Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/1-ctrzgJh-cJqsw6-EREqpjeoBk0.roa
File: 1-ctrzgJh-cJqsw6-EREqpjeoBk0.roa (raw, json)
Hash identifier: gSaXgwhl65doBq93kjmOjjOrNeK9OvETw3ei/n5b20s=
Subject key identifier: F9:CB:6B:CE:02:61:F9:C2:6A:B3:0E:BE:11:11:2A:A6:37:A8:06:4D
Certificate issuer: /CN=41467c769bf66ada7d5780a69dce1371be9849de
Certificate serial: 3504D759
Authority key identifier: 41:46:7C:76:9B:F6:6A:DA:7D:57:80:A6:9D:CE:13:71:BE:98:49:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/1-ctrzgJh-cJqsw6-EREqpjeoBk0.roa
Signing time: Sat 01 Jan 2022 09:53:11 +0000
ROA not before: Sat 01 Jan 2022 09:53:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41013
IP address blocks: 77.105.152.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 889509721 (0x3504d759)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41467c769bf66ada7d5780a69dce1371be9849de
Validity
Not Before: Jan 1 09:53:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f9cb6bce0261f9c26ab30ebe11112aa637a8064d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:92:16:63:f7:08:f9:cc:65:e4:a4:cb:95:93:
75:47:a5:e6:7f:0a:1c:32:5e:f6:ea:79:dd:c1:ef:
3f:2a:31:a8:47:52:24:c5:6d:c1:17:bb:d9:11:dc:
d2:f3:48:50:27:4a:07:c4:0e:6b:a6:f2:d5:25:03:
89:56:6c:d0:c5:4e:14:71:97:f7:c4:cf:75:e1:56:
a7:0c:76:07:4d:60:e8:d9:d5:b4:5e:ea:8c:52:51:
c4:c4:d3:3a:2a:c2:69:db:e9:01:5b:6f:d0:1a:dd:
28:03:73:ac:fd:29:e5:5c:60:e8:8f:9c:69:21:e8:
16:e1:2c:16:45:34:23:3e:eb:ca:e3:de:f5:5d:12:
fa:f7:bf:df:3f:6e:94:c5:32:ca:53:b2:d1:5f:b6:
e0:51:9d:36:b6:9d:bd:c4:e7:f8:68:08:de:22:c5:
3b:67:2d:43:7a:10:e4:06:6c:67:46:8a:ce:55:3c:
7c:77:16:3c:49:8d:e7:3a:43:90:57:c2:1c:1e:d1:
5c:b1:49:ec:4b:00:c5:be:e1:b4:fa:0b:78:7e:44:
d1:6c:93:da:92:9f:f6:f0:c0:da:d6:10:fe:73:29:
ff:11:e2:06:00:36:27:8f:53:18:b8:41:3f:23:ce:
24:3c:6d:88:36:d4:48:ed:1c:a9:2c:42:ec:c8:8e:
09:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CB:6B:CE:02:61:F9:C2:6A:B3:0E:BE:11:11:2A:A6:37:A8:06:4D
X509v3 Authority Key Identifier:
keyid:41:46:7C:76:9B:F6:6A:DA:7D:57:80:A6:9D:CE:13:71:BE:98:49:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/1-ctrzgJh-cJqsw6-EREqpjeoBk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.152.0/23
Signature Algorithm: sha256WithRSAEncryption
85:b5:b7:a4:39:42:ac:6e:c2:a7:36:a3:50:7d:02:b4:6d:11:
5d:e1:82:92:6f:cc:36:d8:18:14:99:b7:70:b7:f6:42:e1:a9:
5f:0a:bc:3f:cc:9d:22:75:be:d3:55:71:2b:35:21:1f:94:1f:
7e:9d:51:02:07:11:69:75:9d:32:c1:f1:1f:19:ab:d0:2c:de:
2d:b8:c0:8a:53:33:47:e7:9b:16:2f:2c:cb:c7:3a:9c:a5:02:
a6:db:6f:bf:83:2a:e2:c6:94:44:ec:f1:ac:2a:0b:46:4f:cd:
69:7b:b3:73:85:29:86:72:91:6b:65:f2:f0:f4:65:8a:3d:82:
1b:66:fc:87:e2:ee:29:d9:c0:a4:9b:0e:21:21:d7:5f:9e:08:
06:8e:e4:92:72:4e:4b:d2:82:c7:9d:47:b9:38:3c:f1:d7:0f:
e9:56:c8:bc:77:01:f2:07:47:33:3a:a4:e5:06:51:0e:fa:26:
55:1c:22:9a:c2:d3:e5:76:09:83:d8:67:ce:ab:fb:75:42:0a:
7f:7e:13:96:7b:d9:a8:97:50:77:66:a5:7b:a4:82:86:2b:c6:
25:63:48:22:36:6f:26:29:5b:84:92:bd:5e:4e:c7:1d:9a:2d:
38:b2:d5:2a:cc:f2:36:0c:6f:b9:dd:79:31:96:03:28:27:2e:
e7:49:7e:d2
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIENQTXWTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
MTQ2N2M3NjliZjY2YWRhN2Q1NzgwYTY5ZGNlMTM3MWJlOTg0OWRlMB4XDTIyMDEw
MTA5NTMxMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjljYjZiY2UwMjYx
ZjljMjZhYjMwZWJlMTExMTJhYTYzN2E4MDY0ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPWSFmP3CPnMZeSky5WTdUel5n8KHDJe9up53cHvPyoxqEdS
JMVtwRe72RHc0vNIUCdKB8QOa6by1SUDiVZs0MVOFHGX98TPdeFWpwx2B01g6NnV
tF7qjFJRxMTTOirCadvpAVtv0BrdKANzrP0p5Vxg6I+caSHoFuEsFkU0Iz7ryuPe
9V0S+ve/3z9ulMUyylOy0V+24FGdNradvcTn+GgI3iLFO2ctQ3oQ5AZsZ0aKzlU8
fHcWPEmN5zpDkFfCHB7RXLFJ7EsAxb7htPoLeH5E0WyT2pKf9vDA2tYQ/nMp/xHi
BgA2J49TGLhBPyPOJDxtiDbUSO0cqSxC7MiOCacCAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBT5y2vOAmH5wmqzDr4RESqmN6gGTTAfBgNVHSMEGDAWgBRBRnx2m/Zq2n1X
gKadzhNxvphJ3jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1FVWjhkcHYyYXRwOVY0Q21uYzRUY2I2WVNkNC5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjkvNWNmM2ZkLWU3N2QtNGM4Mi1iNGM3LTUyMTU1NmJlODEzYS8x
LzEtY3RyemdKaC1jSnFzdzYtRVJFcXBqZW9CazAucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I5
LzVjZjNmZC1lNzdkLTRjODItYjRjNy01MjE1NTZiZTgxM2EvMS9RVVo4ZHB2MmF0
cDlWNENtbmM0VGNiNllTZDQuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFNaZgwDQYJKoZIhvcNAQELBQAD
ggEBAIW1t6Q5Qqxuwqc2o1B9ArRtEV3hgpJvzDbYGBSZt3C39kLhqV8KvD/MnSJ1
vtNVcSs1IR+UH36dUQIHEWl1nTLB8R8Zq9As3i24wIpTM0fnmxYvLMvHOpylAqbb
b7+DKuLGlETs8awqC0ZPzWl7s3OFKYZykWtl8vD0ZYo9ghtm/Ifi7inZwKSbDiEh
11+eCAaO5JJyTkvSgsedR7k4PPHXD+lWyLx3AfIHRzM6pOUGUQ76JlUcIprC0+V2
CYPYZ86r+3VCCn9+E5Z72aiXUHdmpXukgoYrxiVjSCI2byYpW4SSvV5Oxx2aLTiy
1SrM8jYMb7ndeTGWAygnLudJftI=
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:03:36 2025 by rpki-client