Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/UrSWzYdJ9AM-O5abnIuSpLjjlWg.roa
File: UrSWzYdJ9AM-O5abnIuSpLjjlWg.roa (raw, json)
Hash identifier: osl4399Lo4XS6anZQlG6VvYnwlYDip2NXeJQA381pco=
Subject key identifier: 52:B4:96:CD:87:49:F4:03:3E:3B:96:9B:9C:8B:92:A4:B8:E3:95:68
Certificate issuer: /CN=41467c769bf66ada7d5780a69dce1371be9849de
Certificate serial: 353BF9BE
Authority key identifier: 41:46:7C:76:9B:F6:6A:DA:7D:57:80:A6:9D:CE:13:71:BE:98:49:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/UrSWzYdJ9AM-O5abnIuSpLjjlWg.roa
Signing time: Tue 25 Jan 2022 17:09:39 +0000
ROA not before: Tue 25 Jan 2022 17:09:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42031
IP address blocks: 77.105.132.0/24 maxlen: 24
77.105.131.0/24 maxlen: 24
77.105.130.0/24 maxlen: 24
77.105.129.0/24 maxlen: 24
77.105.128.0/24 maxlen: 24
77.105.128.0/20 maxlen: 20
77.105.137.0/24 maxlen: 24
77.105.136.0/24 maxlen: 24
77.105.135.0/24 maxlen: 24
77.105.134.0/24 maxlen: 24
77.105.133.0/24 maxlen: 24
77.105.144.0/24 maxlen: 24
77.105.143.0/24 maxlen: 24
77.105.146.0/24 maxlen: 24
77.105.152.0/23 maxlen: 23
77.105.151.0/24 maxlen: 24
77.105.147.0/24 maxlen: 24
77.105.159.0/24 maxlen: 24
77.105.158.0/24 maxlen: 24
77.105.157.0/24 maxlen: 24
77.105.156.0/24 maxlen: 24
77.105.154.0/23 maxlen: 23
77.105.172.0/22 maxlen: 22
77.105.176.0/21 maxlen: 21
77.105.184.0/22 maxlen: 22
185.225.202.0/23 maxlen: 23
185.225.200.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 893123006 (0x353bf9be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41467c769bf66ada7d5780a69dce1371be9849de
Validity
Not Before: Jan 25 17:09:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=52b496cd8749f4033e3b969b9c8b92a4b8e39568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3b:35:de:ea:f2:1a:9b:21:28:11:69:f6:d1:
47:8d:1f:85:e1:40:a3:8c:f1:72:2f:ae:86:6c:60:
e9:58:1d:51:82:9b:63:4e:f2:d8:82:88:82:3c:c0:
60:c7:b5:b4:a3:aa:f8:7c:4b:96:74:69:83:03:fa:
dc:f8:4d:b7:7a:7d:80:bc:7f:6c:6b:31:44:29:d6:
7d:bf:0d:a5:72:25:34:e6:8b:be:16:23:8f:93:e0:
3a:f6:1b:a6:a5:1d:bd:2c:a7:17:09:d5:0e:95:c3:
7d:9a:3d:16:84:43:13:93:0c:1f:02:19:39:c6:92:
66:bf:6b:39:a1:33:55:73:a7:01:0b:e7:53:89:f1:
2b:76:3a:5b:7e:fb:67:cf:8e:1f:35:e7:45:54:7f:
89:03:9e:e9:a9:32:32:13:db:01:50:47:35:c5:96:
b4:06:11:65:27:a5:57:5f:c3:bc:e8:0a:23:b4:86:
e4:1f:ae:dd:42:21:d2:f9:ee:68:c2:0d:9d:96:cf:
22:3d:84:93:1c:1c:13:df:49:d7:da:1a:01:1c:ad:
ab:3e:1b:db:16:c7:fa:44:f1:78:95:81:92:4b:73:
36:7a:d9:00:b8:44:d0:90:70:ab:b7:63:e0:67:ac:
a7:80:5a:d9:72:dc:a4:6a:ad:96:b0:81:85:e4:12:
5e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B4:96:CD:87:49:F4:03:3E:3B:96:9B:9C:8B:92:A4:B8:E3:95:68
X509v3 Authority Key Identifier:
keyid:41:46:7C:76:9B:F6:6A:DA:7D:57:80:A6:9D:CE:13:71:BE:98:49:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/UrSWzYdJ9AM-O5abnIuSpLjjlWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.128.0-77.105.144.255
77.105.146.0/23
77.105.151.0-77.105.159.255
77.105.172.0-77.105.187.255
185.225.200.0/22
Signature Algorithm: sha256WithRSAEncryption
31:24:e0:6c:0e:e6:bb:ee:61:42:c0:dd:3e:35:42:38:ca:e9:
ad:02:e9:11:af:b9:82:73:50:b5:c4:5c:c1:1a:87:7e:7e:91:
70:69:2c:48:3b:07:96:8d:86:92:15:56:7f:ed:6d:e7:f9:6a:
c3:af:7d:ba:4a:2e:84:98:68:31:5b:8a:1c:a5:62:f3:e0:f7:
af:50:7c:65:3e:79:aa:e8:1f:d8:0c:af:82:29:3f:66:94:f9:
a0:11:42:6a:42:c9:45:d5:c3:39:38:dc:3a:1c:21:ed:93:e7:
04:5f:6a:d2:2b:0b:08:b1:d2:9e:e1:2b:6c:6c:94:5a:19:c8:
d7:59:aa:19:35:da:08:c7:d3:a2:d1:89:ea:ff:a6:f7:74:dd:
40:fe:42:2d:b0:90:86:1a:96:db:09:15:b9:24:0a:8d:a9:91:
83:4b:a7:f6:99:bf:a7:b4:d3:75:c9:9e:9d:85:92:9e:3a:07:
0a:d9:86:f5:75:9d:89:d6:d4:fa:4e:e2:46:3d:de:2f:5f:08:
d1:47:c3:b1:a8:98:4b:99:b9:45:69:38:0e:e0:02:60:55:df:
0e:83:04:4c:4d:dd:d4:30:e6:f4:0d:c3:db:f3:ad:8b:c8:4b:
f9:1b:0d:91:95:c2:ae:2a:48:9e:d8:a0:55:a8:f1:d1:3c:01:
2f:0d:71:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:03:18 2025 by rpki-client