Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/447964-0765-4bcb-a760-7248c85e5eb8/1/VI4m10yLSeBZsXtoISG2yd1P_uk.roa
File: VI4m10yLSeBZsXtoISG2yd1P_uk.roa (raw, json)
Hash identifier: BFAztFj/z0ADF6Bh1LKkpbzn8JoIjEOzJnm0B7w0t2U=
Subject key identifier: 54:8E:26:D7:4C:8B:49:E0:59:B1:7B:68:21:21:B6:C9:DD:4F:FE:E9
Certificate issuer: /CN=a0e03c7792a884734ecd34eb42c7c5049f0c769e
Certificate serial: 030AB267
Authority key identifier: A0:E0:3C:77:92:A8:84:73:4E:CD:34:EB:42:C7:C5:04:9F:0C:76:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oOA8d5KohHNOzTTrQsfFBJ8Mdp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/447964-0765-4bcb-a760-7248c85e5eb8/1/VI4m10yLSeBZsXtoISG2yd1P_uk.roa
Signing time: Sat 01 Jan 2022 14:02:30 +0000
ROA not before: Sat 01 Jan 2022 14:02:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57619
IP address blocks: 77.71.112.0/23 maxlen: 23
77.71.112.0/22 maxlen: 22
77.71.112.0/24 maxlen: 24
77.71.113.0/24 maxlen: 24
77.71.114.0/24 maxlen: 24
77.71.114.0/23 maxlen: 23
77.71.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51032679 (0x30ab267)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e03c7792a884734ecd34eb42c7c5049f0c769e
Validity
Not Before: Jan 1 14:02:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=548e26d74c8b49e059b17b682121b6c9dd4ffee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ed:9b:14:09:d3:f6:4f:0a:a6:dc:7b:9a:0e:
74:6b:da:62:74:45:fd:a2:b2:ac:52:54:e3:3d:f4:
3c:09:52:2a:5e:ce:e4:ed:20:a8:ca:df:4e:67:f3:
89:9a:4c:ea:2d:79:12:b3:8a:d3:83:0b:7f:3d:24:
9b:4e:9b:f3:fc:35:f2:3a:7f:73:f5:74:66:ca:d4:
b2:4c:c8:5b:87:2a:2f:9a:e4:37:c0:7b:06:d0:a0:
3a:81:ae:f5:3f:fa:55:81:0c:4e:d2:3c:ab:6b:82:
12:88:27:ef:e5:ed:0c:ed:2c:d9:dc:e2:c5:29:17:
7c:cc:13:f6:23:8f:da:d0:a5:09:40:3f:62:9f:b8:
fb:03:94:3c:4a:41:3a:28:32:e9:c8:d8:39:1e:85:
a6:b5:3e:a1:ce:eb:e3:5c:b7:b7:da:60:7a:c8:08:
18:2e:12:32:df:80:f2:fe:8d:db:ae:91:33:31:04:
5a:3f:17:1b:42:a4:17:81:36:a6:cc:4b:d7:8a:d4:
40:39:9f:80:16:ce:d7:04:01:98:51:22:ef:1f:f1:
c6:7b:04:38:14:45:f7:9b:20:bd:0c:45:de:47:96:
7b:a3:a4:4c:cf:4d:93:45:b7:7e:d8:fa:14:fc:01:
d0:48:77:14:48:06:10:46:8f:af:b5:c6:e6:b5:41:
0b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:8E:26:D7:4C:8B:49:E0:59:B1:7B:68:21:21:B6:C9:DD:4F:FE:E9
X509v3 Authority Key Identifier:
keyid:A0:E0:3C:77:92:A8:84:73:4E:CD:34:EB:42:C7:C5:04:9F:0C:76:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOA8d5KohHNOzTTrQsfFBJ8Mdp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/447964-0765-4bcb-a760-7248c85e5eb8/1/VI4m10yLSeBZsXtoISG2yd1P_uk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/447964-0765-4bcb-a760-7248c85e5eb8/1/oOA8d5KohHNOzTTrQsfFBJ8Mdp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.71.112.0/22
Signature Algorithm: sha256WithRSAEncryption
54:22:80:67:42:b0:f5:13:95:25:f8:d6:3d:7a:b6:a9:53:72:
37:06:be:1e:51:0b:b0:2f:18:b3:4b:ef:c8:52:f8:f9:dc:2b:
7f:a9:6d:7a:59:ad:44:a1:60:b7:15:2e:e8:c0:8d:e0:e0:8e:
9d:ce:3a:9d:89:b4:79:94:70:dc:77:c6:b8:e9:98:d0:6d:b1:
ca:1d:a5:d9:92:1a:6f:af:df:09:92:b5:56:cd:4a:4d:fe:a9:
36:8d:68:36:9a:44:cf:23:23:fe:79:dc:05:9c:c3:f1:8d:c4:
0f:63:8b:7d:a6:2e:20:88:e2:46:52:a7:2b:fe:2a:b0:68:4a:
2e:05:cb:38:c9:cf:1f:91:3a:d6:66:38:27:09:db:7d:d2:74:
f5:09:7d:4b:a0:a0:00:54:03:7f:b0:fe:8e:c6:0f:fb:73:70:
a8:19:8c:ea:e3:4d:d1:31:40:54:5b:8d:98:b8:08:8b:7f:bb:
2a:b8:7e:20:f9:d0:77:cc:82:47:4f:f8:cd:a1:f0:56:0f:20:
88:97:62:3a:da:86:e6:52:97:ad:55:15:f0:f3:ca:40:67:13:
53:03:66:bd:53:9e:6e:a8:81:c3:9d:6d:b3:5b:84:f1:c2:ee:
6d:46:12:e1:2c:5c:55:13:b8:66:04:d8:11:a9:5e:2c:60:5e:
7d:a1:f5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:38 2025 by rpki-client