Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/447964-0765-4bcb-a760-7248c85e5eb8/1/aJYElrIobs2JHhyG2WPD65MRQsI.roa
File: aJYElrIobs2JHhyG2WPD65MRQsI.roa (raw, json)
Hash identifier: DUUkJKfaU0M++N3wINNloE74byze67doTmHnny2EySA=
Subject key identifier: 68:96:04:96:B2:28:6E:CD:89:1E:1C:86:D9:63:C3:EB:93:11:42:C2
Certificate issuer: /CN=a0e03c7792a884734ecd34eb42c7c5049f0c769e
Certificate serial: 018CC94E36E11FA94E957872E35FD9FC9401
Authority key identifier: A0:E0:3C:77:92:A8:84:73:4E:CD:34:EB:42:C7:C5:04:9F:0C:76:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oOA8d5KohHNOzTTrQsfFBJ8Mdp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/447964-0765-4bcb-a760-7248c85e5eb8/1/aJYElrIobs2JHhyG2WPD65MRQsI.roa
Signing time: Tue 02 Jan 2024 08:33:15 +0000
ROA not before: Tue 02 Jan 2024 08:33:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29687
IP address blocks: 185.186.136.0/22 maxlen: 22
185.186.136.0/23 maxlen: 23
185.186.136.0/24 maxlen: 24
185.186.138.0/24 maxlen: 24
185.186.138.0/23 maxlen: 23
185.186.137.0/24 maxlen: 24
185.186.139.0/24 maxlen: 24
77.71.4.0/23 maxlen: 23
77.71.4.0/24 maxlen: 24
77.71.4.0/22 maxlen: 22
77.71.3.0/24 maxlen: 24
77.71.0.0/23 maxlen: 23
77.71.0.0/22 maxlen: 22
77.71.0.0/24 maxlen: 24
77.71.0.0/20 maxlen: 20
77.71.2.0/24 maxlen: 24
77.71.1.0/24 maxlen: 24
77.71.2.0/23 maxlen: 23
77.71.5.0/24 maxlen: 24
77.71.7.0/24 maxlen: 24
77.71.6.0/23 maxlen: 23
77.71.6.0/24 maxlen: 24
77.71.9.0/24 maxlen: 24
77.71.8.0/23 maxlen: 23
77.71.8.0/22 maxlen: 22
77.71.8.0/24 maxlen: 24
77.71.11.0/24 maxlen: 24
77.71.10.0/24 maxlen: 24
77.71.10.0/23 maxlen: 23
77.71.12.0/22 maxlen: 22
77.71.16.0/20 maxlen: 20
77.71.16.0/21 maxlen: 21
77.71.12.0/23 maxlen: 23
77.71.12.0/24 maxlen: 24
77.71.14.0/23 maxlen: 23
77.71.14.0/24 maxlen: 24
77.71.13.0/24 maxlen: 24
77.71.16.0/22 maxlen: 22
77.71.15.0/24 maxlen: 24
77.71.16.0/23 maxlen: 23
77.71.18.0/23 maxlen: 23
77.71.20.0/23 maxlen: 23
77.71.20.0/22 maxlen: 22
77.71.22.0/23 maxlen: 23
77.71.24.0/23 maxlen: 23
77.71.24.0/22 maxlen: 22
77.71.24.0/21 maxlen: 21
77.71.26.0/23 maxlen: 23
77.71.28.0/23 maxlen: 23
77.71.28.0/22 maxlen: 22
77.71.30.0/23 maxlen: 23
77.71.32.0/24 maxlen: 24
77.71.32.0/21 maxlen: 21
77.71.33.0/24 maxlen: 24
77.71.32.0/20 maxlen: 20
77.71.32.0/22 maxlen: 22
77.71.38.0/24 maxlen: 24
77.71.35.0/24 maxlen: 24
77.71.34.0/24 maxlen: 24
77.71.37.0/24 maxlen: 24
77.71.36.0/24 maxlen: 24
77.71.36.0/22 maxlen: 22
77.71.92.0/22 maxlen: 22
77.71.92.0/23 maxlen: 23
77.71.94.0/23 maxlen: 23
77.71.94.0/24 maxlen: 24
77.71.95.0/24 maxlen: 24
77.71.117.0/24 maxlen: 24
77.71.116.0/24 maxlen: 24
77.71.116.0/22 maxlen: 22
77.71.116.0/23 maxlen: 23
77.71.118.0/23 maxlen: 23
77.71.118.0/24 maxlen: 24
77.71.120.0/23 maxlen: 23
77.71.120.0/22 maxlen: 22
77.71.120.0/24 maxlen: 24
77.71.119.0/24 maxlen: 24
77.71.120.0/21 maxlen: 21
77.71.122.0/24 maxlen: 24
77.71.122.0/23 maxlen: 23
77.71.121.0/24 maxlen: 24
77.71.124.0/24 maxlen: 24
77.71.125.0/24 maxlen: 24
77.71.124.0/23 maxlen: 23
77.71.124.0/22 maxlen: 22
77.71.123.0/24 maxlen: 24
77.71.127.0/24 maxlen: 24
77.71.126.0/23 maxlen: 23
77.71.126.0/24 maxlen: 24
77.71.40.0/22 maxlen: 22
77.71.40.0/24 maxlen: 24
77.71.39.0/24 maxlen: 24
77.71.40.0/21 maxlen: 21
77.71.42.0/24 maxlen: 24
77.71.41.0/24 maxlen: 24
77.71.44.0/24 maxlen: 24
77.71.44.0/22 maxlen: 22
77.71.43.0/24 maxlen: 24
77.71.46.0/24 maxlen: 24
77.71.45.0/24 maxlen: 24
77.71.47.0/24 maxlen: 24
77.71.49.0/24 maxlen: 24
77.71.48.0/20 maxlen: 20
77.71.48.0/21 maxlen: 21
77.71.48.0/22 maxlen: 22
77.71.48.0/24 maxlen: 24
77.71.51.0/24 maxlen: 24
77.71.50.0/24 maxlen: 24
77.71.58.0/24 maxlen: 24
77.71.52.0/24 maxlen: 24
77.71.52.0/22 maxlen: 22
77.71.54.0/24 maxlen: 24
77.71.53.0/24 maxlen: 24
77.71.56.0/24 maxlen: 24
77.71.56.0/22 maxlen: 22
77.71.56.0/21 maxlen: 21
77.71.57.0/24 maxlen: 24
77.71.55.0/24 maxlen: 24
77.71.64.0/20 maxlen: 20
77.71.59.0/24 maxlen: 24
77.71.61.0/24 maxlen: 24
77.71.60.0/22 maxlen: 22
77.71.60.0/24 maxlen: 24
77.71.63.0/24 maxlen: 24
77.71.62.0/24 maxlen: 24
77.71.64.0/24 maxlen: 24
77.71.64.0/22 maxlen: 22
77.71.64.0/21 maxlen: 21
77.71.66.0/24 maxlen: 24
77.71.65.0/24 maxlen: 24
77.71.68.0/22 maxlen: 22
77.71.68.0/24 maxlen: 24
77.71.67.0/24 maxlen: 24
77.71.70.0/24 maxlen: 24
77.71.69.0/24 maxlen: 24
77.71.71.0/24 maxlen: 24
77.71.72.0/23 maxlen: 23
77.71.73.0/24 maxlen: 24
77.71.72.0/22 maxlen: 22
77.71.78.0/24 maxlen: 24
77.71.78.0/23 maxlen: 23
77.71.72.0/24 maxlen: 24
77.71.75.0/24 maxlen: 24
77.71.74.0/23 maxlen: 23
77.71.74.0/24 maxlen: 24
77.71.77.0/24 maxlen: 24
77.71.76.0/24 maxlen: 24
77.71.76.0/22 maxlen: 22
77.71.76.0/23 maxlen: 23
77.71.84.0/24 maxlen: 24
77.71.80.0/23 maxlen: 23
77.71.80.0/22 maxlen: 22
77.71.79.0/24 maxlen: 24
77.71.85.0/24 maxlen: 24
77.71.82.0/24 maxlen: 24
77.71.82.0/23 maxlen: 23
77.71.84.0/23 maxlen: 23
77.71.84.0/22 maxlen: 22
77.71.83.0/24 maxlen: 24
77.71.87.0/24 maxlen: 24
77.71.86.0/23 maxlen: 23
77.71.86.0/24 maxlen: 24
77.71.88.0/21 maxlen: 21
77.71.88.0/23 maxlen: 23
77.71.88.0/22 maxlen: 22
77.71.90.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:36:e1:1f:a9:4e:95:78:72:e3:5f:d9:fc:94:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e03c7792a884734ecd34eb42c7c5049f0c769e
Validity
Not Before: Jan 2 08:33:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=68960496b2286ecd891e1c86d963c3eb931142c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d4:2e:8a:6c:35:2d:d1:78:c5:67:c7:9c:d2:
e9:00:46:92:c4:45:63:fa:5f:75:e5:38:8b:55:79:
cc:23:29:95:9c:c9:e2:86:30:88:60:a8:e9:03:c0:
d5:56:59:77:01:d4:4f:01:4e:cc:97:29:70:61:50:
ac:dc:23:23:9d:92:07:a4:be:e0:b4:62:ac:4a:97:
36:2b:52:fa:8a:50:c0:91:ef:73:31:2d:40:08:be:
77:63:42:06:b4:fd:4f:21:4c:12:26:54:fd:85:9b:
0d:18:8f:7e:a1:d4:c7:21:72:2b:3a:b3:a5:2e:94:
b1:4a:b3:18:5b:d8:00:20:d4:3e:90:3c:9f:f3:44:
de:37:de:ad:e3:28:bd:4b:83:1b:f3:ba:4d:df:c4:
60:42:c1:6e:ed:5f:35:58:77:0f:dd:ae:65:05:93:
b0:a3:c8:c2:e2:ed:c6:e0:fe:ff:84:74:9f:a4:76:
96:ce:de:4d:cd:c5:b1:58:f2:3e:76:83:17:1f:06:
34:bd:4e:4c:fa:15:cb:94:39:11:86:7f:1a:bc:ce:
cb:69:58:39:6b:d1:dc:83:76:ba:75:10:a6:d4:f1:
fe:bd:54:67:6a:aa:9c:f0:04:45:10:44:7a:d9:dd:
d0:67:31:4c:47:96:93:13:6d:d7:f9:55:a0:a8:4a:
99:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:96:04:96:B2:28:6E:CD:89:1E:1C:86:D9:63:C3:EB:93:11:42:C2
X509v3 Authority Key Identifier:
keyid:A0:E0:3C:77:92:A8:84:73:4E:CD:34:EB:42:C7:C5:04:9F:0C:76:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOA8d5KohHNOzTTrQsfFBJ8Mdp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/447964-0765-4bcb-a760-7248c85e5eb8/1/aJYElrIobs2JHhyG2WPD65MRQsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/447964-0765-4bcb-a760-7248c85e5eb8/1/oOA8d5KohHNOzTTrQsfFBJ8Mdp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.71.0.0-77.71.95.255
77.71.116.0-77.71.127.255
185.186.136.0/22
Signature Algorithm: sha256WithRSAEncryption
16:5d:97:a7:95:cd:e8:77:3b:a5:3e:00:55:30:7d:fe:e3:48:
3a:cc:b3:9a:bd:0e:aa:52:50:de:ef:92:2a:0c:7f:c0:a4:92:
ee:14:86:14:74:d4:e6:07:44:df:46:34:38:41:fa:80:8d:8f:
1d:7b:46:4f:ca:0b:29:67:5b:76:f6:be:70:ac:5c:c9:12:a6:
d8:07:ae:6e:5b:58:a6:a8:ca:ba:d3:2b:ff:5f:6e:f3:7a:b1:
ba:ef:eb:2d:a0:be:bc:b5:99:1e:96:82:2e:d0:1f:42:41:38:
36:f5:7c:c3:48:ec:63:53:32:be:cc:5c:ec:3b:12:37:ce:25:
bc:5b:2b:ad:c2:86:00:b6:e7:74:9f:96:81:7d:ab:ff:a2:80:
4a:f5:8b:7f:98:c0:e5:ae:0b:73:aa:8a:75:ca:e3:b3:90:13:
04:81:63:b8:01:2f:d2:44:6e:5a:9d:5c:41:75:94:12:2a:03:
33:60:71:2f:73:44:88:1f:7b:e9:9e:fe:7c:11:4b:d4:9c:87:
df:5e:dc:79:58:84:2b:3f:ed:20:77:21:be:be:dc:d2:db:70:
5c:44:55:19:dc:17:97:a2:c5:18:9b:89:5f:ba:6c:8c:73:80:
7b:2d:5c:03:ad:69:1f:38:76:b1:93:50:55:f5:f2:86:4d:65:
d1:63:6c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:12:58 2025 by rpki-client