Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/0a116f-5a0b-4566-9f44-b837bf9d4c5f/1/XcztR1XNZtpTnNO10uwl-ccgXH8.roa
File: XcztR1XNZtpTnNO10uwl-ccgXH8.roa (raw, json)
Hash identifier: hnk19Psn2p7PRFdUuvWIptCzwoCeqnkkyMVquaLc8q4=
Subject key identifier: 5D:CC:ED:47:55:CD:66:DA:53:9C:D3:B5:D2:EC:25:F9:C7:20:5C:7F
Certificate issuer: /CN=cd9233f6a88d08f6559c2206b1bff2655b122231
Certificate serial: 0188D338B859D58C85307F79C839E53AAD97
Authority key identifier: CD:92:33:F6:A8:8D:08:F6:55:9C:22:06:B1:BF:F2:65:5B:12:22:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZIz9qiNCPZVnCIGsb_yZVsSIjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/0a116f-5a0b-4566-9f44-b837bf9d4c5f/1/XcztR1XNZtpTnNO10uwl-ccgXH8.roa
Signing time: Mon 19 Jun 2023 10:34:49 +0000
ROA not before: Mon 19 Jun 2023 10:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30968
IP address blocks: 109.120.160.0/23 maxlen: 23
109.120.164.0/23 maxlen: 23
109.120.166.0/24 maxlen: 24
109.120.168.0/22 maxlen: 22
109.120.173.0/24 maxlen: 24
109.120.177.0/24 maxlen: 24
109.120.179.0/24 maxlen: 24
109.120.184.0/22 maxlen: 22
77.221.128.0/23 maxlen: 23
77.221.131.0/24 maxlen: 24
77.221.132.0/22 maxlen: 22
77.221.136.0/21 maxlen: 21
109.120.128.0/21 maxlen: 21
77.221.144.0/20 maxlen: 20
109.120.139.0/24 maxlen: 24
109.120.136.0/23 maxlen: 23
109.120.142.0/23 maxlen: 23
109.120.141.0/24 maxlen: 24
109.120.148.0/22 maxlen: 22
109.120.152.0/24 maxlen: 24
109.120.156.0/22 maxlen: 22
109.120.155.0/24 maxlen: 24
92.243.69.0/24 maxlen: 24
92.243.72.0/21 maxlen: 21
92.243.83.0/24 maxlen: 24
2a02:440::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d3:38:b8:59:d5:8c:85:30:7f:79:c8:39:e5:3a:ad:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd9233f6a88d08f6559c2206b1bff2655b122231
Validity
Not Before: Jun 19 10:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5dcced4755cd66da539cd3b5d2ec25f9c7205c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5a:4e:28:92:1e:8d:fe:0b:76:af:05:f4:c4:
0a:a7:56:87:2a:23:e2:b8:a9:73:42:3c:fa:d8:ab:
3a:fc:0c:c6:bd:1c:40:d0:8d:b2:49:4d:0f:bd:62:
e6:1b:ac:4f:f2:c8:c9:18:2c:16:18:dc:82:c3:ed:
f2:c6:ac:48:71:8c:67:e3:ce:61:70:12:d3:c9:44:
15:79:f9:9e:81:52:f9:d5:17:7f:ad:94:fb:0f:9d:
9f:ea:30:04:cc:0d:76:f0:f0:38:35:80:66:38:0e:
8e:f7:56:a0:c2:47:72:4c:c9:50:b6:6c:37:2f:c0:
8d:44:a0:51:3d:f7:59:2f:07:a6:c1:8a:70:a0:92:
d3:c1:ce:15:6d:65:71:6d:64:ce:0c:86:e7:c7:d8:
20:fb:4a:65:03:11:33:fc:b4:67:23:0b:2d:ef:5c:
aa:dc:56:c1:5f:bd:b8:b5:3c:b3:e1:98:01:1d:8a:
66:1a:cd:6f:2a:19:35:c3:64:d5:0f:1a:0c:38:7a:
d2:d4:a1:9d:d0:f5:fa:4b:c6:56:68:a4:e6:fc:c1:
61:7e:c5:5b:72:89:5a:2e:56:ff:7c:e2:d2:f7:6a:
c0:2c:cf:4c:db:6b:d4:0e:53:28:b3:ca:4d:8d:e3:
95:94:60:cc:49:e2:bf:83:65:8a:10:06:b1:28:c8:
cc:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:CC:ED:47:55:CD:66:DA:53:9C:D3:B5:D2:EC:25:F9:C7:20:5C:7F
X509v3 Authority Key Identifier:
keyid:CD:92:33:F6:A8:8D:08:F6:55:9C:22:06:B1:BF:F2:65:5B:12:22:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZIz9qiNCPZVnCIGsb_yZVsSIjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/0a116f-5a0b-4566-9f44-b837bf9d4c5f/1/XcztR1XNZtpTnNO10uwl-ccgXH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/0a116f-5a0b-4566-9f44-b837bf9d4c5f/1/zZIz9qiNCPZVnCIGsb_yZVsSIjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.221.128.0/23
77.221.131.0-77.221.159.255
92.243.69.0/24
92.243.72.0/21
92.243.83.0/24
109.120.128.0-109.120.137.255
109.120.139.0/24
109.120.141.0-109.120.143.255
109.120.148.0-109.120.152.255
109.120.155.0-109.120.161.255
109.120.164.0-109.120.166.255
109.120.168.0/22
109.120.173.0/24
109.120.177.0/24
109.120.179.0/24
109.120.184.0/22
IPv6:
2a02:440::/32
Signature Algorithm: sha256WithRSAEncryption
4f:ff:3b:35:40:db:e1:17:18:45:23:51:7a:dc:f7:ed:8c:93:
76:7c:6a:7d:de:49:c6:5b:31:07:50:56:4a:69:bc:16:19:19:
82:ec:e5:d7:62:56:51:27:0f:d4:db:8e:d5:02:41:4d:6b:bb:
c4:cc:eb:a4:98:2c:3d:22:02:26:ea:cf:35:e8:9f:a5:b2:3e:
bd:56:41:e1:9c:0b:e1:f2:5d:a1:d5:ba:4d:fd:38:34:e4:f1:
e4:c5:9b:8c:e0:b8:30:57:54:bf:15:c4:c9:32:57:e8:f9:c1:
45:7b:15:d8:32:5b:db:25:be:1b:7f:7c:ae:7f:c2:16:50:ec:
fc:97:a9:0b:49:ba:ac:74:9c:ad:d3:55:e2:ae:f0:da:8c:99:
08:77:d8:a2:61:00:28:8f:a6:6b:39:20:9e:c7:ad:b1:af:23:
bb:c4:c2:7e:23:1c:80:8c:31:c0:79:c5:2e:b3:f4:7f:c6:90:
1b:fb:0e:cd:a7:6b:a7:94:09:48:1a:38:c7:c1:d5:5c:ff:99:
4b:53:28:c1:56:aa:40:26:3d:0b:e9:c7:0a:8a:7a:fc:2d:69:
8e:dd:47:6c:c4:ea:2a:15:96:64:89:d1:a1:9d:55:c1:62:ed:
f4:7f:ca:b3:44:b5:04:18:08:b6:2e:b2:7b:91:bc:f6:eb:0f:
65:e2:96:ec
-----BEGIN CERTIFICATE-----
MIIFmzCCBIOgAwIBAgISAYjTOLhZ1YyFMH95yDnlOq2XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkOTIzM2Y2YTg4ZDA4ZjY1NTljMjIwNmIxYmZmMjY1NWIx
MjIyMzEwHhcNMjMwNjE5MTAzNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZGNjZWQ0NzU1Y2Q2NmRhNTM5Y2QzYjVkMmVjMjVmOWM3MjA1YzdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslpOKJIejf4Ldq8F9MQKp1aHKiPi
uKlzQjz62Ks6/AzGvRxA0I2ySU0PvWLmG6xP8sjJGCwWGNyCw+3yxqxIcYxn485h
cBLTyUQVefmegVL51Rd/rZT7D52f6jAEzA128PA4NYBmOA6O91agwkdyTMlQtmw3
L8CNRKBRPfdZLwemwYpwoJLTwc4VbWVxbWTODIbnx9gg+0plAxEz/LRnIwst71yq
3FbBX724tTyz4ZgBHYpmGs1vKhk1w2TVDxoMOHrS1KGd0PX6S8ZWaKTm/MFhfsVb
colaLlb/fOLS92rALM9M22vUDlMos8pNjeOVlGDMSeK/g2WKEAaxKMjMNQIDAQAB
o4ICpzCCAqMwHQYDVR0OBBYEFF3M7UdVzWbaU5zTtdLsJfnHIFx/MB8GA1UdIwQY
MBaAFM2SM/aojQj2VZwiBrG/8mVbEiIxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelpJejlxaU5DUFpWbkNJR3NiX3laVnNTSWpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8wYTExNmYtNWEwYi00NTY2LTlmNDQt
YjgzN2JmOWQ0YzVmLzEvWGN6dFIxWE5adHBUbk5PMTB1d2wtY2NnWEg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8wYTExNmYtNWEwYi00NTY2LTlmNDQtYjgzN2JmOWQ0YzVm
LzEvelpJejlxaU5DUFpWbkNJR3NiX3laVnNTSWpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG8BggrBgEFBQcBBwEB/wSBrDCBqTCBlwQCAAEwgZADBAFN
3YAwDAMEAE3dgwMEBU3dgAMEAFzzRQMEA1zzSAMEAFzzUzAMAwQHbXiAAwQBbXiI
AwQAbXiLMAwDBABteI0DBARteIAwDAMEAm14lAMEAG14mDAMAwQAbXibAwQBbXig
MAwDBAJteKQDBABteKYDBAJteKgDBABteK0DBABteLEDBABteLMDBAJteLgwDQQC
AAIwBwMFACoCBEAwDQYJKoZIhvcNAQELBQADggEBAE//OzVA2+EXGEUjUXrc9+2M
k3Z8an3eScZbMQdQVkppvBYZGYLs5ddiVlEnD9TbjtUCQU1ru8TM66SYLD0iAibq
zzXon6WyPr1WQeGcC+HyXaHVuk39ODTk8eTFm4zguDBXVL8VxMkyV+j5wUV7Fdgy
W9slvht/fK5/whZQ7PyXqQtJuqx0nK3TVeKu8NqMmQh32KJhACiPpms5IJ7HrbGv
I7vEwn4jHICMMcB5xS6z9H/GkBv7Ds2na6eUCUgaOMfB1Vz/mUtTKMFWqkAmPQvp
xwqKevwtaY7dR2zE6ioVlmSJ0aGdVcFi7fR/yrNEtQQYCLYusnuRvPbrD2Xiluw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:10 2024 by rpki-client on console-ams.rpki-client.org