Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/0a116f-5a0b-4566-9f44-b837bf9d4c5f/1/EbN9ibql6GDyTTBR16hdwLVFNmo.roa
File: EbN9ibql6GDyTTBR16hdwLVFNmo.roa (raw, json)
Hash identifier: uX/0d0yHeO39Z8VaWT8NHp42YI0+C2b8ZdM2T4memLM=
Subject key identifier: 11:B3:7D:89:BA:A5:E8:60:F2:4D:30:51:D7:A8:5D:C0:B5:45:36:6A
Certificate issuer: /CN=cd9233f6a88d08f6559c2206b1bff2655b122231
Certificate serial: 01856DE63CCA0374B51EC5133C28C1C6033F
Authority key identifier: CD:92:33:F6:A8:8D:08:F6:55:9C:22:06:B1:BF:F2:65:5B:12:22:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZIz9qiNCPZVnCIGsb_yZVsSIjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/0a116f-5a0b-4566-9f44-b837bf9d4c5f/1/EbN9ibql6GDyTTBR16hdwLVFNmo.roa
Signing time: Sun 01 Jan 2023 15:14:43 +0000
ROA not before: Sun 01 Jan 2023 15:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41535
IP address blocks: 109.120.162.0/24 maxlen: 24
109.120.167.0/24 maxlen: 24
109.120.172.0/24 maxlen: 24
77.221.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:e6:3c:ca:03:74:b5:1e:c5:13:3c:28:c1:c6:03:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd9233f6a88d08f6559c2206b1bff2655b122231
Validity
Not Before: Jan 1 15:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11b37d89baa5e860f24d3051d7a85dc0b545366a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6b:e1:c1:c3:f5:29:53:49:fd:60:bd:15:21:
9b:10:a5:ec:94:0b:04:c8:ff:84:24:7c:dc:40:f7:
ab:55:54:91:8d:bf:52:63:af:cf:96:7d:6c:36:2f:
f5:00:d4:b1:66:10:eb:f8:21:37:0f:4c:8b:c4:8f:
de:02:91:8c:5d:f3:76:03:db:77:2d:06:dc:09:b7:
b9:f8:a5:ae:3f:0a:a1:f3:0a:73:e0:45:ab:e6:a3:
f1:cf:aa:2b:36:4f:a1:80:2b:c7:8a:bd:18:9b:a5:
72:7a:1d:f0:f0:e5:e3:ee:02:f5:15:5d:b9:82:4b:
49:4d:a9:82:b2:0c:9c:62:03:95:23:b4:ca:f7:98:
77:ef:a8:95:9c:74:d2:8a:e3:8f:4d:ad:15:19:3e:
00:b9:58:1d:43:06:ff:7b:74:26:76:5a:55:a5:61:
62:8f:7d:df:3f:2c:bb:f5:b9:2f:2a:eb:af:f7:9e:
de:5e:a9:e7:cb:06:00:dc:fc:a7:94:7b:8e:ad:f4:
06:b3:59:dd:fe:44:d2:87:23:67:43:a2:d2:c2:f4:
10:35:da:8f:b5:74:ab:85:f5:db:51:e6:86:7e:27:
86:99:39:11:3d:ea:3d:02:3e:51:df:f3:b9:a0:88:
33:cc:26:76:e1:be:32:66:ea:3c:54:07:0d:52:73:
b1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B3:7D:89:BA:A5:E8:60:F2:4D:30:51:D7:A8:5D:C0:B5:45:36:6A
X509v3 Authority Key Identifier:
keyid:CD:92:33:F6:A8:8D:08:F6:55:9C:22:06:B1:BF:F2:65:5B:12:22:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZIz9qiNCPZVnCIGsb_yZVsSIjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/0a116f-5a0b-4566-9f44-b837bf9d4c5f/1/EbN9ibql6GDyTTBR16hdwLVFNmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/0a116f-5a0b-4566-9f44-b837bf9d4c5f/1/zZIz9qiNCPZVnCIGsb_yZVsSIjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.221.130.0/24
109.120.162.0/24
109.120.167.0/24
109.120.172.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:53:52:99:7c:ec:c7:5b:9c:a1:5a:76:cd:16:5c:ab:6f:ab:
ec:1b:40:41:0b:a2:b3:14:69:bf:91:bc:5b:d5:b0:75:7f:77:
bf:9b:fb:12:07:5e:90:c4:54:0f:e3:34:7b:8a:2b:e2:01:d5:
e0:05:f9:fc:46:07:05:58:c1:2d:36:6c:2e:8d:cf:19:ba:02:
c9:27:5b:8c:47:f8:0f:c5:81:dd:d3:88:fe:d6:81:b0:4b:84:
5f:9f:7f:fb:cc:f4:aa:a1:5a:90:ea:2b:4c:78:45:e8:9a:35:
0b:36:a4:27:4a:3f:16:50:43:7d:9b:78:f2:c3:9f:a5:70:6a:
a0:4c:65:bb:1e:9c:e9:3e:75:4a:c6:ed:bd:39:3e:bc:5f:6d:
25:34:da:9a:d0:57:9f:a7:16:0a:d8:95:a2:06:c9:38:bb:24:
00:bd:8f:27:72:1e:ad:ba:40:83:b3:2e:83:6c:c2:72:9f:8c:
14:bc:6f:e2:69:da:8f:33:7d:20:c2:51:31:2d:4b:23:9f:24:
fe:f4:6a:49:70:7d:29:bb:64:9e:2a:08:f2:e8:34:1b:59:a7:
c6:d6:6d:a0:fb:fb:79:d9:da:e7:95:c8:96:6c:78:fe:2a:0f:
0a:7b:cf:12:18:7c:62:2f:01:ad:ec:02:2c:31:9d:67:ab:13:
9d:ac:a1:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:58 2024 by rpki-client on console-ams.rpki-client.org