Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Q6n8DlEDAgAQu69HZz_lh-ABOr8.roa
File: Q6n8DlEDAgAQu69HZz_lh-ABOr8.roa (raw, json)
Hash identifier: scr2V2MplTGCIctRUwF5hpRqsEvBmPmbbIBQkeK/qcM=
Subject key identifier: 43:A9:FC:0E:51:03:02:00:10:BB:AF:47:67:3F:E5:87:E0:01:3A:BF
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0193867A1CD7A22690F70F8B25C19C729A21
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Q6n8DlEDAgAQu69HZz_lh-ABOr8.roa
Signing time: Mon 02 Dec 2024 08:26:09 +0000
ROA not before: Mon 02 Dec 2024 08:26:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3319
IP address blocks: 77.47.143.0/24 maxlen: 24
77.47.148.0/22 maxlen: 24
77.47.156.0/22 maxlen: 24
77.47.212.0/23 maxlen: 24
77.47.240.0/23 maxlen: 24
77.47.243.0/24 maxlen: 24
77.47.244.0/22 maxlen: 24
185.143.56.0/22 maxlen: 24
195.178.132.0/24 maxlen: 24
195.178.133.0/24 maxlen: 24
195.178.134.0/24 maxlen: 24
195.178.135.0/24 maxlen: 24
195.178.144.0/23 maxlen: 23
195.178.146.0/24 maxlen: 24
195.178.147.0/24 maxlen: 24
195.178.148.0/23 maxlen: 24
195.178.152.0/22 maxlen: 22
195.178.156.0/24 maxlen: 24
212.111.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:86:7a:1c:d7:a2:26:90:f7:0f:8b:25:c1:9c:72:9a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Dec 2 08:26:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=43a9fc0e5103020010bbaf47673fe587e0013abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:77:5e:1d:de:b3:e7:88:57:7e:c5:db:f0:33:
54:cc:a9:8e:09:02:07:ba:eb:78:94:1f:c7:31:fa:
bd:6f:d4:98:52:78:be:91:15:dd:ae:f2:e1:2c:c2:
1e:b0:dd:95:c6:92:98:ec:08:d3:f1:7a:0b:af:6d:
7a:21:ce:bf:7a:2e:b8:4b:ce:56:38:d7:af:06:12:
73:aa:d3:05:b0:35:22:c5:86:b4:67:43:a1:64:86:
5d:b4:ac:e7:e2:2d:c0:00:c8:fd:36:6a:db:44:07:
2c:5e:b7:30:78:25:6b:89:f4:be:d5:3b:14:27:42:
3a:fc:b4:c5:30:1c:25:22:10:10:b8:16:be:1c:b8:
e4:f4:dc:0e:f1:8f:51:e1:3c:08:6e:bf:2f:1d:5c:
06:e5:b1:a0:8d:7c:fc:47:7c:0a:d1:da:83:aa:26:
2b:e9:8b:68:93:25:84:3e:3d:d2:14:ba:a0:f6:04:
d2:ca:27:02:a1:dc:a8:c2:bc:ea:af:9c:37:01:a4:
13:fb:04:c9:03:c5:12:52:12:a6:02:6d:c2:28:a3:
52:48:f9:31:dc:d2:a9:4e:25:92:99:1f:17:31:a4:
55:e5:69:f6:72:70:d6:cc:ad:d1:be:f4:56:85:e7:
7c:01:fd:05:27:1e:4d:e3:50:60:ca:20:bf:0f:e7:
5f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A9:FC:0E:51:03:02:00:10:BB:AF:47:67:3F:E5:87:E0:01:3A:BF
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Q6n8DlEDAgAQu69HZz_lh-ABOr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.143.0/24
77.47.148.0/22
77.47.156.0/22
77.47.212.0/23
77.47.240.0/23
77.47.243.0-77.47.247.255
185.143.56.0/22
195.178.132.0/22
195.178.144.0-195.178.149.255
195.178.152.0-195.178.156.255
212.111.207.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:da:f1:03:6c:b7:52:2a:4e:e6:76:2d:85:4c:bb:f3:3f:ba:
19:6e:03:a2:a5:2a:15:e8:c8:87:de:48:be:e0:36:f2:04:ee:
6e:50:4c:fb:6b:a3:8b:03:57:c7:ef:8d:d3:db:c8:93:af:dd:
e7:bc:9f:85:dc:df:89:00:37:51:f6:78:00:77:ea:df:ae:ab:
47:ac:b4:0d:67:b0:bf:ea:07:0c:55:2e:cf:34:48:cd:c9:2a:
8c:7a:a4:35:7b:72:c8:b9:78:a1:a7:c0:bc:40:31:a9:d9:ed:
f0:f1:76:43:1d:e6:65:1a:e2:15:83:f1:77:7b:b8:d4:3d:01:
f0:35:31:f6:49:13:67:9d:7d:f8:08:40:33:32:64:4e:c5:86:
c9:7c:cc:b1:6e:e9:f4:63:2f:f7:5f:b1:a0:f0:30:a6:95:c8:
d6:7f:ef:38:b2:76:57:57:fe:a7:83:36:96:9a:d8:ca:a2:02:
a7:9e:bb:cc:2a:a7:fe:a5:3a:02:a5:f9:5f:80:4a:82:28:4d:
ad:0d:a9:e6:fa:a1:d7:2d:fe:f1:d6:dc:0c:84:ed:3a:40:54:
20:f4:c0:4c:24:79:c5:45:a1:1a:57:04:b7:5c:1a:c8:fe:1f:
85:b1:51:d5:a3:73:71:03:b1:29:f5:fe:6a:eb:a1:e2:35:25:
15:68:96:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 12:39:45 2025 by rpki-client