Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/B627jyelsOrc-4KEk9rr5UX-6bs.roa
File: B627jyelsOrc-4KEk9rr5UX-6bs.roa (raw, json)
Hash identifier: emvror6oG2+K4wO+RDr3+Uj+3eP2vVbV6xrjlFdUiWQ=
Subject key identifier: 07:AD:BB:8F:27:A5:B0:EA:DC:FB:82:84:93:DA:EB:E5:45:FE:E9:BB
Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Certificate serial: 01942369FE30DB2E75533CCE2604E7A1B4B7
Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/B627jyelsOrc-4KEk9rr5UX-6bs.roa
Signing time: Wed 01 Jan 2025 19:48:56 +0000
ROA not before: Wed 01 Jan 2025 19:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210644
IP address blocks: 77.221.136.0/22 maxlen: 22
77.221.140.0/22 maxlen: 22
77.221.148.0/24 maxlen: 24
77.221.149.0/24 maxlen: 24
77.221.152.0/23 maxlen: 23
77.221.154.0/23 maxlen: 23
77.221.156.0/23 maxlen: 23
77.221.158.0/23 maxlen: 23
109.120.132.0/23 maxlen: 23
109.120.134.0/23 maxlen: 23
109.120.138.0/24 maxlen: 24
109.120.139.0/24 maxlen: 24
109.120.140.0/24 maxlen: 24
109.120.149.0/24 maxlen: 24
109.120.150.0/24 maxlen: 24
109.120.151.0/24 maxlen: 24
109.120.155.0/24 maxlen: 24
109.120.156.0/23 maxlen: 24
109.120.176.0/23 maxlen: 23
109.120.178.0/23 maxlen: 23
109.120.184.0/23 maxlen: 23
109.120.186.0/23 maxlen: 23
109.120.186.0/24 maxlen: 24
109.120.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:fe:30:db:2e:75:53:3c:ce:26:04:e7:a1:b4:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Validity
Not Before: Jan 1 19:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07adbb8f27a5b0eadcfb828493daebe545fee9bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:12:19:44:5a:17:94:34:00:0c:12:d5:2b:9a:
9d:ba:e0:32:3f:18:d7:d7:0d:fe:cc:5e:28:cf:6c:
c8:71:1e:38:14:c7:d1:cb:c1:bf:8b:31:2b:bd:cf:
ac:87:17:f5:d8:62:11:9e:bb:49:b7:64:36:4a:8d:
c3:57:15:9e:9e:ea:fa:ed:4d:6b:ca:0b:f1:e3:06:
2f:66:18:88:44:0e:22:1c:0b:54:19:71:4e:4e:14:
56:ca:c3:4b:4f:77:b1:64:9c:24:98:33:fd:3b:c4:
02:5d:5d:fc:26:d9:5f:03:df:a5:cf:0c:9d:31:9e:
5f:b1:96:5c:e8:19:c2:25:58:4e:5c:e1:8d:08:b2:
45:2f:c4:3f:d6:a2:1b:8f:92:6d:fe:45:ee:12:6c:
95:c2:8b:50:47:ee:05:7e:66:fb:dd:83:b1:c4:bf:
cf:a2:51:0a:f1:02:da:44:4f:a6:14:7d:54:85:79:
40:a2:5c:23:71:bd:ca:85:b2:24:b9:c2:df:ff:9c:
87:f7:7c:99:22:1e:4c:af:ba:e8:e0:c0:18:e8:a1:
a8:9d:b6:4f:ed:bc:8a:92:7f:6f:3d:81:81:a0:f6:
e4:5a:c7:4b:ae:99:9d:6e:45:8a:7e:de:da:60:b2:
7b:21:7b:3f:c8:f6:8c:a3:4a:09:65:85:9b:d4:45:
6f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AD:BB:8F:27:A5:B0:EA:DC:FB:82:84:93:DA:EB:E5:45:FE:E9:BB
X509v3 Authority Key Identifier:
keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/B627jyelsOrc-4KEk9rr5UX-6bs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.221.136.0/21
77.221.148.0/23
77.221.152.0/21
109.120.132.0/22
109.120.138.0-109.120.140.255
109.120.149.0-109.120.151.255
109.120.155.0-109.120.157.255
109.120.176.0/22
109.120.184.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:b5:ac:1a:8f:ba:81:fc:f0:ca:56:0b:d9:49:58:42:f8:15:
29:99:da:3d:78:1c:b7:7e:6b:65:47:70:bc:0b:2b:b9:ac:fa:
45:33:cf:a6:2e:55:5f:42:84:cf:e0:1a:08:1b:9b:02:e6:67:
c9:7f:aa:39:85:39:a1:63:60:a5:0b:cc:79:f5:d0:9c:ab:10:
d7:e8:a3:c9:be:56:07:bc:f3:ed:f9:92:7d:aa:35:d5:16:e9:
8b:f7:6b:f6:cc:cd:e5:93:85:21:ab:79:bc:ef:c4:fa:c5:ee:
c7:5e:9f:0e:c0:c5:82:91:84:ee:25:d0:d7:6b:9c:60:15:ec:
fd:14:90:c5:23:a6:8d:66:3d:86:52:cb:8e:8d:0b:50:e6:e1:
94:51:fc:87:81:b8:f0:77:e8:82:7e:5d:3d:a8:8b:3b:db:18:
33:d0:61:ea:0e:b3:09:a8:a4:39:25:27:95:18:df:bf:fc:6a:
b1:8f:ab:ec:60:28:40:5c:61:aa:ea:f5:96:df:af:f1:f7:b0:
a2:09:70:11:b1:77:f2:95:4c:a0:68:19:dc:d0:af:ec:1f:cd:
7e:54:f0:76:b8:27:ef:5c:f8:81:e4:56:cd:af:60:1b:37:73:
6d:f1:3d:4e:24:d3:69:62:8f:7c:8d:c0:5c:4b:fb:19:4b:7d:
b5:e7:77:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:00:27 2025 by rpki-client