Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/0a116f-5a0b-4566-9f44-b837bf9d4c5f/1/Dvv19csRCN4oX2os19N0OhbZraw.roa
File: Dvv19csRCN4oX2os19N0OhbZraw.roa (raw, json)
Hash identifier: W8fr2D/bfiVCiMB+SSkXzABxUguFKAoPUCkeUih1XBw=
Subject key identifier: 0E:FB:F5:F5:CB:11:08:DE:28:5F:6A:2C:D7:D3:74:3A:16:D9:AD:AC
Certificate issuer: /CN=cd9233f6a88d08f6559c2206b1bff2655b122231
Certificate serial: 38E3C944
Authority key identifier: CD:92:33:F6:A8:8D:08:F6:55:9C:22:06:B1:BF:F2:65:5B:12:22:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZIz9qiNCPZVnCIGsb_yZVsSIjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/0a116f-5a0b-4566-9f44-b837bf9d4c5f/1/Dvv19csRCN4oX2os19N0OhbZraw.roa
Signing time: Mon 16 May 2022 18:41:29 +0000
ROA not before: Mon 16 May 2022 18:41:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41535
IP address blocks: 109.120.162.0/24 maxlen: 24
109.120.167.0/24 maxlen: 24
109.120.172.0/24 maxlen: 24
77.221.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 954452292 (0x38e3c944)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd9233f6a88d08f6559c2206b1bff2655b122231
Validity
Not Before: May 16 18:41:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0efbf5f5cb1108de285f6a2cd7d3743a16d9adac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ea:f3:67:b0:f7:12:a7:65:29:26:73:26:4f:
1d:83:61:d7:d3:e2:d3:53:a3:6d:f7:db:40:38:3c:
0b:0d:a3:0e:f9:7a:6a:9f:7d:5c:16:6c:c4:8a:c1:
5d:fa:ab:14:85:13:e3:c5:fb:8c:d7:85:c9:4e:42:
b6:24:3a:1a:5b:46:d0:fe:0a:ce:d9:87:3a:b0:a2:
3b:30:2b:30:2d:85:5c:4d:8b:b5:e7:86:ab:5e:5f:
8f:1a:d0:78:bc:9d:a5:74:25:c3:6a:54:f6:13:0c:
09:a2:fd:5b:5f:ba:6b:2a:6a:73:71:c1:91:5d:ff:
e7:c2:68:55:ba:7c:41:93:b0:e7:88:cf:2b:39:a8:
5a:aa:f6:85:dc:95:71:71:5f:4d:14:a8:ac:d2:74:
5f:a5:e9:6b:0a:bc:0e:ab:28:ad:09:47:90:3a:1f:
58:d9:1a:c0:ca:3a:39:b9:61:6e:6f:6e:1a:e2:a4:
88:22:55:a6:52:cc:2c:9f:e4:74:82:81:56:71:b6:
54:7b:58:30:17:df:36:c0:d1:47:29:53:54:29:7b:
bd:44:36:f4:d4:0b:be:19:d9:e5:f1:e8:df:14:ce:
e4:ba:3d:b9:44:83:10:71:45:7e:7a:f4:c6:50:94:
68:03:16:88:4f:5c:35:7b:4e:6d:5d:4c:8a:a3:a7:
9f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:FB:F5:F5:CB:11:08:DE:28:5F:6A:2C:D7:D3:74:3A:16:D9:AD:AC
X509v3 Authority Key Identifier:
keyid:CD:92:33:F6:A8:8D:08:F6:55:9C:22:06:B1:BF:F2:65:5B:12:22:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZIz9qiNCPZVnCIGsb_yZVsSIjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/0a116f-5a0b-4566-9f44-b837bf9d4c5f/1/Dvv19csRCN4oX2os19N0OhbZraw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/0a116f-5a0b-4566-9f44-b837bf9d4c5f/1/zZIz9qiNCPZVnCIGsb_yZVsSIjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.221.130.0/24
109.120.162.0/24
109.120.167.0/24
109.120.172.0/24
Signature Algorithm: sha256WithRSAEncryption
63:c2:4f:af:77:6b:84:0c:22:55:e9:d1:54:2f:80:73:b2:09:
a0:6f:11:cb:84:17:98:a3:3a:73:cc:5f:a6:c5:a5:82:ec:5a:
c2:ca:a2:37:3c:79:1d:5b:e2:08:f9:e3:a3:86:5b:dc:da:23:
9c:55:00:5f:f9:12:c5:ef:c8:58:31:77:94:c2:92:39:37:49:
ae:51:8d:2c:3b:fb:a3:1b:a0:c8:4d:f3:7f:fa:60:88:42:b7:
84:36:e9:2a:3c:a0:4f:9d:3c:39:ff:1e:05:26:dd:70:4b:bc:
8d:72:93:9b:68:a4:0c:dc:81:82:41:81:94:ca:2e:b3:03:b1:
33:fc:7b:ac:56:50:47:d2:dc:35:15:76:7f:aa:b6:67:8b:95:
bf:1d:d3:08:1a:48:11:4b:cd:68:eb:92:39:f3:bf:79:9d:2a:
65:07:57:c3:fe:5a:ef:52:c8:39:b8:27:3e:47:e2:56:99:c0:
61:ef:03:26:46:c6:20:0a:59:3a:ac:af:c6:b5:07:31:23:91:
f7:79:06:e0:95:68:80:e9:b4:81:fd:4f:16:75:2d:27:c0:c7:
b2:c4:4d:2f:38:48:07:4e:e4:b1:fa:b2:9f:a7:50:03:f9:92:
1c:7c:55:a3:b1:f7:6c:9c:e0:50:83:48:f8:14:b2:31:4b:51:
5f:c5:61:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:30 2024 by rpki-client on console-fra.rpki-client.org