Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/kAkBUAfNw7SZqlMo4J-BVtWtm5k.roa
File: kAkBUAfNw7SZqlMo4J-BVtWtm5k.roa (raw, json)
Hash identifier: ooXbxLYPb0SHe44wvzPqxxE6mi7iBr4KzynXaJkJyEc=
Subject key identifier: 90:09:01:50:07:CD:C3:B4:99:AA:53:28:E0:9F:81:56:D5:AD:9B:99
Certificate issuer: /CN=41467c769bf66ada7d5780a69dce1371be9849de
Certificate serial: 018507E912E90D2B509CDD4CBABD03EFA210
Authority key identifier: 41:46:7C:76:9B:F6:6A:DA:7D:57:80:A6:9D:CE:13:71:BE:98:49:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/kAkBUAfNw7SZqlMo4J-BVtWtm5k.roa
Signing time: Mon 12 Dec 2022 19:56:33 +0000
ROA not before: Mon 12 Dec 2022 19:56:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56862
IP address blocks: 77.105.164.0/24 maxlen: 24
77.105.163.0/24 maxlen: 24
77.105.162.0/24 maxlen: 24
77.105.161.0/24 maxlen: 24
77.105.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:07:e9:12:e9:0d:2b:50:9c:dd:4c:ba:bd:03:ef:a2:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41467c769bf66ada7d5780a69dce1371be9849de
Validity
Not Before: Dec 12 19:56:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9009015007cdc3b499aa5328e09f8156d5ad9b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:71:26:50:13:f5:d4:9d:f5:04:1b:58:cd:89:
48:b6:11:95:90:1c:43:07:4e:e0:e3:1e:e6:3e:00:
f2:ec:95:79:8f:47:5d:98:98:6f:81:b9:d3:6d:cc:
a6:03:5d:46:72:2f:a3:32:29:e3:30:33:8d:ee:be:
ff:7c:e9:f4:ab:c0:81:a6:d8:3d:97:99:7f:dc:2e:
e1:6b:cf:15:5a:a8:f4:3b:d8:e2:c4:05:8f:25:b5:
4d:1e:2e:22:35:e9:1a:3d:33:df:fc:1e:85:14:21:
25:fa:7c:6f:25:30:50:a6:bc:7f:0f:94:ea:e8:c9:
63:ca:6e:7f:90:d4:dd:15:a0:75:ff:d4:08:7a:f0:
ed:4e:a3:eb:02:e5:7e:da:39:e8:ac:b1:a5:01:ed:
3a:8c:b3:55:2e:05:06:ac:c1:45:55:2f:b9:06:7f:
d2:91:58:14:a3:2d:ff:59:e9:c9:60:c4:37:9e:d2:
f3:a1:39:5c:8f:db:ed:a2:48:73:e3:6c:8b:bb:8c:
21:5a:5e:eb:6b:84:f3:ee:73:d4:ca:04:17:6a:39:
bd:2d:d9:0d:2b:2e:51:80:49:9a:2e:bb:79:36:da:
ea:3e:f2:42:15:27:d5:02:fc:4c:ea:98:a3:f8:c6:
7a:61:99:93:4e:e3:d3:e7:66:fb:9b:ea:12:63:0f:
5b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:09:01:50:07:CD:C3:B4:99:AA:53:28:E0:9F:81:56:D5:AD:9B:99
X509v3 Authority Key Identifier:
keyid:41:46:7C:76:9B:F6:6A:DA:7D:57:80:A6:9D:CE:13:71:BE:98:49:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/kAkBUAfNw7SZqlMo4J-BVtWtm5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.160.0-77.105.164.255
Signature Algorithm: sha256WithRSAEncryption
ab:7d:f1:63:29:62:7c:8e:4d:3f:f7:69:ea:f0:54:f1:45:0e:
cc:fb:5b:5d:c7:ae:89:3a:37:87:fd:7f:a2:a5:01:26:2d:32:
01:d9:cb:9e:53:3a:44:3d:c5:1e:3e:84:71:46:05:12:06:37:
54:b0:fb:35:2a:9a:37:10:6e:0f:aa:82:4b:c9:b4:fb:d4:63:
d4:2f:57:b8:4e:af:19:1e:6c:75:67:de:56:63:c9:48:f8:bb:
46:64:df:bb:cb:64:7e:49:4b:10:67:3c:93:4a:13:67:8d:a8:
a8:7c:ff:62:f0:8e:42:65:9b:6b:5a:7a:4e:5d:74:a7:93:23:
84:f9:84:fa:7c:04:2d:3f:a1:9d:23:c2:59:1c:3d:a9:2a:19:
ee:62:55:7b:a0:0b:3a:fc:3a:90:0e:12:d1:2d:d8:47:8f:76:
88:b2:2e:a1:6c:b4:d8:2a:12:42:ac:c4:dc:6d:d4:af:eb:7d:
c7:53:e3:ef:50:84:06:52:6c:c5:57:b4:ea:8f:50:fc:6d:49:
f7:e5:bc:b1:82:aa:7b:59:8a:43:bc:16:17:a4:08:33:19:1d:
9f:fe:9f:10:75:ce:fa:ce:8b:d8:b3:1c:ba:1a:35:26:24:45:
38:50:09:ab:6d:fa:2c:e3:f1:c0:a8:83:b7:01:27:16:5e:7b:
9e:a8:d1:58
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYUH6RLpDStQnN1Mur0D76IQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxNDY3Yzc2OWJmNjZhZGE3ZDU3ODBhNjlkY2UxMzcxYmU5
ODQ5ZGUwHhcNMjIxMjEyMTk1NjMzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDA5MDE1MDA3Y2RjM2I0OTlhYTUzMjhlMDlmODE1NmQ1YWQ5Yjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHEmUBP11J31BBtYzYlIthGVkBxD
B07g4x7mPgDy7JV5j0ddmJhvgbnTbcymA11Gci+jMinjMDON7r7/fOn0q8CBptg9
l5l/3C7ha88VWqj0O9jixAWPJbVNHi4iNekaPTPf/B6FFCEl+nxvJTBQprx/D5Tq
6Mljym5/kNTdFaB1/9QIevDtTqPrAuV+2jnorLGlAe06jLNVLgUGrMFFVS+5Bn/S
kVgUoy3/WenJYMQ3ntLzoTlcj9vtokhz42yLu4whWl7ra4Tz7nPUygQXajm9LdkN
Ky5RgEmaLrt5NtrqPvJCFSfVAvxM6pij+MZ6YZmTTuPT52b7m+oSYw9bIQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFJAJAVAHzcO0mapTKOCfgVbVrZuZMB8GA1UdIwQY
MBaAFEFGfHab9mrafVeApp3OE3G+mEneMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVVaOGRwdjJhdHA5VjRDbW5jNFRjYjZZU2Q0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS81Y2YzZmQtZTc3ZC00YzgyLWI0Yzct
NTIxNTU2YmU4MTNhLzEva0FrQlVBZk53N1NacWxNbzRKLUJWdFd0bTVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS81Y2YzZmQtZTc3ZC00YzgyLWI0YzctNTIxNTU2YmU4MTNh
LzEvUVVaOGRwdjJhdHA5VjRDbW5jNFRjYjZZU2Q0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAVNaaAD
BABNaaQwDQYJKoZIhvcNAQELBQADggEBAKt98WMpYnyOTT/3aerwVPFFDsz7W13H
rok6N4f9f6KlASYtMgHZy55TOkQ9xR4+hHFGBRIGN1Sw+zUqmjcQbg+qgkvJtPvU
Y9QvV7hOrxkebHVn3lZjyUj4u0Zk37vLZH5JSxBnPJNKE2eNqKh8/2LwjkJlm2ta
ek5ddKeTI4T5hPp8BC0/oZ0jwlkcPakqGe5iVXugCzr8OpAOEtEt2EePdoiyLqFs
tNgqEkKsxNxt1K/rfcdT4+9QhAZSbMVXtOqPUPxtSfflvLGCqntZikO8FhekCDMZ
HZ/+nxB1zvrOi9izHLoaNSYkRThQCatt+izj8cCog7cBJxZee56o0Vg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:17 2024 by rpki-client on console-fra.rpki-client.org