Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f6bd5f-7e26-4072-9d1a-157e3c169918/1/4jWLa5rVQR2ygyS7yxv2wVlJqcA.roa
File: 4jWLa5rVQR2ygyS7yxv2wVlJqcA.roa (raw, json)
Hash identifier: M9lieWnSZyEkDra3D0BTG91kSeFL0u+U12uvj6uQsxs=
Subject key identifier: E2:35:8B:6B:9A:D5:41:1D:B2:83:24:BB:CB:1B:F6:C1:59:49:A9:C0
Certificate issuer: /CN=c74eb7ea35238d02997c42eb574a38a30e5d00e7
Certificate serial: 02807189
Authority key identifier: C7:4E:B7:EA:35:23:8D:02:99:7C:42:EB:57:4A:38:A3:0E:5D:00:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0636jUjjQKZfELrV0o4ow5dAOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f6bd5f-7e26-4072-9d1a-157e3c169918/1/4jWLa5rVQR2ygyS7yxv2wVlJqcA.roa
Signing time: Tue 15 Mar 2022 13:56:15 +0000
ROA not before: Tue 15 Mar 2022 13:56:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34569
IP address blocks: 109.120.192.0/18 maxlen: 18
109.120.213.0/24 maxlen: 24
77.78.38.0/24 maxlen: 24
212.25.32.0/19 maxlen: 19
77.78.56.0/22 maxlen: 22
77.78.60.0/22 maxlen: 22
212.25.58.0/24 maxlen: 24
212.25.62.0/24 maxlen: 24
109.120.215.0/24 maxlen: 24
185.211.200.0/23 maxlen: 23
109.120.218.0/23 maxlen: 23
109.120.222.0/23 maxlen: 23
109.120.224.0/22 maxlen: 22
109.120.220.0/23 maxlen: 23
109.120.230.0/23 maxlen: 23
109.120.232.0/23 maxlen: 23
109.120.240.0/23 maxlen: 23
109.120.238.0/23 maxlen: 23
109.120.242.0/23 maxlen: 23
109.120.244.0/22 maxlen: 22
77.78.0.0/18 maxlen: 18
109.120.252.0/23 maxlen: 23
109.120.248.0/22 maxlen: 22
77.78.20.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41972105 (0x2807189)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74eb7ea35238d02997c42eb574a38a30e5d00e7
Validity
Not Before: Mar 15 13:56:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e2358b6b9ad5411db28324bbcb1bf6c15949a9c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9c:8e:8f:43:3f:6c:27:86:71:00:44:6f:47:
c5:27:a0:61:cb:53:c7:0d:53:37:b5:08:3d:a6:c2:
ab:72:76:02:98:0a:57:8e:c1:c6:03:45:56:46:f4:
4d:3b:6b:5b:30:5e:ff:d4:db:83:07:7c:01:a8:4f:
0a:a9:63:32:26:4d:52:68:91:e9:ce:dd:b3:cd:28:
18:5b:c3:b5:92:c4:28:19:cc:f7:a4:3e:d9:45:d0:
8e:aa:e8:b7:c8:58:58:b1:12:a7:86:11:53:1f:0a:
0f:56:6a:7f:60:cf:ec:ab:89:cc:03:af:d2:0d:6e:
aa:ab:32:3c:df:e5:db:b6:8f:d9:42:83:ee:3b:61:
a9:f1:be:f1:b8:6b:fe:85:9a:9e:59:e1:a9:3d:46:
5f:48:6c:25:39:9a:dd:6e:b4:ca:64:2b:af:3a:ae:
de:6f:02:38:91:f5:26:dd:b4:78:a3:a5:64:b9:b0:
47:8b:9b:1f:0c:b4:a8:6d:c7:b1:be:4a:b2:23:b7:
7f:23:4a:a2:2c:9a:c1:41:07:ef:9e:7d:38:80:58:
19:84:21:16:68:91:d7:59:c9:7d:9f:54:92:50:6a:
98:51:eb:0a:10:a7:d2:be:f1:05:19:cc:49:c6:75:
9e:01:de:a2:03:76:72:6e:e1:7c:27:6b:07:91:10:
d7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:35:8B:6B:9A:D5:41:1D:B2:83:24:BB:CB:1B:F6:C1:59:49:A9:C0
X509v3 Authority Key Identifier:
keyid:C7:4E:B7:EA:35:23:8D:02:99:7C:42:EB:57:4A:38:A3:0E:5D:00:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0636jUjjQKZfELrV0o4ow5dAOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f6bd5f-7e26-4072-9d1a-157e3c169918/1/4jWLa5rVQR2ygyS7yxv2wVlJqcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f6bd5f-7e26-4072-9d1a-157e3c169918/1/x0636jUjjQKZfELrV0o4ow5dAOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.78.0.0/18
109.120.192.0/18
185.211.200.0/23
212.25.32.0/19
Signature Algorithm: sha256WithRSAEncryption
19:ed:2a:54:98:f6:d0:23:04:0e:ba:49:ba:1c:03:6e:72:dd:
45:d6:b0:fa:8c:2e:2d:df:e6:9a:b1:9d:46:e9:65:a9:58:d8:
76:70:03:77:c8:3e:36:ed:ed:9a:b1:05:14:0f:9f:84:fb:61:
20:4e:b7:29:c8:0e:68:a0:f1:1c:3e:0a:5f:20:57:1a:37:01:
f0:8f:f0:2b:76:63:3d:21:50:91:18:b8:91:cb:79:f5:70:0f:
6a:cc:3d:1e:74:18:ac:92:34:9f:87:d3:7e:3f:47:9b:b4:53:
69:a6:10:41:df:b6:89:26:eb:29:80:f5:76:5c:bd:f0:27:ef:
00:0d:08:fe:2b:4d:b0:8c:2b:fd:0e:15:48:87:32:89:36:23:
bd:c0:d8:8b:f1:42:dd:84:2f:60:db:b9:92:0d:0e:c4:a1:81:
59:5f:aa:a5:7d:0d:d9:a0:ed:50:10:63:9e:b1:c3:dc:63:05:
15:b2:e5:7a:66:23:22:83:b1:b7:cc:37:66:3b:ed:7d:e7:56:
27:92:96:94:96:0b:1e:c1:cc:4f:3d:84:13:f2:6f:ba:1a:e9:
e3:bd:64:23:03:37:2d:d0:1d:93:00:0b:13:1c:45:ec:40:45:
8a:4c:66:10:87:77:64:82:fb:a1:c6:f4:80:2b:5e:53:aa:57:
4e:d9:a3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:00 2024 by rpki-client on console-fra.rpki-client.org