Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/kUc_9kgPTiKtXFRFjjYVoyIhFYc.roa
File: kUc_9kgPTiKtXFRFjjYVoyIhFYc.roa (raw, json)
Hash identifier: 41bEkY9kvvQe9yEm+v5y3TQKdPASINyn4SZjdDYzIps=
Subject key identifier: 91:47:3F:F6:48:0F:4E:22:AD:5C:54:45:8E:36:15:A3:22:21:15:87
Certificate issuer: /CN=41467c769bf66ada7d5780a69dce1371be9849de
Certificate serial: 0184EB7BF50A7BD61A2CB4178387DEC4AE51
Authority key identifier: 41:46:7C:76:9B:F6:6A:DA:7D:57:80:A6:9D:CE:13:71:BE:98:49:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/kUc_9kgPTiKtXFRFjjYVoyIhFYc.roa
Signing time: Wed 07 Dec 2022 07:28:00 +0000
ROA not before: Wed 07 Dec 2022 07:28:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42031
IP address blocks: 77.105.132.0/24 maxlen: 24
77.105.131.0/24 maxlen: 24
77.105.130.0/24 maxlen: 24
77.105.129.0/24 maxlen: 24
77.105.128.0/24 maxlen: 24
77.105.137.0/24 maxlen: 24
77.105.136.0/24 maxlen: 24
77.105.135.0/24 maxlen: 24
77.105.134.0/24 maxlen: 24
77.105.133.0/24 maxlen: 24
77.105.145.0/24 maxlen: 24
77.105.144.0/24 maxlen: 24
77.105.143.0/24 maxlen: 24
77.105.142.0/24 maxlen: 24
185.225.200.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:eb:7b:f5:0a:7b:d6:1a:2c:b4:17:83:87:de:c4:ae:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41467c769bf66ada7d5780a69dce1371be9849de
Validity
Not Before: Dec 7 07:28:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=91473ff6480f4e22ad5c54458e3615a322211587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:7b:9d:d4:d5:12:99:21:23:36:bb:ee:ca:b8:
f1:1d:4f:55:c6:6c:e8:86:62:11:52:15:ae:24:d3:
9d:4b:50:b4:62:8f:33:d7:f4:c9:d9:33:f9:a3:b5:
e3:f2:11:77:30:eb:7c:03:ae:6b:56:e6:ed:a8:45:
83:91:7e:57:b0:a4:47:67:08:84:37:6d:d8:95:3f:
14:fa:c8:11:73:73:74:45:45:4a:66:a5:62:21:64:
95:dc:91:19:03:cb:55:56:c5:24:e7:7d:88:5b:e8:
76:c3:26:49:4d:b9:66:72:15:e4:fe:a2:33:71:e3:
45:98:25:82:a1:be:4e:13:e9:ca:09:a6:36:98:e4:
0c:f9:47:23:56:82:d6:5b:7a:f0:f3:df:5c:b1:5e:
a5:dc:1b:b8:e8:95:d8:ca:fb:c6:1d:28:23:23:84:
58:a3:8b:51:4f:e1:cc:b5:a5:7b:4f:fc:92:46:b9:
91:57:a4:63:0f:ae:95:78:61:cb:6f:e4:8e:72:67:
10:81:f2:38:79:8a:a6:9f:7d:b1:2a:07:cd:6f:00:
d5:bc:18:1a:3c:2a:29:9b:40:cf:bd:90:73:f8:69:
ff:9d:4c:08:94:25:81:2f:d2:39:d6:17:0f:6e:7e:
da:6b:b4:7e:f2:1a:76:b2:7f:ea:3f:a2:72:e9:53:
38:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:47:3F:F6:48:0F:4E:22:AD:5C:54:45:8E:36:15:A3:22:21:15:87
X509v3 Authority Key Identifier:
keyid:41:46:7C:76:9B:F6:6A:DA:7D:57:80:A6:9D:CE:13:71:BE:98:49:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/kUc_9kgPTiKtXFRFjjYVoyIhFYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.128.0-77.105.137.255
77.105.142.0-77.105.145.255
185.225.200.0/23
Signature Algorithm: sha256WithRSAEncryption
c4:ac:8a:4c:1b:f7:23:26:32:cb:f1:5c:cc:a3:10:7b:77:7c:
eb:cd:2c:83:e6:3d:dc:f5:54:cd:46:ca:99:52:08:25:c8:34:
51:d5:40:ee:c1:8c:6b:5f:84:e8:ff:c0:66:51:29:d8:8d:95:
41:ab:ee:53:65:3a:fe:af:4b:ed:6a:02:ae:d0:9e:e7:f3:ce:
4f:61:25:27:7e:07:f0:d9:8f:d6:50:54:c3:83:b7:84:63:71:
50:95:60:d6:0b:bb:6f:e7:e7:20:54:0a:3c:1b:40:86:2f:96:
bf:19:0f:70:5c:c8:77:39:14:63:43:74:7f:8f:be:6f:a6:3b:
1a:4b:01:10:f4:3f:d7:7e:4d:e5:1c:49:84:0f:9b:20:3a:44:
ab:83:28:59:af:9f:3d:96:fe:b5:2f:d7:d3:53:34:f8:af:3a:
a3:38:94:3c:1d:f3:a3:20:eb:15:ad:72:d5:57:08:4c:8f:f3:
dc:29:f2:2e:56:2b:07:47:77:bb:1e:4d:f6:52:f0:7e:c7:89:
53:9b:a6:84:71:3e:f6:8d:95:f2:d4:60:b9:44:9f:2a:18:b6:
0d:82:eb:77:f0:69:08:7f:80:d2:fb:67:19:5d:9a:d7:88:52:
d1:2b:5b:f4:c9:1f:48:dd:23:e5:d4:12:df:55:9b:9e:6d:1a:
58:24:8e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:17:42 2025 by rpki-client