Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/mrkYilqobzJnuDwFVjz49pvc1Ak.roa
File: mrkYilqobzJnuDwFVjz49pvc1Ak.roa (raw, json)
Hash identifier: HtYATTAew46WbD1hCqUzdlGKdtQMiYKWxtlHhptkwYY=
Subject key identifier: 9A:B9:18:8A:5A:A8:6F:32:67:B8:3C:05:56:3C:F8:F6:9B:DC:D4:09
Certificate issuer: /CN=41467c769bf66ada7d5780a69dce1371be9849de
Certificate serial: 0184AEA52AC070CA968AA2D2F0E53465BBA4
Authority key identifier: 41:46:7C:76:9B:F6:6A:DA:7D:57:80:A6:9D:CE:13:71:BE:98:49:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/mrkYilqobzJnuDwFVjz49pvc1Ak.roa
Signing time: Fri 25 Nov 2022 11:56:10 +0000
ROA not before: Fri 25 Nov 2022 11:56:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56862
IP address blocks: 77.105.138.0/23 maxlen: 23
77.105.164.0/24 maxlen: 24
77.105.163.0/24 maxlen: 24
77.105.162.0/24 maxlen: 24
77.105.161.0/24 maxlen: 24
77.105.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ae:a5:2a:c0:70:ca:96:8a:a2:d2:f0:e5:34:65:bb:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41467c769bf66ada7d5780a69dce1371be9849de
Validity
Not Before: Nov 25 11:56:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9ab9188a5aa86f3267b83c05563cf8f69bdcd409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a3:a2:3f:8a:41:12:46:c6:98:f0:0e:06:94:
c5:2c:70:27:51:d5:8a:70:c9:10:c7:0e:6d:20:70:
41:a3:94:2d:c0:3f:51:75:0f:5e:b5:d7:a7:f8:73:
b7:cf:01:22:6e:d2:14:ca:3b:0d:29:1c:27:00:f0:
75:81:0d:e6:15:34:a6:e0:49:e3:81:87:04:34:ab:
8b:4e:53:27:f4:d8:59:af:ef:e1:54:0c:b3:36:ff:
e7:16:10:c6:f5:37:3e:5a:12:ad:5f:c6:71:19:ed:
5c:32:25:72:9c:46:24:98:1a:c2:fa:9b:57:27:dd:
35:1b:a8:18:88:7a:fa:dd:c2:d6:b4:31:de:c5:0e:
82:ab:92:27:dc:b4:33:7d:d0:87:ad:96:c4:58:ab:
76:11:a8:a7:33:e0:25:fd:81:76:4b:33:16:b8:ee:
2e:88:4d:05:ad:3c:7f:da:e1:fe:49:c7:2d:f6:bb:
4d:3b:69:7e:5b:6d:5b:ff:0d:1b:50:29:cf:5e:2b:
df:c1:c8:ca:0b:43:b2:8f:b7:b0:99:49:e1:80:73:
94:a3:b3:18:16:22:60:17:16:f2:53:bc:73:0b:41:
37:ec:e7:e8:13:81:86:65:b8:cb:2f:51:33:c0:c5:
17:bf:02:64:d1:cd:56:34:6b:37:1b:7b:41:b4:7b:
88:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B9:18:8A:5A:A8:6F:32:67:B8:3C:05:56:3C:F8:F6:9B:DC:D4:09
X509v3 Authority Key Identifier:
keyid:41:46:7C:76:9B:F6:6A:DA:7D:57:80:A6:9D:CE:13:71:BE:98:49:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/mrkYilqobzJnuDwFVjz49pvc1Ak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.138.0/23
77.105.160.0-77.105.164.255
Signature Algorithm: sha256WithRSAEncryption
01:b6:05:0a:d6:79:49:0b:7b:cf:54:6e:b3:67:eb:3d:91:b8:
0c:c0:5b:59:e5:5e:57:6f:b7:f8:ef:94:8c:0b:d6:c4:fc:97:
74:be:7c:3d:06:01:b6:98:2a:c5:d8:18:67:57:e2:6a:ff:d0:
cd:7c:e4:f4:33:40:33:0e:a0:ee:dd:30:76:39:89:e7:16:94:
15:b9:71:43:8e:94:55:61:44:04:3b:b4:ad:3b:54:59:75:e9:
88:f6:25:83:27:66:79:55:7e:12:34:22:c6:6b:c2:22:31:63:
6a:4e:5b:30:57:25:e7:0c:31:b0:5d:ee:80:68:f5:48:0c:a3:
c9:f3:c9:b3:22:60:62:88:b1:9b:49:25:33:00:af:28:a3:f7:
16:e0:32:1f:c4:fe:68:f8:6e:4d:5e:7e:a0:99:03:b3:38:b0:
36:74:f3:e0:b9:e6:97:ac:77:a1:d3:6f:a3:4b:9c:2b:cb:f7:
33:05:f9:8c:15:2e:0d:65:af:c9:23:33:1b:36:1e:49:4e:40:
0f:1d:63:53:af:4f:43:85:86:8c:e3:b5:46:3f:e3:a9:a2:75:
7f:c2:4b:b4:c0:f8:43:cb:b5:4d:fc:d4:be:68:67:f3:1a:e4:
f5:46:61:82:16:56:18:22:f3:7c:06:31:da:bf:2a:2c:d7:15:
9c:55:72:5b
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYSupSrAcMqWiqLS8OU0ZbukMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxNDY3Yzc2OWJmNjZhZGE3ZDU3ODBhNjlkY2UxMzcxYmU5
ODQ5ZGUwHhcNMjIxMTI1MTE1NjEwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YWI5MTg4YTVhYTg2ZjMyNjdiODNjMDU1NjNjZjhmNjliZGNkNDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKOiP4pBEkbGmPAOBpTFLHAnUdWK
cMkQxw5tIHBBo5QtwD9RdQ9etden+HO3zwEibtIUyjsNKRwnAPB1gQ3mFTSm4Enj
gYcENKuLTlMn9NhZr+/hVAyzNv/nFhDG9Tc+WhKtX8ZxGe1cMiVynEYkmBrC+ptX
J901G6gYiHr63cLWtDHexQ6Cq5In3LQzfdCHrZbEWKt2EainM+Al/YF2SzMWuO4u
iE0FrTx/2uH+Scct9rtNO2l+W21b/w0bUCnPXivfwcjKC0Oyj7ewmUnhgHOUo7MY
FiJgFxbyU7xzC0E37OfoE4GGZbjLL1EzwMUXvwJk0c1WNGs3G3tBtHuIFwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFJq5GIpaqG8yZ7g8BVY8+Pab3NQJMB8GA1UdIwQY
MBaAFEFGfHab9mrafVeApp3OE3G+mEneMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVVaOGRwdjJhdHA5VjRDbW5jNFRjYjZZU2Q0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS81Y2YzZmQtZTc3ZC00YzgyLWI0Yzct
NTIxNTU2YmU4MTNhLzEvbXJrWWlscW9iekpudUR3RlZqejQ5cHZjMUFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS81Y2YzZmQtZTc3ZC00YzgyLWI0YzctNTIxNTU2YmU4MTNh
LzEvUVVaOGRwdjJhdHA5VjRDbW5jNFRjYjZZU2Q0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBTWmKMAwD
BAVNaaADBABNaaQwDQYJKoZIhvcNAQELBQADggEBAAG2BQrWeUkLe89UbrNn6z2R
uAzAW1nlXldvt/jvlIwL1sT8l3S+fD0GAbaYKsXYGGdX4mr/0M185PQzQDMOoO7d
MHY5iecWlBW5cUOOlFVhRAQ7tK07VFl16Yj2JYMnZnlVfhI0IsZrwiIxY2pOWzBX
JecMMbBd7oBo9UgMo8nzybMiYGKIsZtJJTMAryij9xbgMh/E/mj4bk1efqCZA7M4
sDZ08+C55pesd6HTb6NLnCvL9zMF+YwVLg1lr8kjMxs2HklOQA8dY1OvT0OFhozj
tUY/46midX/CS7TA+EPLtU381L5oZ/Ma5PVGYYIWVhgi83wGMdq/KizXFZxVcls=
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:20:14 2025 by rpki-client