:a7:55:ef:d8:3b:d5:96:
e1:a6:c0:bd:58:ea:84:c4:49:de:8b:8a:fc:d3:31:
ad:ef:9c:e8:ef:22:6c:32:c4:34:e5:77:5b:5c:43:
4b:dc:4a:c0:44:63:23:8c:fe:e4:b3:95:e2:6c:00:
47:6e:f8:df:2d:64:c5:a9:13:4e:89:1e:4c:03:f3:
c3:eb:d3:e5:9d:1f:3d:26:ee:be:80:e3:0c:e0:b9:
00:d6:04:ad:f0:7f:04:48:4a:ec:6d:65:29:c0:17:
7c:6c:21:fb:81:c1:e6:55:fd:6a:bd:13:33:3f:4a:
75:a5:96:b7:00:82:76:6b:28:3d:de:4f:e2:fd:0f:
26:ae:fc:e0:84:ec:83:6e:bb:14:42:87:5e:25:5c:
50:8b:cd:d6:e9:41:5b:af:f5:3b:5e:d2:1b:87:82:
68:a3:96:be:0c:e8:e4:ae:9c:44:19:26:64:c7:b2:
62:f0:c4:c9:eb:f3:cf:e2:82:ec:38:b4:73:00:5e:
6d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E6:D8:82:22:A6:10:1D:5C:9B:AF:6D:6B:6D:F8:F2:51:B1:6C:35
X509v3 Authority Key Identifier:
keyid:41:46:7C:76:9B:F6:6A:DA:7D:57:80:A6:9D:CE:13:71:BE:98:49:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/Y-bYgiKmEB1cm69ta2348lGxbDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.128.0-77.105.137.255
77.105.142.0-77.105.145.255
77.105.165.0/24
185.225.200.0/23
Signature Algorithm: sha256WithRSAEncryption
43:c3:99:a8:7b:95:9e:2f:9b:2b:cd:71:53:47:91:7f:cb:e2:
b6:63:ed:8e:bc:08:32:1c:97:76:c2:99:c1:5f:33:4e:8e:bc:
45:44:0e:63:ba:d3:de:ac:ad:f7:6d:5e:ae:f2:24:99:09:66:
35:91:fe:c4:e5:bb:a6:69:e6:84:61:4d:73:0b:d7:7b:f7:e2:
46:ae:c5:45:68:8c:d8:53:0c:29:3f:3d:19:15:70:f4:b3:cd:
d6:66:75:a1:f4:ef:cb:f5:db:df:c3:f2:bb:a4:ac:da:2e:c3:
dd:ad:cd:b9:90:58:f7:83:1d:35:1f:bc:8b:b5:ef:70:e8:fe:
e5:90:df:36:4c:ea:4a:41:19:91:32:d6:5f:c1:3f:08:a4:ba:
d4:60:14:5f:0a:12:99:63:ba:65:1a:1e:71:de:b2:3d:4f:5b:
26:ae:72:68:56:b5:5b:17:97:b6:64:ef:56:9b:48:f1:93:30:
ac:f6:bc:4d:71:a7:c5:c2:ac:52:9d:cf:f7:e6:8e:42:47:53:
d7:d6:0b:d1:eb:8c:5a:92:39:39:95:80:39:88:de:0c:26:1a:
4d:82:ef:50:18:71:ef:3c:ff:b9:d8:11:3c:bc:f1:cc:1c:70:
7d:4c:a6:fa:2a:ad:02:19:d7:c2:23:02:f5:b2:46:f1:c0:34:
dc:99:e5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:17 2024 by rpki-client on console-fra.rpki-client.org