Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/ZcAW1Ky1u0p8r0aKu2CqjVXYOew.roa
File: ZcAW1Ky1u0p8r0aKu2CqjVXYOew.roa (raw, json)
Hash identifier: O3AsN0kE9HfcGRgGYiY4QNYhderYR39jD8TEdi1TsFI=
Subject key identifier: 65:C0:16:D4:AC:B5:BB:4A:7C:AF:46:8A:BB:60:AA:8D:55:D8:39:EC
Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Certificate serial: 018EA9958D099904B8FA3F8AFCA6AE517DEF
Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/ZcAW1Ky1u0p8r0aKu2CqjVXYOew.roa
Signing time: Thu 04 Apr 2024 14:48:54 +0000
ROA not before: Thu 04 Apr 2024 14:48:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210644
IP address blocks: 77.221.136.0/22 maxlen: 22
77.221.140.0/22 maxlen: 22
77.221.148.0/24 maxlen: 24
77.221.149.0/24 maxlen: 24
77.221.152.0/23 maxlen: 23
77.221.154.0/23 maxlen: 23
77.221.156.0/23 maxlen: 23
77.221.158.0/23 maxlen: 23
109.120.132.0/23 maxlen: 23
109.120.176.0/23 maxlen: 23
109.120.178.0/23 maxlen: 23
109.120.184.0/23 maxlen: 23
109.120.186.0/23 maxlen: 23
109.120.186.0/24 maxlen: 24
109.120.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a9:95:8d:09:99:04:b8:fa:3f:8a:fc:a6:ae:51:7d:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Validity
Not Before: Apr 4 14:48:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65c016d4acb5bb4a7caf468abb60aa8d55d839ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7d:14:31:28:da:8b:58:81:c6:57:19:c3:8e:
83:d9:0a:ff:34:04:78:0c:5b:22:43:7c:9c:96:14:
9d:d6:0b:5c:d5:26:6c:7b:96:ed:01:31:e9:48:f5:
36:01:03:6d:cf:aa:28:be:0d:81:8e:0f:bc:5e:4c:
1d:bb:fa:3c:d9:26:81:d1:e5:ae:b6:48:d6:a2:63:
9e:4a:49:a7:70:90:0a:1a:7d:2d:65:7a:ad:cb:11:
e0:b0:e5:34:69:18:5f:4c:bb:fc:00:a4:10:51:0b:
1f:4b:2c:5e:70:15:0a:71:15:41:84:76:05:52:88:
95:8f:ee:cd:a6:81:c9:58:0a:99:83:26:de:3e:62:
1c:0d:52:60:38:b2:7b:d5:f6:27:c2:bb:55:ed:6d:
7c:4c:25:7b:14:1f:9d:87:05:eb:85:53:83:bc:e0:
f8:5e:3c:75:88:5e:b6:4e:2f:53:47:c0:32:fe:37:
6e:c6:75:64:76:42:78:10:34:73:bb:16:04:95:81:
7c:db:29:96:4a:a7:43:54:62:30:f9:b2:4f:7f:74:
6d:12:3d:57:b1:e4:ba:3c:b9:c8:ff:f7:35:f3:31:
4d:4b:8b:3e:2a:f5:de:71:a7:d5:37:7f:59:5c:6d:
cd:2b:9a:12:c8:67:4c:7c:55:9d:c0:35:3b:eb:b1:
19:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C0:16:D4:AC:B5:BB:4A:7C:AF:46:8A:BB:60:AA:8D:55:D8:39:EC
X509v3 Authority Key Identifier:
keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/ZcAW1Ky1u0p8r0aKu2CqjVXYOew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.221.136.0/21
77.221.148.0/23
77.221.152.0/21
109.120.132.0/23
109.120.176.0/22
109.120.184.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:2d:88:69:58:ac:d0:45:33:38:00:d2:63:a7:2b:bf:18:d5:
bb:cd:58:20:52:1d:4d:cb:04:72:1f:15:a6:97:de:ab:0c:e0:
66:af:49:03:44:a3:7e:65:e0:4b:86:98:22:ed:a4:4c:6b:2f:
d8:cb:9e:fe:c2:1e:4d:9b:49:2e:48:9f:74:f3:29:df:01:dc:
6b:67:b0:83:29:e2:85:06:4f:9d:e1:1f:4c:0a:bc:07:61:b8:
fc:36:e3:0d:40:e4:2e:13:5b:27:cf:d6:e1:71:68:a0:26:71:
a2:60:ed:71:99:21:f1:53:93:a2:05:f3:28:38:96:fe:ec:2e:
3f:e8:5e:1d:b3:12:91:2e:2b:89:47:25:ed:9c:d0:57:86:79:
32:65:b1:b6:15:63:74:d2:34:47:d9:32:1f:33:33:72:c5:5c:
1a:6a:eb:9b:ea:94:c9:83:c9:b5:55:1e:47:6c:94:d2:4c:c6:
fa:a8:87:20:18:92:ac:67:fa:04:c7:05:35:29:ad:74:70:0e:
bc:b8:db:f5:ad:b9:0c:36:a8:e1:4e:9f:43:97:d2:98:9b:af:
40:0c:a4:3d:56:f7:29:fc:28:d1:68:df:3b:d5:3e:ba:65:b1:
fa:fe:a9:3b:7a:af:2e:06:82:a3:e8:fc:97:ad:df:48:98:07:
1d:9b:69:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:46:38 2025 by rpki-client