Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/CzVK32ipBQEcysfLEyT1AapmZXc.roa
File: CzVK32ipBQEcysfLEyT1AapmZXc.roa (raw, json)
Hash identifier: 5LCWhYriB1pZ3bK7fBdg77OxDlQ4ySDUscJajDGUCps=
Subject key identifier: 0B:35:4A:DF:68:A9:05:01:1C:CA:C7:CB:13:24:F5:01:AA:66:65:77
Certificate issuer: /CN=41467c769bf66ada7d5780a69dce1371be9849de
Certificate serial: 0184A5AD19AA9AE842A4D1C849D0753B4017
Authority key identifier: 41:46:7C:76:9B:F6:6A:DA:7D:57:80:A6:9D:CE:13:71:BE:98:49:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/CzVK32ipBQEcysfLEyT1AapmZXc.roa
Signing time: Wed 23 Nov 2022 18:08:15 +0000
ROA not before: Wed 23 Nov 2022 18:08:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56862
IP address blocks: 77.105.138.0/23 maxlen: 23
77.105.164.0/24 maxlen: 24
77.105.163.0/24 maxlen: 24
77.105.162.0/24 maxlen: 24
77.105.161.0/24 maxlen: 24
77.105.160.0/21 maxlen: 21
77.105.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a5:ad:19:aa:9a:e8:42:a4:d1:c8:49:d0:75:3b:40:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41467c769bf66ada7d5780a69dce1371be9849de
Validity
Not Before: Nov 23 18:08:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b354adf68a905011ccac7cb1324f501aa666577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:67:43:fc:21:59:6c:be:be:bb:0f:b0:24:d0:
23:42:0a:fc:bb:bf:1e:0e:99:1d:a0:08:9a:7c:da:
96:a5:2f:af:bf:23:fe:8b:43:d0:6d:5d:78:30:27:
e0:f8:90:e2:ba:71:1e:5f:8a:51:34:2c:73:3c:e5:
81:f5:b0:bc:59:5b:28:e5:9f:98:52:1d:2c:22:6b:
d6:65:75:7e:ea:47:0b:c2:1d:80:6f:08:43:60:41:
6d:d9:03:96:99:84:9a:d5:c8:5a:b3:03:1e:e2:19:
c6:2f:2d:3d:97:32:e3:c4:b4:69:6a:e0:6c:4c:90:
be:ce:3b:65:36:b9:b9:92:2e:ec:cc:91:c2:0c:7a:
38:58:98:75:9b:d8:58:12:13:fc:d5:45:2e:a7:ad:
ef:60:1b:39:96:db:5d:b4:52:8e:e7:c4:98:df:27:
20:7a:06:b1:be:39:17:08:cb:ab:14:2f:ca:03:9d:
aa:ef:b9:ff:87:1a:9e:ef:a6:64:26:05:82:a4:07:
c6:ca:97:53:21:c7:04:31:ab:1c:a0:f6:c2:b2:e9:
5b:05:14:bf:cd:34:0c:38:bc:22:07:42:30:86:b5:
c3:55:3f:9f:3a:8d:a4:fe:fc:5e:8f:dd:11:53:87:
57:d3:2e:63:ce:ea:75:f3:bb:a5:b0:e6:35:4f:36:
03:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:35:4A:DF:68:A9:05:01:1C:CA:C7:CB:13:24:F5:01:AA:66:65:77
X509v3 Authority Key Identifier:
keyid:41:46:7C:76:9B:F6:6A:DA:7D:57:80:A6:9D:CE:13:71:BE:98:49:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/CzVK32ipBQEcysfLEyT1AapmZXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.138.0/23
77.105.160.0/21
Signature Algorithm: sha256WithRSAEncryption
94:76:23:9b:de:22:17:0f:eb:3c:da:9f:94:80:c3:8c:0e:ac:
60:23:66:64:b9:41:41:67:e8:1c:1b:d8:f0:20:2d:37:a4:8d:
a0:ba:a3:40:c8:a5:ef:e5:34:79:72:01:41:08:82:ab:df:88:
3b:f3:ec:18:70:0e:01:79:9e:df:8e:b4:2f:9d:4f:e1:19:c1:
b7:96:57:0b:e5:49:3b:eb:61:68:0f:3a:2a:52:08:2c:77:8e:
d9:2c:91:c7:85:af:00:1e:15:2f:9e:21:5c:cd:70:06:d1:56:
7e:2e:36:4e:a8:f3:12:e1:86:c1:2d:b3:f6:a2:4c:6b:7f:eb:
1b:4f:0c:96:30:64:08:15:60:9c:fc:ce:10:3a:40:05:50:a4:
fd:d8:c1:cd:64:ea:58:e7:b0:ab:d9:a8:a2:0f:62:a8:64:1b:
39:3a:c1:f7:6c:5f:2f:08:69:fc:d1:47:af:96:4b:b6:16:42:
fc:69:b7:34:eb:18:e2:85:44:cc:2c:df:11:3b:4e:f0:1b:a7:
0a:fb:fc:eb:1f:0d:ce:d4:31:df:71:34:2a:b5:8a:d7:f6:f0:
63:77:2c:bc:b6:89:c7:73:46:af:73:e0:b8:2d:2c:49:1f:0c:
a2:0b:c7:31:68:6f:31:78:0c:fd:fe:a2:63:78:04:f4:fc:c9:
80:a8:e9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:36:47 2025 by rpki-client