Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/0a116f-5a0b-4566-9f44-b837bf9d4c5f/1/qSfDVslxXNTJz__WaNqvnO-TWao.roa
File: qSfDVslxXNTJz__WaNqvnO-TWao.roa (raw, json)
Hash identifier: LRIKol5suOdBr4+RnHjsZn7L7KdtgVb232Rmr6ugp7M=
Subject key identifier: A9:27:C3:56:C9:71:5C:D4:C9:CF:FF:D6:68:DA:AF:9C:EF:93:59:AA
Certificate issuer: /CN=cd9233f6a88d08f6559c2206b1bff2655b122231
Certificate serial: 01882DB3725EE38C3565D7A5E6B660BF864F
Authority key identifier: CD:92:33:F6:A8:8D:08:F6:55:9C:22:06:B1:BF:F2:65:5B:12:22:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZIz9qiNCPZVnCIGsb_yZVsSIjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/0a116f-5a0b-4566-9f44-b837bf9d4c5f/1/qSfDVslxXNTJz__WaNqvnO-TWao.roa
Signing time: Thu 18 May 2023 07:11:54 +0000
ROA not before: Thu 18 May 2023 07:11:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30968
IP address blocks: 109.120.160.0/23 maxlen: 23
109.120.164.0/23 maxlen: 23
109.120.166.0/24 maxlen: 24
109.120.168.0/22 maxlen: 22
109.120.173.0/24 maxlen: 24
109.120.177.0/24 maxlen: 24
109.120.179.0/24 maxlen: 24
109.120.184.0/22 maxlen: 22
77.221.128.0/23 maxlen: 23
77.221.131.0/24 maxlen: 24
77.221.132.0/22 maxlen: 22
77.221.136.0/21 maxlen: 21
109.120.128.0/21 maxlen: 21
77.221.144.0/20 maxlen: 20
109.120.139.0/24 maxlen: 24
109.120.136.0/23 maxlen: 23
109.120.142.0/23 maxlen: 23
109.120.141.0/24 maxlen: 24
109.120.148.0/22 maxlen: 22
109.120.152.0/24 maxlen: 24
109.120.156.0/22 maxlen: 22
109.120.155.0/24 maxlen: 24
92.243.64.0/22 maxlen: 22
92.243.70.0/24 maxlen: 24
92.243.69.0/24 maxlen: 24
92.243.72.0/21 maxlen: 21
92.243.84.0/23 maxlen: 23
92.243.80.0/23 maxlen: 23
92.243.83.0/24 maxlen: 24
2a02:440::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2d:b3:72:5e:e3:8c:35:65:d7:a5:e6:b6:60:bf:86:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd9233f6a88d08f6559c2206b1bff2655b122231
Validity
Not Before: May 18 07:11:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a927c356c9715cd4c9cfffd668daaf9cef9359aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:64:f6:24:f4:be:65:fa:8e:d7:9a:67:b9:34:
5d:b5:c1:af:68:6a:e6:fe:0d:3c:ff:ea:44:5e:7d:
76:70:b7:da:de:d2:4b:cb:3a:64:75:0f:15:e3:57:
23:81:87:74:4b:79:62:99:bd:e0:b6:da:21:2c:51:
0e:42:9a:15:1e:d2:d1:d1:e2:9a:f3:57:f7:1e:87:
43:9b:b1:05:40:bc:45:10:da:6b:e7:e8:ac:87:7f:
82:35:71:bc:ed:32:f6:40:39:b6:ab:e9:16:74:bc:
a5:cb:7b:88:00:6f:89:a9:79:51:36:96:f6:f7:32:
d9:4d:71:24:65:4f:4c:6e:25:63:b9:f9:8f:b2:95:
cb:5e:a4:96:cf:e5:bd:e8:8c:d1:48:89:7e:8b:32:
51:63:60:8b:13:17:0c:d1:d8:2a:f8:ae:60:b1:64:
2a:b5:9f:b6:76:b1:06:a8:06:20:b2:ab:ae:96:fb:
28:7c:89:45:56:53:1e:fa:84:ae:47:41:23:1d:40:
17:52:79:f6:a3:2e:6e:05:12:48:a9:3b:3f:ca:6c:
d1:a6:b2:de:9b:60:09:cf:27:4b:43:18:ca:a5:6f:
44:61:d0:1a:16:1e:a2:ce:b7:ef:c9:96:58:2c:c9:
96:8a:af:40:80:a2:9d:5d:b5:51:a3:77:ab:9e:86:
2a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:27:C3:56:C9:71:5C:D4:C9:CF:FF:D6:68:DA:AF:9C:EF:93:59:AA
X509v3 Authority Key Identifier:
keyid:CD:92:33:F6:A8:8D:08:F6:55:9C:22:06:B1:BF:F2:65:5B:12:22:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZIz9qiNCPZVnCIGsb_yZVsSIjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/0a116f-5a0b-4566-9f44-b837bf9d4c5f/1/qSfDVslxXNTJz__WaNqvnO-TWao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/0a116f-5a0b-4566-9f44-b837bf9d4c5f/1/zZIz9qiNCPZVnCIGsb_yZVsSIjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.221.128.0/23
77.221.131.0-77.221.159.255
92.243.64.0/22
92.243.69.0-92.243.70.255
92.243.72.0-92.243.81.255
92.243.83.0-92.243.85.255
109.120.128.0-109.120.137.255
109.120.139.0/24
109.120.141.0-109.120.143.255
109.120.148.0-109.120.152.255
109.120.155.0-109.120.161.255
109.120.164.0-109.120.166.255
109.120.168.0/22
109.120.173.0/24
109.120.177.0/24
109.120.179.0/24
109.120.184.0/22
IPv6:
2a02:440::/32
Signature Algorithm: sha256WithRSAEncryption
53:8f:24:9b:b0:28:99:f7:7e:66:0c:34:a6:84:fa:23:b4:ee:
da:6a:7a:c8:6f:5a:ec:fb:ac:f6:8e:de:32:c1:64:a2:98:ef:
9b:62:ee:44:b4:31:1b:88:d9:de:e5:82:64:d9:49:01:e0:ea:
bb:81:2f:30:8e:d5:04:84:19:63:fd:d9:77:67:34:9d:51:53:
a2:1f:e5:ce:cf:6b:34:46:be:1a:60:31:d2:80:a4:2d:d4:0a:
62:b8:a7:85:4f:fb:54:87:2e:8c:bf:4d:73:cd:a7:aa:1b:ca:
51:b5:fc:76:22:0d:b9:a1:79:21:fa:2c:e1:95:c2:4c:5b:f0:
1c:6a:aa:3c:57:68:6d:79:9e:2e:10:2b:2b:5b:28:fe:9d:94:
98:8a:d9:56:ed:4d:2c:95:2e:7d:04:77:da:7f:65:10:85:ef:
66:7f:7b:d2:b7:b0:0a:7b:19:b6:5e:0b:eb:2e:91:37:87:6e:
72:22:37:a6:1e:6e:36:3c:98:3d:f2:5b:3d:19:bd:11:64:6f:
d2:af:38:9d:34:4c:db:1d:3e:4b:c6:6d:26:6f:76:ae:13:01:
71:6f:95:13:ec:00:49:e7:68:d5:bc:e9:62:58:f5:b2:27:b9:
f9:f5:86:70:51:fc:2f:d3:74:1c:a0:c8:64:85:a8:51:a6:33:
65:e4:86:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:10 2024 by rpki-client on console-ams.rpki-client.org