Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/0a116f-5a0b-4566-9f44-b837bf9d4c5f/1/NkXvAb8TP8Nm-cMSp7lmxu3Dc68.roa
File: NkXvAb8TP8Nm-cMSp7lmxu3Dc68.roa (raw, json)
Hash identifier: Ix579nI7KDZfESRR2FQiHbfjDdxsP3umSFSnGsM/L34=
Subject key identifier: 36:45:EF:01:BF:13:3F:C3:66:F9:C3:12:A7:B9:66:C6:ED:C3:73:AF
Certificate issuer: /CN=cd9233f6a88d08f6559c2206b1bff2655b122231
Certificate serial: 01882A89DB766CA60DC9DCA1DC340DA6FE5E
Authority key identifier: CD:92:33:F6:A8:8D:08:F6:55:9C:22:06:B1:BF:F2:65:5B:12:22:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZIz9qiNCPZVnCIGsb_yZVsSIjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/0a116f-5a0b-4566-9f44-b837bf9d4c5f/1/NkXvAb8TP8Nm-cMSp7lmxu3Dc68.roa
Signing time: Wed 17 May 2023 16:27:37 +0000
ROA not before: Wed 17 May 2023 16:27:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30968
IP address blocks: 109.120.160.0/23 maxlen: 23
109.120.164.0/23 maxlen: 23
109.120.166.0/24 maxlen: 24
109.120.168.0/22 maxlen: 22
109.120.173.0/24 maxlen: 24
109.120.177.0/24 maxlen: 24
109.120.179.0/24 maxlen: 24
109.120.184.0/22 maxlen: 22
77.221.128.0/23 maxlen: 23
77.221.131.0/24 maxlen: 24
77.221.132.0/22 maxlen: 22
77.221.136.0/21 maxlen: 21
109.120.128.0/21 maxlen: 21
77.221.144.0/20 maxlen: 20
109.120.139.0/24 maxlen: 24
109.120.136.0/23 maxlen: 23
109.120.142.0/23 maxlen: 23
109.120.141.0/24 maxlen: 24
109.120.148.0/22 maxlen: 22
109.120.152.0/24 maxlen: 24
109.120.156.0/22 maxlen: 22
109.120.155.0/24 maxlen: 24
92.243.64.0/22 maxlen: 22
92.243.70.0/24 maxlen: 24
92.243.69.0/24 maxlen: 24
92.243.72.0/21 maxlen: 21
92.243.84.0/23 maxlen: 23
92.243.80.0/23 maxlen: 23
92.243.83.0/24 maxlen: 24
92.243.89.0/24 maxlen: 24
2a02:440::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2a:89:db:76:6c:a6:0d:c9:dc:a1:dc:34:0d:a6:fe:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd9233f6a88d08f6559c2206b1bff2655b122231
Validity
Not Before: May 17 16:27:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3645ef01bf133fc366f9c312a7b966c6edc373af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:52:75:42:71:1e:5b:34:88:7f:70:5b:1b:84:
9c:07:45:f8:1b:6e:d9:e3:61:86:db:b8:bd:45:15:
ae:8c:72:63:cd:06:ea:8f:bb:dd:dc:53:be:bc:dc:
33:a9:12:e2:e9:20:03:14:6e:93:80:14:c2:7f:70:
40:af:be:93:5c:64:71:9d:8b:5e:4a:9e:5e:bc:50:
ac:a2:72:4a:86:fe:e6:8f:38:ac:63:51:52:0b:5f:
37:67:9d:39:ed:e6:8f:70:86:41:49:db:d8:6d:61:
75:3f:07:5f:b9:13:35:1d:0f:f3:e2:28:be:48:28:
8d:0f:75:fe:7c:55:ec:dc:00:68:cb:d2:99:2c:b9:
76:71:14:0d:a7:73:b2:43:ce:5b:e3:b0:1c:87:e5:
a6:e6:83:e7:22:22:1a:9a:ce:3e:92:d6:e1:80:c5:
51:d4:c6:a5:3a:7b:94:36:cd:98:14:2e:aa:46:5c:
56:aa:c5:f5:e6:35:fe:e9:5d:a7:cd:f2:4f:c4:25:
b3:6e:01:78:57:6e:ed:54:9b:c2:57:f4:12:bc:ff:
d0:7d:e1:98:7a:86:cc:2b:e0:71:79:1e:aa:fe:d3:
69:54:1f:a7:6c:2a:41:62:c2:5b:3e:ce:34:00:36:
54:3c:d5:d3:a1:e7:6d:55:18:cc:e5:6e:59:89:59:
15:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:45:EF:01:BF:13:3F:C3:66:F9:C3:12:A7:B9:66:C6:ED:C3:73:AF
X509v3 Authority Key Identifier:
keyid:CD:92:33:F6:A8:8D:08:F6:55:9C:22:06:B1:BF:F2:65:5B:12:22:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZIz9qiNCPZVnCIGsb_yZVsSIjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/0a116f-5a0b-4566-9f44-b837bf9d4c5f/1/NkXvAb8TP8Nm-cMSp7lmxu3Dc68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/0a116f-5a0b-4566-9f44-b837bf9d4c5f/1/zZIz9qiNCPZVnCIGsb_yZVsSIjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.221.128.0/23
77.221.131.0-77.221.159.255
92.243.64.0/22
92.243.69.0-92.243.70.255
92.243.72.0-92.243.81.255
92.243.83.0-92.243.85.255
92.243.89.0/24
109.120.128.0-109.120.137.255
109.120.139.0/24
109.120.141.0-109.120.143.255
109.120.148.0-109.120.152.255
109.120.155.0-109.120.161.255
109.120.164.0-109.120.166.255
109.120.168.0/22
109.120.173.0/24
109.120.177.0/24
109.120.179.0/24
109.120.184.0/22
IPv6:
2a02:440::/32
Signature Algorithm: sha256WithRSAEncryption
31:e6:6b:2d:a9:36:21:b2:cc:6c:9b:3f:40:9a:1c:d5:0c:34:
8c:de:32:bb:bf:6b:13:1b:21:21:5a:0b:55:6b:e7:e9:e5:de:
75:bf:06:34:20:ad:b3:0e:e2:1c:31:04:3e:aa:e8:76:c0:80:
d3:84:51:61:a0:7e:8d:44:05:33:64:c2:12:35:86:49:25:e6:
15:c2:61:f7:be:98:02:39:9b:23:43:37:6e:cd:e1:2a:16:cd:
30:22:35:dd:0a:fe:c4:10:51:f8:39:92:c9:8d:22:7d:5b:5e:
f1:48:9e:0e:1f:98:3a:6d:ff:88:be:24:12:69:ee:c8:0f:7d:
77:68:33:65:21:80:43:10:df:02:52:1a:e3:1e:cc:0e:fe:fc:
4f:3b:77:e7:3e:31:e5:f0:e8:75:05:aa:5f:9f:29:d4:d1:db:
02:fe:50:3a:ea:fd:1b:49:70:47:cf:b0:eb:ee:3e:5c:66:a9:
52:b2:f4:a8:de:54:af:01:87:80:37:bc:46:b5:e7:2a:a7:86:
ab:3b:d2:c2:1d:22:f8:75:ab:70:6f:30:34:78:2d:cc:65:52:
a8:f0:4b:51:ef:54:dd:e0:d5:80:2c:c6:60:5b:ba:0b:19:98:
a1:56:10:99:e6:07:93:3c:70:28:e6:5c:64:97:a7:e1:df:ba:
06:07:41:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:10 2024 by rpki-client on console-ams.rpki-client.org