Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/4pu4sTL28CjzAGq3yFOX9-etF9I.roa
File: 4pu4sTL28CjzAGq3yFOX9-etF9I.roa (raw, json)
Hash identifier: t+TseQ1KO9e8/Fxfa+6xMFEvVz9NTpFFjZUC+LzZcjE=
Subject key identifier: E2:9B:B8:B1:32:F6:F0:28:F3:00:6A:B7:C8:53:97:F7:E7:AD:17:D2
Certificate issuer: /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial: 0182A5918B21ECE74C476D5CF44BC0380ACE
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/4pu4sTL28CjzAGq3yFOX9-etF9I.roa
Signing time: Tue 16 Aug 2022 07:32:35 +0000
ROA not before: Tue 16 Aug 2022 07:32:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 77.83.105.0/24 maxlen: 24
77.83.104.0/24 maxlen: 24
77.83.104.0/23 maxlen: 24
194.150.204.0/23 maxlen: 24
77.83.106.0/24 maxlen: 24
77.83.106.0/23 maxlen: 24
77.83.107.0/24 maxlen: 24
45.65.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a5:91:8b:21:ec:e7:4c:47:6d:5c:f4:4b:c0:38:0a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
Validity
Not Before: Aug 16 07:32:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e29bb8b132f6f028f3006ab7c85397f7e7ad17d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a1:d6:df:ee:47:26:bd:f7:e6:7b:5f:46:34:
26:da:d1:05:97:18:b2:ab:22:cc:21:7d:6b:d1:ee:
d5:59:aa:bd:a1:e1:85:aa:52:6e:28:58:af:64:74:
d8:52:79:b7:a1:95:47:b1:96:fe:b2:5a:28:8b:b9:
db:0a:5a:13:d8:23:21:a8:38:12:9a:1c:4d:a7:34:
1b:e2:0a:e0:58:cf:56:6e:08:34:b7:eb:08:fb:fe:
7c:e3:8b:ea:51:3a:a2:9d:a2:ce:99:d2:6a:94:73:
d1:9d:5a:75:af:40:68:55:49:83:a5:7a:49:15:33:
2b:67:60:9a:04:41:73:46:57:a3:7b:9d:62:39:c3:
a7:ac:f8:58:9e:3f:d6:21:3b:91:8c:5b:5f:69:cf:
47:94:ab:ee:98:55:db:dc:c5:1e:0d:1d:a2:4b:15:
d3:d3:53:1f:7d:31:45:c9:f7:b1:25:2c:ed:a3:eb:
a0:1f:a2:2a:26:d4:f8:ac:3f:85:8a:ef:26:b6:01:
23:9b:2e:f5:01:d8:20:41:8f:4a:37:26:ea:45:47:
b7:95:44:e8:a3:02:10:d5:3a:ba:c1:97:4f:a7:47:
cb:05:3b:80:59:a7:f2:1b:73:16:0b:6f:7c:e2:c0:
62:7b:27:eb:46:fa:45:49:05:8f:9f:28:90:73:49:
eb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:9B:B8:B1:32:F6:F0:28:F3:00:6A:B7:C8:53:97:F7:E7:AD:17:D2
X509v3 Authority Key Identifier:
keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/4pu4sTL28CjzAGq3yFOX9-etF9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.116.0/22
77.83.104.0/22
194.150.204.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:6c:2e:51:b5:28:39:94:41:af:e4:e9:b4:26:38:04:86:0c:
69:e8:09:62:51:2f:d8:d8:88:7e:ea:d8:66:71:47:a9:dc:2a:
84:b5:e8:b0:64:50:b6:b0:d2:d9:12:08:c9:b0:04:2a:a1:9f:
60:b9:c1:00:37:e1:ab:23:9f:8a:7e:86:5a:2d:68:d5:39:ba:
3a:b5:7c:40:ed:54:68:8f:05:99:bb:52:25:ef:27:44:f4:b0:
20:a2:bc:fe:ee:3a:48:6e:6d:5a:00:ec:19:f2:0a:e3:ed:a6:
76:37:db:66:01:c9:03:66:43:15:3b:0a:83:03:68:b2:0e:07:
58:11:89:ca:a0:33:09:41:3e:14:07:99:4f:ef:45:f5:82:c1:
7f:91:76:59:95:8d:ca:96:13:d1:d4:05:ab:d2:d2:f6:46:6d:
e7:7d:c0:e7:53:4e:09:77:4c:c4:50:9d:f1:cc:99:9f:bc:86:
4a:00:71:92:52:3e:ff:e4:57:e7:d1:12:c1:ea:d5:b2:93:cd:
c7:1a:71:be:0b:8f:d7:89:87:97:8a:91:20:3c:0c:7b:d7:95:
fc:5d:f3:0a:3c:38:52:b1:2c:cb:e7:48:d9:5a:50:8f:e7:fd:
57:e0:e3:87:38:f7:2b:d7:e0:92:ac:c4:96:0f:38:71:6d:22:
c4:7d:5a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:10 2025 by rpki-client