Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/Uy-O8P0FectZmBtuPCrCEHD1Ibc.roa
File: Uy-O8P0FectZmBtuPCrCEHD1Ibc.roa (raw, json)
Hash identifier: 1AZox2LAa4CdNPrXpBlh4McpdrGB8F5oKdSp77c8/1k=
Subject key identifier: 53:2F:8E:F0:FD:05:79:CB:59:98:1B:6E:3C:2A:C2:10:70:F5:21:B7
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 0193E4D5F3ECE5F20848759425FC0F7A8DB2
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/Uy-O8P0FectZmBtuPCrCEHD1Ibc.roa
Signing time: Fri 20 Dec 2024 16:10:47 +0000
ROA not before: Fri 20 Dec 2024 16:10:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42337
IP address blocks: 77.237.64.0/19 maxlen: 19
77.237.64.0/20 maxlen: 20
77.237.65.0/24 maxlen: 24
77.237.68.0/24 maxlen: 24
77.237.69.0/24 maxlen: 24
77.237.70.0/24 maxlen: 24
77.237.71.0/24 maxlen: 24
77.237.72.0/24 maxlen: 24
77.237.73.0/24 maxlen: 24
77.237.74.0/24 maxlen: 24
77.237.75.0/24 maxlen: 24
77.237.76.0/24 maxlen: 24
77.237.77.0/24 maxlen: 24
77.237.78.0/23 maxlen: 23
77.237.78.0/24 maxlen: 24
77.237.79.0/24 maxlen: 24
77.237.80.0/20 maxlen: 20
77.237.80.0/22 maxlen: 22
77.237.80.0/24 maxlen: 24
77.237.81.0/24 maxlen: 24
77.237.82.0/24 maxlen: 24
77.237.83.0/24 maxlen: 24
77.237.84.0/24 maxlen: 24
77.237.85.0/24 maxlen: 24
77.237.87.0/24 maxlen: 24
77.237.88.0/24 maxlen: 24
77.237.89.0/24 maxlen: 24
77.237.90.0/24 maxlen: 24
77.237.91.0/24 maxlen: 24
77.237.92.0/24 maxlen: 24
77.237.94.0/24 maxlen: 24
77.237.95.0/24 maxlen: 24
92.242.192.0/19 maxlen: 19
92.242.192.0/23 maxlen: 23
92.242.192.0/24 maxlen: 24
92.242.193.0/24 maxlen: 24
92.242.194.0/24 maxlen: 24
92.242.195.0/24 maxlen: 24
92.242.196.0/23 maxlen: 23
92.242.198.0/24 maxlen: 24
92.242.200.0/21 maxlen: 21
92.242.201.0/24 maxlen: 24
92.242.202.0/23 maxlen: 23
92.242.202.0/24 maxlen: 24
92.242.203.0/24 maxlen: 24
92.242.204.0/24 maxlen: 24
92.242.205.0/24 maxlen: 24
92.242.206.0/23 maxlen: 23
92.242.206.0/24 maxlen: 24
92.242.207.0/24 maxlen: 24
92.242.208.0/20 maxlen: 20
92.242.208.0/24 maxlen: 24
92.242.209.0/24 maxlen: 24
92.242.210.0/23 maxlen: 23
92.242.210.0/24 maxlen: 24
92.242.211.0/24 maxlen: 24
92.242.212.0/22 maxlen: 22
92.242.212.0/24 maxlen: 24
92.242.215.0/24 maxlen: 24
92.242.216.0/23 maxlen: 23
92.242.218.0/23 maxlen: 23
92.242.218.0/24 maxlen: 24
92.242.219.0/24 maxlen: 24
92.242.220.0/24 maxlen: 24
92.242.221.0/24 maxlen: 24
92.242.223.0/24 maxlen: 24
185.14.160.0/22 maxlen: 22
185.14.160.0/24 maxlen: 24
185.14.162.0/24 maxlen: 24
185.14.163.0/24 maxlen: 24
185.225.240.0/22 maxlen: 24
185.225.240.0/24 maxlen: 24
185.225.241.0/24 maxlen: 24
185.225.242.0/23 maxlen: 23
185.225.242.0/24 maxlen: 24
2a00:15c8::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e4:d5:f3:ec:e5:f2:08:48:75:94:25:fc:0f:7a:8d:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Dec 20 16:10:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=532f8ef0fd0579cb59981b6e3c2ac21070f521b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ed:dd:ae:32:94:27:3c:16:bc:ac:2e:f5:18:
ea:2c:42:c1:ad:c0:bb:20:ed:51:f8:f5:69:f7:c9:
f6:2b:35:1c:3e:77:b3:f7:1a:eb:88:40:e2:68:82:
59:b7:db:4f:50:06:5c:d8:5e:11:64:a1:69:dd:13:
25:cf:ce:45:92:53:ec:9c:62:12:cf:34:60:ad:71:
2d:b1:89:77:69:05:9b:ca:f3:68:58:0a:08:e4:be:
19:1e:fb:9a:32:21:d4:e3:c4:ec:cf:de:12:27:52:
d8:bc:21:8c:f7:45:c7:bd:02:07:86:cc:f7:fa:53:
4a:d2:46:11:46:f5:af:68:85:74:eb:2c:80:68:28:
a4:4e:e7:de:d2:67:98:16:d8:8f:25:4b:a4:bf:c0:
6e:40:c7:af:c8:44:08:38:79:34:fc:9e:a7:10:bd:
da:02:80:6f:e7:80:bf:9a:3d:ca:c5:1a:22:1b:04:
e2:3f:99:2c:40:4a:bc:35:aa:e4:de:5c:87:8b:26:
73:d4:68:8f:6c:85:3d:4b:03:ba:58:b2:45:a2:ef:
29:e8:2f:a0:8c:8a:9a:8a:e3:ba:12:db:bb:c8:ea:
82:27:08:c9:ac:be:df:16:e0:ef:eb:e5:ea:b1:02:
68:8b:ae:e0:b7:63:bb:af:a5:10:6d:b8:f8:9d:1c:
e7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2F:8E:F0:FD:05:79:CB:59:98:1B:6E:3C:2A:C2:10:70:F5:21:B7
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/Uy-O8P0FectZmBtuPCrCEHD1Ibc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.237.64.0/19
92.242.192.0/19
185.14.160.0/22
185.225.240.0/22
IPv6:
2a00:15c8::/29
Signature Algorithm: sha256WithRSAEncryption
69:58:f7:ef:5a:c5:7c:23:2c:0c:a8:49:44:a6:14:49:95:72:
4f:a9:28:dc:ab:a5:d6:41:c5:aa:19:15:92:06:40:b1:41:37:
53:b3:d8:9e:af:72:cf:0d:a7:2c:65:25:d9:75:d7:3c:9f:cb:
30:b2:bb:2e:61:2a:32:06:df:c8:8b:ef:18:78:99:82:6b:a7:
fe:93:d3:0a:2a:7b:99:dd:09:ed:ed:cf:8a:1b:21:61:67:0b:
b4:e3:43:a0:07:35:ef:62:cf:8a:36:39:1b:1e:5e:af:59:02:
b7:c8:99:96:91:de:5e:c7:16:df:2f:20:ef:37:70:0e:4c:4b:
5d:a4:b6:bb:16:51:76:7a:3b:e9:17:58:d9:8b:71:7c:00:73:
04:6b:eb:93:6d:ec:34:22:5b:5a:c6:a2:16:42:4d:f7:11:8c:
c7:ed:44:89:ea:02:ed:33:3e:86:c8:15:e4:09:b2:b8:30:37:
e2:fb:5e:a6:b9:2e:b5:a9:c7:ae:04:61:f2:49:13:c2:2e:85:
a6:c5:e1:a4:bf:c8:c4:ed:ae:66:06:91:bd:79:6d:e7:3d:fe:
80:a9:39:d9:62:68:39:32:d5:88:42:08:8c:02:81:f1:07:30:
ab:92:d0:ff:86:54:99:7f:6f:57:39:80:76:74:f7:ce:df:d5:
78:4b:81:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:54 2024 by rpki-client on console.sobornost.net