Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/99QBnNKiYgRACCZ1kyXbnnmId3U.roa
File: 99QBnNKiYgRACCZ1kyXbnnmId3U.roa (raw, json)
Hash identifier: nojGVyJgCp/ZQpMj6rYIKc8vxGReOwYkN5//RsbiZFg=
Subject key identifier: F7:D4:01:9C:D2:A2:62:04:40:08:26:75:93:25:DB:9E:79:88:77:75
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01948A69AEF64CD4EBE003B6457637C62221
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/99QBnNKiYgRACCZ1kyXbnnmId3U.roa
Signing time: Tue 21 Jan 2025 19:49:29 +0000
ROA not before: Tue 21 Jan 2025 19:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44592
IP address blocks: 77.47.143.0/24 maxlen: 24
77.47.148.0/22 maxlen: 24
77.47.156.0/22 maxlen: 24
77.47.240.0/23 maxlen: 24
77.47.243.0/24 maxlen: 24
77.47.244.0/22 maxlen: 24
195.178.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8a:69:ae:f6:4c:d4:eb:e0:03:b6:45:76:37:c6:22:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 21 19:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7d4019cd2a26204400826759325db9e79887775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3f:93:e7:38:a5:11:78:3f:2c:ae:b0:41:17:
dc:60:02:be:57:50:c0:51:5d:34:32:d3:d9:06:1c:
2c:d3:99:2f:0f:1e:98:86:22:0e:23:90:e2:72:be:
d5:4d:4f:e4:3c:c6:75:6a:f1:97:f0:0d:c7:5a:9b:
df:da:f4:56:73:16:55:2b:24:da:e2:6d:cc:7c:86:
03:78:05:44:9c:7a:c4:f2:3d:c5:fd:30:11:40:f7:
c8:68:e4:f5:0f:28:d9:86:00:01:19:20:9a:e7:38:
a0:ad:c3:ef:a1:9a:f0:f1:7e:d4:f2:89:13:20:1c:
d1:cf:76:51:95:09:55:3b:20:3f:00:4c:01:79:34:
e3:6f:98:3d:6a:42:40:04:fd:16:d9:e1:d4:ac:cf:
05:b3:9c:71:52:88:3c:56:af:91:74:cb:03:e1:85:
3b:eb:63:08:47:69:07:c8:1f:6e:2d:6b:59:86:e4:
5c:41:63:ab:55:e9:e8:d0:48:ba:42:a2:b0:22:8d:
80:66:54:fd:8d:f1:71:79:a5:c8:ed:b1:4c:4c:f1:
ad:72:74:f0:73:50:dd:7b:84:2b:56:9c:78:7b:cb:
fc:23:68:39:e7:56:41:13:ce:c3:0f:3a:57:80:1e:
33:5a:37:08:26:14:f7:4f:cf:28:64:06:c6:90:98:
cd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D4:01:9C:D2:A2:62:04:40:08:26:75:93:25:DB:9E:79:88:77:75
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/99QBnNKiYgRACCZ1kyXbnnmId3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.143.0/24
77.47.148.0/22
77.47.156.0/22
77.47.240.0/23
77.47.243.0-77.47.247.255
195.178.146.0/24
Signature Algorithm: sha256WithRSAEncryption
03:91:05:c3:b1:df:0d:13:c7:92:e8:28:e8:9d:4c:78:8b:50:
3f:45:b3:58:33:33:0c:29:3a:00:d4:93:cb:50:50:3e:eb:7d:
ad:a7:3f:24:14:58:ba:59:e4:92:25:24:4c:d1:82:33:cd:1a:
31:72:94:15:3a:6a:b0:f6:20:57:3a:04:5a:f4:c7:6f:3c:0a:
4a:3c:a6:68:0f:04:0c:26:c7:b9:3e:c3:0c:70:ec:d7:ab:45:
e6:e3:4f:0d:dc:be:a6:36:fc:e1:30:87:8c:b5:60:1d:aa:41:
08:ad:52:bc:81:9d:89:22:6b:aa:5a:cb:a6:1c:c3:c4:53:b9:
d8:3a:94:57:17:70:3c:22:c8:74:39:9e:c1:fe:6b:26:20:7e:
d6:0f:de:df:8d:25:11:b2:93:41:f4:4f:b8:23:9a:17:f4:aa:
f7:d1:34:24:6b:2f:ad:a0:6a:52:bf:46:52:ff:67:41:cc:55:
0c:05:84:e3:b1:cb:b5:23:b5:85:a1:e4:86:c1:dd:77:49:a1:
50:7f:23:a5:3a:41:76:c1:b2:9b:db:84:49:d4:5e:ae:d6:99:
cc:b8:2b:0e:0b:86:13:dc:97:09:0b:12:1d:90:c0:26:d2:44:
0a:81:c7:e6:fc:f8:8a:a4:f6:ac:b7:da:a2:32:63:f0:dc:85:
f0:e6:f8:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:41:23 2025 by rpki-client