Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f6bd5f-7e26-4072-9d1a-157e3c169918/1/8712KM35dDCOoNtgYcWLzmgGtQU.roa
File: 8712KM35dDCOoNtgYcWLzmgGtQU.roa (raw, json)
Hash identifier: fPEBx5uzP4uuCjAPLq7jIhdMJXuTi53rOyFbN+8rxfU=
Subject key identifier: F3:BD:76:28:CD:F9:74:30:8E:A0:DB:60:61:C5:8B:CE:68:06:B5:05
Certificate issuer: /CN=c74eb7ea35238d02997c42eb574a38a30e5d00e7
Certificate serial: 0185701EF319ED5486670516258898B93DBC
Authority key identifier: C7:4E:B7:EA:35:23:8D:02:99:7C:42:EB:57:4A:38:A3:0E:5D:00:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0636jUjjQKZfELrV0o4ow5dAOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f6bd5f-7e26-4072-9d1a-157e3c169918/1/8712KM35dDCOoNtgYcWLzmgGtQU.roa
Signing time: Mon 02 Jan 2023 01:35:54 +0000
ROA not before: Mon 02 Jan 2023 01:35:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34569
IP address blocks: 109.120.192.0/18 maxlen: 18
109.120.213.0/24 maxlen: 24
212.25.32.0/19 maxlen: 19
212.25.58.0/24 maxlen: 24
212.25.62.0/24 maxlen: 24
109.120.215.0/24 maxlen: 24
185.211.200.0/23 maxlen: 23
109.120.218.0/23 maxlen: 23
109.120.222.0/23 maxlen: 23
109.120.224.0/22 maxlen: 22
109.120.220.0/23 maxlen: 23
109.120.230.0/23 maxlen: 23
109.120.228.0/23 maxlen: 24
109.120.232.0/23 maxlen: 23
109.120.240.0/23 maxlen: 23
109.120.238.0/23 maxlen: 23
109.120.242.0/23 maxlen: 23
109.120.244.0/22 maxlen: 22
109.120.252.0/23 maxlen: 23
109.120.248.0/22 maxlen: 22
77.78.38.0/24 maxlen: 24
77.78.56.0/22 maxlen: 22
77.78.60.0/22 maxlen: 22
77.78.0.0/18 maxlen: 18
77.78.20.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:1e:f3:19:ed:54:86:67:05:16:25:88:98:b9:3d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74eb7ea35238d02997c42eb574a38a30e5d00e7
Validity
Not Before: Jan 2 01:35:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3bd7628cdf974308ea0db6061c58bce6806b505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:47:68:59:a8:e5:a3:d5:4c:6e:91:72:96:b3:
ce:e0:51:8a:4e:4f:df:eb:bb:f2:80:1e:06:f4:31:
a6:d6:da:7e:b9:05:91:fb:15:12:87:fc:ee:ad:e4:
78:a3:60:4f:1a:08:1a:4a:30:4e:c9:bc:a7:3c:15:
7d:2c:64:92:95:83:9b:db:e5:d6:f3:3f:f6:fa:4c:
cb:a3:a8:b5:26:bc:a5:5f:f1:c1:f3:a5:8c:b4:d6:
67:cd:30:9c:1b:66:15:a8:df:9c:fc:21:f7:81:ef:
5c:e3:2b:b2:c1:b0:56:75:ad:95:fc:50:1b:64:f3:
4f:5a:b9:2b:e3:99:f8:6a:44:46:00:95:f1:75:18:
bb:1b:dc:2f:db:b8:5d:16:ef:a6:c3:32:d4:6d:35:
43:d9:b5:82:a7:58:e6:ae:1c:44:7f:a7:e8:58:4b:
ee:c1:b1:f8:c0:2c:9a:a4:85:63:6d:7e:6d:e7:49:
fd:ab:2c:47:3b:8c:a2:ec:cd:4d:aa:ec:29:4b:7f:
78:ed:8d:d9:47:b0:0e:53:0a:63:db:59:14:dd:cc:
af:7f:1e:b9:33:f2:5b:80:27:43:47:da:76:55:d2:
0e:6a:d6:b5:3a:70:73:ec:ab:e4:b3:8d:83:51:8d:
46:43:e4:e4:60:fd:10:ce:36:f9:ec:d4:ea:02:b9:
e8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:BD:76:28:CD:F9:74:30:8E:A0:DB:60:61:C5:8B:CE:68:06:B5:05
X509v3 Authority Key Identifier:
keyid:C7:4E:B7:EA:35:23:8D:02:99:7C:42:EB:57:4A:38:A3:0E:5D:00:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0636jUjjQKZfELrV0o4ow5dAOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f6bd5f-7e26-4072-9d1a-157e3c169918/1/8712KM35dDCOoNtgYcWLzmgGtQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f6bd5f-7e26-4072-9d1a-157e3c169918/1/x0636jUjjQKZfELrV0o4ow5dAOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.78.0.0/18
109.120.192.0/18
185.211.200.0/23
212.25.32.0/19
Signature Algorithm: sha256WithRSAEncryption
74:ca:3c:f1:52:4b:ff:98:58:2d:ac:23:8a:d5:56:07:58:d6:
61:d0:f1:da:5f:21:95:69:b3:cd:01:af:3a:4f:c7:12:58:00:
76:21:e0:ee:f7:a8:91:c9:bb:54:2a:e3:f2:0e:d1:57:48:a7:
24:39:98:87:0e:ca:6e:a4:b3:be:3e:d8:41:48:4b:cd:80:1b:
a3:99:6f:de:b7:1c:66:ab:1c:2e:b0:56:fe:97:82:94:bb:55:
de:97:90:4f:ad:eb:c2:cf:f8:3c:83:83:f7:ab:6d:88:7b:24:
25:e8:76:06:e5:d3:57:e0:03:c4:48:4c:84:3f:cf:29:c6:91:
12:53:65:b1:7b:66:6a:61:8c:a4:88:ca:c4:c9:b8:47:33:c1:
7d:b3:22:19:9c:9b:61:15:03:02:54:08:53:73:b2:38:f9:ce:
1f:df:c1:5d:7e:46:30:a8:18:5f:2a:fb:42:8c:6a:ac:8a:d7:
d2:7a:c1:54:f9:e0:fa:d6:96:ef:f1:0c:70:66:80:b7:aa:3d:
36:f8:87:30:bd:e7:6f:b2:81:60:00:97:b9:2b:a0:28:19:04:
4c:66:78:8d:df:93:c8:e4:6d:2b:69:7e:a6:59:13:79:27:61:
d0:32:9b:a9:b0:0f:e6:bd:7f:25:c3:2a:4a:66:49:b2:95:09:
35:1a:f9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:04 2024 by rpki-client on console-ams.rpki-client.org