Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/0a116f-5a0b-4566-9f44-b837bf9d4c5f/1/AyOWELW_z_qUcrimqupeFMkp4Vw.roa
File: AyOWELW_z_qUcrimqupeFMkp4Vw.roa (raw, json)
Hash identifier: CfHjEsYiNtI1jgbVzubpx1IZnLLbwEWgJw26RVzQfRQ=
Subject key identifier: 03:23:96:10:B5:BF:CF:FA:94:72:B8:A6:AA:EA:5E:14:C9:29:E1:5C
Certificate issuer: /CN=cd9233f6a88d08f6559c2206b1bff2655b122231
Certificate serial: 01888B3050C9723041EED26BFAEB61E19E4A
Authority key identifier: CD:92:33:F6:A8:8D:08:F6:55:9C:22:06:B1:BF:F2:65:5B:12:22:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZIz9qiNCPZVnCIGsb_yZVsSIjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/0a116f-5a0b-4566-9f44-b837bf9d4c5f/1/AyOWELW_z_qUcrimqupeFMkp4Vw.roa
Signing time: Mon 05 Jun 2023 10:52:59 +0000
ROA not before: Mon 05 Jun 2023 10:52:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30968
IP address blocks: 109.120.160.0/23 maxlen: 23
109.120.164.0/23 maxlen: 23
109.120.166.0/24 maxlen: 24
109.120.168.0/22 maxlen: 22
109.120.173.0/24 maxlen: 24
109.120.177.0/24 maxlen: 24
109.120.179.0/24 maxlen: 24
109.120.184.0/22 maxlen: 22
77.221.128.0/23 maxlen: 23
77.221.131.0/24 maxlen: 24
77.221.132.0/22 maxlen: 22
77.221.136.0/21 maxlen: 21
109.120.128.0/21 maxlen: 21
77.221.144.0/20 maxlen: 20
109.120.139.0/24 maxlen: 24
109.120.136.0/23 maxlen: 23
109.120.142.0/23 maxlen: 23
109.120.141.0/24 maxlen: 24
109.120.148.0/22 maxlen: 22
109.120.152.0/24 maxlen: 24
109.120.156.0/22 maxlen: 22
109.120.155.0/24 maxlen: 24
92.243.64.0/22 maxlen: 22
92.243.70.0/24 maxlen: 24
92.243.69.0/24 maxlen: 24
92.243.72.0/21 maxlen: 21
92.243.83.0/24 maxlen: 24
2a02:440::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8b:30:50:c9:72:30:41:ee:d2:6b:fa:eb:61:e1:9e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd9233f6a88d08f6559c2206b1bff2655b122231
Validity
Not Before: Jun 5 10:52:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03239610b5bfcffa9472b8a6aaea5e14c929e15c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4c:8f:ac:fd:f4:9b:66:d1:03:74:d6:d4:35:
1b:6e:ef:e1:1b:6a:67:d0:bc:bf:11:91:dc:96:f1:
c7:6b:7f:03:f8:95:19:60:c1:2f:65:65:8c:97:ab:
14:4f:60:81:1f:39:67:33:3e:11:9c:2e:ba:ef:09:
db:1c:cd:0b:10:69:fc:9d:2d:03:b9:be:40:4f:81:
89:d4:53:14:ff:6d:9e:4f:25:33:94:fa:61:4b:23:
36:6e:7d:86:33:23:6f:43:43:48:f1:f8:c6:11:60:
a5:17:7c:a9:7e:29:7c:9f:99:79:b3:45:87:af:c3:
06:45:8c:3c:68:91:d2:2d:38:b0:a7:d2:d9:b4:6c:
e8:c7:5e:3e:ac:89:eb:50:88:9d:28:39:ec:0f:40:
fc:ca:ec:be:01:1a:4c:7d:4f:de:17:71:3c:08:e8:
c8:b6:d2:46:5e:da:b2:dd:c3:00:2d:7c:a5:15:58:
1c:e0:ce:b4:8a:2e:88:9f:a6:12:9a:24:fd:83:1a:
3f:c7:39:f7:5f:78:ce:04:bb:d2:85:76:02:e6:80:
ce:9b:2b:f0:77:7e:7c:28:6a:12:8d:8c:00:33:a7:
de:33:ed:91:5a:7c:9e:f2:9c:c5:60:6d:85:13:70:
96:f5:40:f8:c7:a7:fe:6f:c4:53:b0:20:73:03:a4:
f8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:23:96:10:B5:BF:CF:FA:94:72:B8:A6:AA:EA:5E:14:C9:29:E1:5C
X509v3 Authority Key Identifier:
keyid:CD:92:33:F6:A8:8D:08:F6:55:9C:22:06:B1:BF:F2:65:5B:12:22:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZIz9qiNCPZVnCIGsb_yZVsSIjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/0a116f-5a0b-4566-9f44-b837bf9d4c5f/1/AyOWELW_z_qUcrimqupeFMkp4Vw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/0a116f-5a0b-4566-9f44-b837bf9d4c5f/1/zZIz9qiNCPZVnCIGsb_yZVsSIjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.221.128.0/23
77.221.131.0-77.221.159.255
92.243.64.0/22
92.243.69.0-92.243.70.255
92.243.72.0/21
92.243.83.0/24
109.120.128.0-109.120.137.255
109.120.139.0/24
109.120.141.0-109.120.143.255
109.120.148.0-109.120.152.255
109.120.155.0-109.120.161.255
109.120.164.0-109.120.166.255
109.120.168.0/22
109.120.173.0/24
109.120.177.0/24
109.120.179.0/24
109.120.184.0/22
IPv6:
2a02:440::/32
Signature Algorithm: sha256WithRSAEncryption
74:53:1b:ef:7f:e1:65:22:21:81:bc:4a:09:c0:32:8b:e2:71:
9e:51:ca:95:6b:89:6b:1a:ef:e6:74:24:be:20:fa:8f:a6:10:
f6:0f:2e:cc:9b:59:4a:40:9c:75:3b:06:06:2c:fb:af:de:84:
91:b0:59:d3:38:4d:08:32:b1:e3:ac:3a:6f:36:fa:2f:92:b8:
37:b9:2a:36:27:1d:1d:55:23:6e:e8:b2:bf:0d:0c:5c:71:9f:
81:2e:69:ef:02:6c:c8:f7:04:ce:6d:bc:67:32:a6:3c:2d:60:
9a:d8:8f:f6:f9:21:3a:b5:4c:42:d6:b7:72:24:a6:26:11:c9:
f8:93:5a:9e:79:59:67:b5:b4:94:2b:51:a2:d8:37:df:84:32:
6c:23:d7:a5:dd:b1:b9:15:43:f0:81:1a:f5:19:18:1c:5a:2c:
13:f4:92:67:a3:d4:8a:fc:b7:d3:c6:29:80:0c:f3:63:26:50:
cb:7c:6b:b3:0b:25:16:10:97:4b:15:60:31:25:b9:85:f3:9f:
dd:b5:3b:0f:20:86:19:1d:f1:81:7c:36:89:d9:78:9f:ce:ed:
11:32:2c:18:42:eb:63:44:b6:dc:75:ed:60:60:39:a5:a1:3f:
0e:56:1d:12:dd:b0:18:f4:06:c4:d1:fb:43:41:32:4e:1a:5e:
4e:ab:58:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:30 2024 by rpki-client on console-fra.rpki-client.org