Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f6bd5f-7e26-4072-9d1a-157e3c169918/1/VTcxHMWbB2fzoRliXbewiCwFJ_s.roa
File: VTcxHMWbB2fzoRliXbewiCwFJ_s.roa (raw, json)
Hash identifier: 2HvBotby4OzGP5kFYNNNxpk4phRsDx+6nOVAw/OW8iI=
Subject key identifier: 55:37:31:1C:C5:9B:07:67:F3:A1:19:62:5D:B7:B0:88:2C:05:27:FB
Certificate issuer: /CN=c74eb7ea35238d02997c42eb574a38a30e5d00e7
Certificate serial: 018CC8011A836B8CF77E63D44C2F0CB1977E
Authority key identifier: C7:4E:B7:EA:35:23:8D:02:99:7C:42:EB:57:4A:38:A3:0E:5D:00:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0636jUjjQKZfELrV0o4ow5dAOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f6bd5f-7e26-4072-9d1a-157e3c169918/1/VTcxHMWbB2fzoRliXbewiCwFJ_s.roa
Signing time: Tue 02 Jan 2024 02:29:24 +0000
ROA not before: Tue 02 Jan 2024 02:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34569
IP address blocks: 109.120.192.0/18 maxlen: 18
109.120.213.0/24 maxlen: 24
212.25.32.0/19 maxlen: 19
212.25.58.0/24 maxlen: 24
212.25.62.0/24 maxlen: 24
109.120.215.0/24 maxlen: 24
185.211.200.0/23 maxlen: 23
109.120.218.0/23 maxlen: 23
109.120.222.0/23 maxlen: 23
109.120.224.0/22 maxlen: 22
109.120.220.0/23 maxlen: 23
109.120.230.0/23 maxlen: 23
109.120.228.0/23 maxlen: 24
109.120.232.0/23 maxlen: 23
109.120.238.0/23 maxlen: 23
109.120.240.0/23 maxlen: 23
109.120.242.0/23 maxlen: 23
109.120.244.0/22 maxlen: 22
109.120.252.0/23 maxlen: 23
109.120.248.0/22 maxlen: 22
77.78.38.0/24 maxlen: 24
77.78.56.0/22 maxlen: 22
77.78.60.0/22 maxlen: 22
77.78.0.0/18 maxlen: 18
77.78.20.0/23 maxlen: 23
2a13:86c1:400::/40 maxlen: 40
2a13:86c1:300::/40 maxlen: 40
2a13:86c1:e00::/40 maxlen: 40
2a13:86c1:b00::/40 maxlen: 40
2a13:86c1::/40 maxlen: 40
2a13:86c1:500::/40 maxlen: 40
2a13:86c1:200::/40 maxlen: 40
2a13:86c1:700::/40 maxlen: 40
2a13:86c1:a00::/40 maxlen: 40
2a13:86c1:d00::/40 maxlen: 40
2a13:86c1:1000::/40 maxlen: 40
2a13:86c1:900::/40 maxlen: 40
2a13:86c1:c00::/40 maxlen: 40
2a13:86c1:800::/40 maxlen: 40
2a13:86c1:600::/40 maxlen: 40
2a13:86c1:f00::/40 maxlen: 40
2a13:86c1:100::/40 maxlen: 40
2a13:86c2::/40 maxlen: 40
2a13:86c0::/40 maxlen: 40
2a13:86c0::/29 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:1a:83:6b:8c:f7:7e:63:d4:4c:2f:0c:b1:97:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74eb7ea35238d02997c42eb574a38a30e5d00e7
Validity
Not Before: Jan 2 02:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5537311cc59b0767f3a119625db7b0882c0527fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:27:63:c6:fa:8a:09:fe:3f:c4:c2:ff:c6:08:
06:4d:a0:dd:f3:5c:2b:2c:df:af:1f:51:a8:b3:db:
b0:a9:44:ac:2f:67:27:04:ff:44:5f:4d:5e:d8:26:
76:6c:c5:ad:fc:34:86:5e:77:7f:b1:13:3e:f5:01:
0c:63:f8:41:da:5b:1a:da:8d:6f:32:0e:48:dc:23:
70:79:fd:fd:75:b9:18:57:f9:73:1b:cc:bb:65:27:
72:c0:c3:40:e6:14:ca:ec:59:52:d3:9a:ff:4b:6c:
13:00:b0:cc:ba:fa:6f:e3:b6:54:5d:c4:e3:49:fa:
46:95:41:af:dc:ed:6c:7f:d4:1b:c4:ef:cb:e9:08:
f1:fc:b7:67:6f:0b:94:83:34:aa:ef:8a:95:d2:e7:
82:9c:8e:50:fa:13:1e:4f:9c:53:f0:40:85:4d:b9:
5d:ce:be:bc:6e:cd:2c:93:27:93:c2:9a:6e:4c:02:
00:d9:6a:e7:22:2d:21:00:2e:f0:84:13:54:91:d4:
36:91:34:ce:ac:fe:e8:86:0e:ac:3f:fa:c2:f0:1b:
bd:bb:62:a7:f5:dc:45:de:58:4e:09:45:85:e3:c3:
b5:66:6f:ff:38:33:91:76:8d:f0:39:b8:80:54:04:
cf:12:66:7b:47:ec:de:41:64:7e:e4:cf:ce:63:6d:
ed:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:37:31:1C:C5:9B:07:67:F3:A1:19:62:5D:B7:B0:88:2C:05:27:FB
X509v3 Authority Key Identifier:
keyid:C7:4E:B7:EA:35:23:8D:02:99:7C:42:EB:57:4A:38:A3:0E:5D:00:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0636jUjjQKZfELrV0o4ow5dAOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f6bd5f-7e26-4072-9d1a-157e3c169918/1/VTcxHMWbB2fzoRliXbewiCwFJ_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f6bd5f-7e26-4072-9d1a-157e3c169918/1/x0636jUjjQKZfELrV0o4ow5dAOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.78.0.0/18
109.120.192.0/18
185.211.200.0/23
212.25.32.0/19
IPv6:
2a13:86c0::/29
Signature Algorithm: sha256WithRSAEncryption
8a:77:af:ae:ab:1d:4e:e4:84:5a:56:82:5b:be:0a:b7:bd:0a:
bb:c7:76:da:7c:af:9b:e6:16:b0:67:18:42:b3:38:38:df:29:
ad:b9:66:d3:60:f9:04:8d:f0:4b:42:be:28:1f:a9:56:83:d8:
34:40:e4:df:20:41:c9:03:f3:80:ac:c5:38:fd:d8:ee:f6:f3:
0b:95:34:99:a9:27:b8:47:3b:f2:bc:4f:04:ca:bc:16:fa:3f:
14:ca:8e:1e:17:9d:d2:bd:6b:2d:42:a2:81:9b:45:ab:56:ec:
92:32:e9:50:22:8d:09:dc:bb:9a:9a:4b:c2:54:21:b1:88:3b:
88:2c:37:ee:e6:2c:db:93:9e:a0:7a:ce:64:e3:98:63:46:af:
92:aa:44:fc:51:b4:e7:a9:f7:97:d5:96:1a:fb:87:c0:bc:7e:
10:b7:ae:58:ec:84:ea:6a:0f:39:58:5c:9f:d8:f4:3c:4b:50:
4d:ba:27:26:c5:46:96:ce:3f:b7:24:a4:5e:f8:63:28:8e:35:
ee:64:e5:f1:b1:60:9b:bb:a9:b8:44:e1:7d:1b:fc:75:33:9e:
22:17:09:1c:58:fa:d7:8f:bf:55:e3:fc:2a:3f:b8:91:81:57:
c0:4c:63:4d:2d:1b:bf:9b:ba:4b:d8:f6:d6:2b:21:08:48:ba:
ce:7a:56:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:04 2024 by rpki-client on console-ams.rpki-client.org