Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/29jXsO1dRBydhNIjPXMLNeoo1fg.roa
File: 29jXsO1dRBydhNIjPXMLNeoo1fg.roa (raw, json)
Hash identifier: dYBWNCrw6uv2xszmu/pGiokWU18WFdCDkzaWWaHGEOs=
Subject key identifier: DB:D8:D7:B0:ED:5D:44:1C:9D:84:D2:23:3D:73:0B:35:EA:28:D5:F8
Certificate issuer: /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Certificate serial: 0193019A7BC1BA825BB493DD947FA0C8F635
Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/29jXsO1dRBydhNIjPXMLNeoo1fg.roa
Signing time: Wed 06 Nov 2024 13:12:01 +0000
ROA not before: Wed 06 Nov 2024 13:12:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44112
IP address blocks: 77.222.32.0/24 maxlen: 24
77.222.36.0/22 maxlen: 24
77.222.40.0/21 maxlen: 24
77.222.48.0/20 maxlen: 24
77.222.48.0/23 maxlen: 24
2a02:408:7722::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:01:9a:7b:c1:ba:82:5b:b4:93:dd:94:7f:a0:c8:f6:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Validity
Not Before: Nov 6 13:12:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dbd8d7b0ed5d441c9d84d2233d730b35ea28d5f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:15:1e:7d:f9:80:56:d6:98:1d:e5:d9:8e:d3:
c4:a8:38:5d:92:c9:90:aa:f0:55:a8:75:ac:b9:a4:
e8:f4:2c:5f:cb:09:03:5b:fe:24:4e:9c:96:b9:a2:
14:a2:0e:8c:c5:f8:c6:ef:c1:db:7d:2a:f0:1a:9a:
68:a2:d0:b2:bd:66:85:e1:52:b4:82:30:05:e5:54:
c9:65:06:1b:99:75:6a:08:0a:58:11:ce:95:b6:36:
fc:44:da:d7:44:c1:6b:c3:95:2c:38:8c:4b:45:3f:
72:cc:d7:a2:b7:d4:e3:24:fd:9f:0b:33:86:ef:39:
df:6b:f4:10:0e:0b:b0:82:89:52:dc:1d:6b:bd:93:
ef:88:bf:d8:20:fd:c6:fe:e7:0b:ae:60:58:ca:b7:
1b:79:7e:fb:bb:98:9b:0e:10:38:08:56:18:03:11:
b6:ca:bb:1b:71:cb:33:06:eb:0e:12:b1:fa:f3:3e:
4c:25:69:e6:2a:05:ec:98:6a:62:f6:2a:89:da:2d:
12:11:18:9d:62:04:d2:33:06:7e:e0:8a:4a:2a:22:
37:f7:e5:89:60:3d:eb:6d:29:6e:9d:ff:3e:a2:30:
1e:1a:1a:05:c0:8c:a0:19:02:c5:7e:8e:9a:c1:4f:
e5:02:c6:2a:22:59:67:aa:b0:11:06:c9:49:4f:11:
39:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D8:D7:B0:ED:5D:44:1C:9D:84:D2:23:3D:73:0B:35:EA:28:D5:F8
X509v3 Authority Key Identifier:
keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/29jXsO1dRBydhNIjPXMLNeoo1fg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.222.32.0/24
77.222.36.0-77.222.63.255
IPv6:
2a02:408:7722::/48
Signature Algorithm: sha256WithRSAEncryption
9f:d3:52:62:b3:84:be:2c:fb:24:95:d7:8b:9f:e5:62:87:52:
f4:27:8f:fd:eb:e5:0a:58:8f:ab:3c:29:a0:03:ab:86:8e:c4:
4c:c5:c2:2e:9c:dc:b9:fd:ff:a2:53:99:a6:5d:03:52:f1:be:
60:49:6f:9b:13:fb:6c:ee:83:6b:05:b9:70:02:6d:d7:e6:89:
79:51:84:94:97:9c:7f:c2:d9:d5:2a:64:77:11:2a:aa:05:c0:
93:c7:57:56:b5:ef:2f:72:39:9d:58:b4:ec:9f:15:2f:f7:91:
0e:6f:2c:84:2b:ef:22:e1:de:44:15:69:8f:48:23:75:39:4e:
be:f7:c4:77:49:81:a8:42:0a:77:4e:d5:d7:c9:73:51:19:32:
14:dd:b0:f3:e7:42:5d:c8:21:ef:cc:81:b9:92:47:8f:77:cc:
0c:4b:b6:cf:35:b7:4c:6d:ee:1d:f2:fa:95:df:de:2c:63:9b:
14:86:ce:a6:ab:00:ef:ea:fb:e2:87:be:43:24:87:40:35:e9:
a3:0f:12:89:ea:b1:36:db:79:e5:21:03:d7:7a:c5:64:0a:8c:
2f:fc:7a:e5:ec:38:9a:ff:69:3e:65:e6:fb:58:59:a4:30:b9:
09:a3:c7:14:cc:40:11:fe:ad:fc:c4:a2:3d:aa:0a:3b:21:b4:
27:03:3b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:57 2024 by rpki-client on console.sobornost.net