Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/BMmfm8yj_KFhebNamwWixOhDfl4.roa
File: BMmfm8yj_KFhebNamwWixOhDfl4.roa (raw, json)
Hash identifier: YNsO8J95Eucntm4t0MW6eRSLTRLlVHfisisrFjkv2B0=
Subject key identifier: 04:C9:9F:9B:CC:A3:FC:A1:61:79:B3:5A:9B:05:A2:C4:E8:43:7E:5E
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 018895DE46C113DDE70079D3C828E513384E
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/BMmfm8yj_KFhebNamwWixOhDfl4.roa
Signing time: Wed 07 Jun 2023 12:39:12 +0000
ROA not before: Wed 07 Jun 2023 12:39:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211306
IP address blocks: 77.36.56.0/24 maxlen: 24
77.36.54.0/23 maxlen: 23
77.36.88.0/24 maxlen: 24
77.36.2.0/23 maxlen: 23
77.36.4.0/24 maxlen: 24
77.36.7.0/24 maxlen: 24
77.36.5.0/24 maxlen: 24
77.36.6.0/24 maxlen: 24
77.232.218.0/24 maxlen: 24
178.159.146.0/24 maxlen: 24
77.232.216.0/23 maxlen: 23
91.237.49.0/24 maxlen: 24
93.120.44.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:95:de:46:c1:13:dd:e7:00:79:d3:c8:28:e5:13:38:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jun 7 12:39:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=04c99f9bcca3fca16179b35a9b05a2c4e8437e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:84:03:b9:41:30:6a:97:eb:98:26:47:e1:a8:
09:d6:5c:72:36:e2:1b:30:97:c5:15:59:f7:1e:44:
20:9e:bf:2b:4a:fb:ff:ed:a5:b7:e2:25:12:ab:52:
2f:19:bb:11:65:6d:01:1d:bd:63:00:ee:5a:23:18:
86:67:91:52:89:b8:d6:e0:4c:ce:1e:b8:79:c4:f2:
92:c4:b3:c8:61:7d:0c:d1:a7:55:ee:96:31:94:f0:
3b:70:8d:22:95:a9:f7:74:a8:ae:70:3a:35:6e:e1:
93:55:30:cd:a9:1d:14:3d:88:1c:12:aa:3f:17:64:
1d:56:bf:12:d0:c6:95:d8:eb:ad:2d:6c:34:cb:68:
fa:e6:43:28:5b:30:45:82:9d:6a:ce:19:0a:ac:7c:
ae:a7:f6:70:6e:80:c1:f5:04:d8:d0:da:7e:45:d4:
0b:92:7a:4d:2f:50:1e:ea:9d:dc:3c:a6:0a:12:23:
42:ef:5d:e8:60:4a:f9:9e:2e:61:ab:89:03:c1:30:
60:17:97:48:9b:ec:50:7f:8c:6b:82:62:76:5c:92:
be:f3:fa:5c:bf:00:86:75:e7:50:f0:8d:54:22:17:
b0:c9:ba:11:31:9c:a3:7e:95:18:6f:ee:9d:4b:2b:
32:16:ef:e9:c1:d7:dd:d5:49:95:12:53:d9:9d:42:
bf:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C9:9F:9B:CC:A3:FC:A1:61:79:B3:5A:9B:05:A2:C4:E8:43:7E:5E
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/BMmfm8yj_KFhebNamwWixOhDfl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.36.2.0-77.36.7.255
77.36.54.0-77.36.56.255
77.36.88.0/24
77.232.216.0-77.232.218.255
91.237.49.0/24
93.120.44.0/23
178.159.146.0/24
Signature Algorithm: sha256WithRSAEncryption
51:fe:e4:15:8e:d5:6c:42:dd:01:d4:8d:94:5f:01:26:3c:61:
c9:53:63:c8:5b:04:f3:ce:c5:00:f2:f4:91:2f:1c:6d:03:24:
e7:0a:d4:5a:b0:90:00:05:6e:16:f1:1f:b4:e6:d8:49:03:2f:
ae:45:20:c1:bf:f6:13:1e:13:11:a1:1c:21:5f:1c:b5:06:9b:
99:9f:15:60:56:14:63:6e:31:c9:da:13:7a:09:c6:48:4a:c5:
bd:7c:c1:ff:24:ed:85:72:fb:d9:ce:0f:a4:11:69:54:a7:46:
cf:64:7c:5f:8d:d4:52:57:18:90:01:12:b3:4a:f9:04:4b:5d:
30:71:c5:40:d5:a6:1c:43:c0:a2:e3:01:68:48:93:c0:9d:6f:
f0:4d:6e:29:74:ac:b7:12:aa:e4:d4:65:05:c9:09:74:3b:41:
b7:6f:50:9d:53:c5:09:84:2b:f9:c5:35:e4:9c:9d:30:6a:2c:
f1:aa:fc:55:db:e0:49:db:2b:0f:a2:c3:f0:c4:70:b1:91:74:
a3:0e:2d:b7:80:0b:31:a7:11:14:7f:81:64:ae:33:4b:c6:b4:
d8:0c:35:6b:99:78:cd:1a:72:f0:f6:d9:50:be:27:65:23:fd:
8d:17:8f:11:dc:1b:97:13:47:59:f5:ac:8b:59:f9:dd:cd:e7:
fa:42:5c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:13:42 2025 by rpki-client