Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/0a116f-5a0b-4566-9f44-b837bf9d4c5f/1/R7Am8lXoRw39ZZAk33vv2urpNbc.roa
File: R7Am8lXoRw39ZZAk33vv2urpNbc.roa (raw, json)
Hash identifier: QjWaDtSOUesZDhrrawpFRrwnWwRR8od6BesNJ1rrutw=
Subject key identifier: 47:B0:26:F2:55:E8:47:0D:FD:65:90:24:DF:7B:EF:DA:EA:E9:35:B7
Certificate issuer: /CN=cd9233f6a88d08f6559c2206b1bff2655b122231
Certificate serial: 0182280083BD04C85771DFF5257F7BBEF7C3
Authority key identifier: CD:92:33:F6:A8:8D:08:F6:55:9C:22:06:B1:BF:F2:65:5B:12:22:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZIz9qiNCPZVnCIGsb_yZVsSIjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/0a116f-5a0b-4566-9f44-b837bf9d4c5f/1/R7Am8lXoRw39ZZAk33vv2urpNbc.roa
Signing time: Fri 22 Jul 2022 22:21:38 +0000
ROA not before: Fri 22 Jul 2022 22:21:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30968
IP address blocks: 109.120.160.0/23 maxlen: 23
109.120.164.0/23 maxlen: 23
109.120.166.0/24 maxlen: 24
109.120.168.0/22 maxlen: 22
109.120.173.0/24 maxlen: 24
109.120.177.0/24 maxlen: 24
109.120.179.0/24 maxlen: 24
109.120.184.0/22 maxlen: 22
92.243.92.0/24 maxlen: 24
77.221.128.0/23 maxlen: 23
77.221.131.0/24 maxlen: 24
77.221.132.0/22 maxlen: 22
77.221.136.0/21 maxlen: 21
109.120.128.0/21 maxlen: 21
77.221.144.0/20 maxlen: 20
109.120.139.0/24 maxlen: 24
109.120.136.0/23 maxlen: 23
109.120.142.0/23 maxlen: 23
109.120.141.0/24 maxlen: 24
109.120.148.0/22 maxlen: 22
109.120.152.0/24 maxlen: 24
109.120.156.0/22 maxlen: 22
109.120.155.0/24 maxlen: 24
92.243.64.0/22 maxlen: 22
92.243.70.0/24 maxlen: 24
92.243.69.0/24 maxlen: 24
92.243.72.0/21 maxlen: 21
92.243.84.0/23 maxlen: 23
92.243.80.0/23 maxlen: 23
92.243.83.0/24 maxlen: 24
92.243.89.0/24 maxlen: 24
2a02:440::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:28:00:83:bd:04:c8:57:71:df:f5:25:7f:7b:be:f7:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd9233f6a88d08f6559c2206b1bff2655b122231
Validity
Not Before: Jul 22 22:21:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=47b026f255e8470dfd659024df7befdaeae935b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:96:91:01:62:89:62:03:89:b6:1f:fb:3d:d8:
4a:15:3b:b3:3b:0f:de:28:22:ba:71:29:3a:18:bf:
02:9c:56:b9:cf:2f:7a:26:3e:9c:c8:8d:f0:72:19:
37:99:79:ca:91:50:30:eb:71:41:92:63:e5:b2:90:
75:cb:45:76:fd:d2:83:92:5c:9c:14:80:e8:06:63:
5d:89:00:27:98:e6:9c:5b:ce:3e:f6:92:ed:86:52:
d5:7b:1c:73:ef:28:29:95:92:aa:ec:b9:ba:b2:06:
61:92:ea:33:1f:89:73:40:53:50:c0:e7:df:1b:e6:
f0:73:52:b8:01:39:70:be:94:77:89:86:82:f0:42:
cb:19:fc:54:b6:26:52:b2:fc:f7:2e:7e:7c:bd:23:
d8:06:f8:8f:3c:df:94:ab:73:47:a4:0f:df:41:92:
68:55:ae:6a:2a:52:a2:65:17:41:4a:cf:50:bc:2c:
f5:e5:31:77:7a:34:77:d5:d2:7a:e5:45:72:c5:06:
bb:fd:32:4b:d1:e8:6e:2a:09:a8:1c:03:86:e9:af:
0a:2d:ff:7c:b0:db:8a:1f:52:2b:ff:ec:72:ae:f6:
f2:8d:3f:80:34:83:c3:35:97:7f:f1:f3:3b:28:a8:
6a:4d:90:2e:ae:8f:80:f3:03:68:23:07:70:40:1b:
37:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B0:26:F2:55:E8:47:0D:FD:65:90:24:DF:7B:EF:DA:EA:E9:35:B7
X509v3 Authority Key Identifier:
keyid:CD:92:33:F6:A8:8D:08:F6:55:9C:22:06:B1:BF:F2:65:5B:12:22:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZIz9qiNCPZVnCIGsb_yZVsSIjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/0a116f-5a0b-4566-9f44-b837bf9d4c5f/1/R7Am8lXoRw39ZZAk33vv2urpNbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/0a116f-5a0b-4566-9f44-b837bf9d4c5f/1/zZIz9qiNCPZVnCIGsb_yZVsSIjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.221.128.0/23
77.221.131.0-77.221.159.255
92.243.64.0/22
92.243.69.0-92.243.70.255
92.243.72.0-92.243.81.255
92.243.83.0-92.243.85.255
92.243.89.0/24
92.243.92.0/24
109.120.128.0-109.120.137.255
109.120.139.0/24
109.120.141.0-109.120.143.255
109.120.148.0-109.120.152.255
109.120.155.0-109.120.161.255
109.120.164.0-109.120.166.255
109.120.168.0/22
109.120.173.0/24
109.120.177.0/24
109.120.179.0/24
109.120.184.0/22
IPv6:
2a02:440::/32
Signature Algorithm: sha256WithRSAEncryption
86:07:a9:1c:57:78:1a:6d:57:75:2a:9e:4e:8d:81:e6:cc:c7:
dd:f5:ef:4e:68:7f:a8:86:24:63:19:d4:42:2a:8b:30:c6:75:
1b:53:78:6b:0a:f3:bd:42:d5:e8:4a:c4:69:f5:92:68:0f:48:
c7:f9:4a:6e:c7:cb:c0:c3:5c:2c:48:ea:89:6f:dc:66:d6:71:
eb:80:0f:ec:82:78:bc:92:f5:16:fd:30:d2:57:78:35:24:5c:
fb:46:59:e8:04:6c:d0:67:62:50:bb:44:69:a9:8e:36:5f:b0:
d1:c2:8d:d6:57:be:59:01:35:27:fb:ca:1a:f2:f3:f6:19:fe:
52:a5:8f:13:41:06:ee:83:40:a5:7c:98:6a:c0:97:8d:48:9c:
e9:ba:0f:c0:22:32:80:13:86:da:22:21:3f:f8:13:ff:e2:46:
ae:30:aa:62:8f:22:92:e4:82:a3:9b:43:4f:83:ca:80:d5:6b:
3d:2d:8d:cc:63:d3:af:6e:51:03:c7:4d:5d:3c:4f:8b:d1:74:
d4:49:fb:52:8e:e5:d2:b9:b4:6c:d7:6d:08:2f:c8:0a:28:0a:
d5:ad:e8:c8:7a:cf:5e:32:84:c6:7c:d0:6b:9c:55:55:bb:10:
2a:68:d6:fb:08:5c:79:c5:7e:3a:28:73:03:82:e5:ba:94:30:
8a:a0:34:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:10 2024 by rpki-client on console-ams.rpki-client.org