Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/O2eLgFr5NV0Vbx2jPxuj59UFRDc.roa
File: O2eLgFr5NV0Vbx2jPxuj59UFRDc.roa (raw, json)
Hash identifier: FMc5ZOKKF1VIO6vSN+b9jiQHLixUnbCvk5q96PN5JG4=
Subject key identifier: 3B:67:8B:80:5A:F9:35:5D:15:6F:1D:A3:3F:1B:A3:E7:D5:05:44:37
Certificate issuer: /CN=6dd2e9b3a4d7b24b3a6aa14f3eda3f14fa29c76b
Certificate serial: 327435F7
Authority key identifier: 6D:D2:E9:B3:A4:D7:B2:4B:3A:6A:A1:4F:3E:DA:3F:14:FA:29:C7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdLps6TXsks6aqFPPto_FPopx2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/O2eLgFr5NV0Vbx2jPxuj59UFRDc.roa
Signing time: Thu 16 Jun 2022 08:17:46 +0000
ROA not before: Thu 16 Jun 2022 08:17:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39246
IP address blocks: 77.78.134.0/24 maxlen: 24
77.78.133.0/24 maxlen: 24
77.78.139.0/24 maxlen: 24
77.78.138.0/24 maxlen: 24
77.78.137.0/24 maxlen: 24
77.78.136.0/24 maxlen: 24
77.78.135.0/24 maxlen: 24
77.78.143.0/24 maxlen: 24
77.78.142.0/24 maxlen: 24
77.78.141.0/24 maxlen: 24
77.78.140.0/24 maxlen: 24
77.78.132.0/24 maxlen: 24
77.78.131.0/24 maxlen: 24
77.78.129.0/24 maxlen: 24
77.78.128.0/24 maxlen: 24
109.121.132.0/24 maxlen: 24
109.121.131.0/24 maxlen: 24
109.121.130.0/24 maxlen: 24
109.121.129.0/24 maxlen: 24
109.121.151.0/24 maxlen: 24
109.121.150.0/24 maxlen: 24
109.121.149.0/24 maxlen: 24
109.121.148.0/24 maxlen: 24
109.121.146.0/24 maxlen: 24
109.121.155.0/24 maxlen: 24
109.121.154.0/24 maxlen: 24
109.121.158.0/24 maxlen: 24
109.121.157.0/24 maxlen: 24
109.121.156.0/24 maxlen: 24
109.121.165.0/24 maxlen: 24
109.121.164.0/24 maxlen: 24
109.121.169.0/24 maxlen: 24
109.121.168.0/24 maxlen: 24
109.121.167.0/24 maxlen: 24
109.121.172.0/24 maxlen: 24
109.121.171.0/24 maxlen: 24
109.121.170.0/24 maxlen: 24
109.121.174.0/24 maxlen: 24
109.121.173.0/24 maxlen: 24
62.192.132.0/24 maxlen: 24
62.192.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 846476791 (0x327435f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dd2e9b3a4d7b24b3a6aa14f3eda3f14fa29c76b
Validity
Not Before: Jun 16 08:17:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3b678b805af9355d156f1da33f1ba3e7d5054437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:db:62:a6:5b:0e:c9:61:0d:17:af:c8:1b:20:
d1:57:9d:15:50:3c:e9:60:7e:a8:84:1b:19:fc:e9:
e2:12:66:ac:7c:ea:d9:6f:e9:25:1b:09:5d:2e:d2:
2c:a7:20:06:72:fb:ef:b6:44:41:9b:c4:66:d0:4e:
b1:14:ca:04:76:5a:8f:5f:e7:d1:4c:d4:18:18:45:
75:4b:21:c3:0c:a5:d0:22:49:ed:9c:ee:66:9b:e9:
6c:f1:73:53:0b:ea:3a:30:ff:a6:bb:ad:d0:0c:47:
8b:0c:01:e4:e4:58:4c:46:78:62:ff:d2:7a:d5:0f:
e7:f2:87:13:3b:51:2a:42:3d:27:b5:26:8c:a1:43:
6a:39:59:2c:ae:a4:6e:49:41:85:c8:10:85:98:17:
9b:d7:e7:cd:12:3a:de:4c:6f:2a:6a:a9:54:e3:96:
04:1d:1d:c4:1d:2e:c8:08:af:c8:9d:a7:8c:a3:1a:
3a:b0:66:62:7b:c8:88:2c:10:28:8a:0e:5b:9c:a9:
2e:07:63:45:f6:15:3c:64:27:b9:23:b4:c5:46:fe:
a2:82:e6:74:22:25:ae:e1:c5:d2:3a:be:e9:21:6f:
a9:be:3b:76:e8:fe:bf:21:1d:66:dc:b5:13:04:f8:
25:58:81:2f:6c:3e:1e:1e:44:dd:96:cb:28:fd:07:
eb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:67:8B:80:5A:F9:35:5D:15:6F:1D:A3:3F:1B:A3:E7:D5:05:44:37
X509v3 Authority Key Identifier:
keyid:6D:D2:E9:B3:A4:D7:B2:4B:3A:6A:A1:4F:3E:DA:3F:14:FA:29:C7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdLps6TXsks6aqFPPto_FPopx2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/O2eLgFr5NV0Vbx2jPxuj59UFRDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd9bc8-11c5-4f5a-bb25-45ae7b3dae68/1/bdLps6TXsks6aqFPPto_FPopx2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.132.0/23
77.78.128.0/23
77.78.131.0-77.78.143.255
109.121.129.0-109.121.132.255
109.121.146.0/24
109.121.148.0/22
109.121.154.0-109.121.158.255
109.121.164.0/23
109.121.167.0-109.121.174.255
Signature Algorithm: sha256WithRSAEncryption
76:d7:28:ab:29:4d:c1:6e:91:99:5e:25:bb:cf:d7:c5:cf:ee:
5a:61:86:b0:61:86:eb:9b:37:1f:3b:5c:16:df:a5:11:f7:47:
03:6a:f5:5e:89:39:83:c6:82:f1:04:88:a4:23:39:88:12:fb:
e5:3a:80:79:14:9e:25:74:a9:fb:99:e6:8d:d5:10:1d:b8:0b:
2c:55:ea:a9:64:75:50:c9:4a:e7:19:17:9a:be:2d:4a:c8:8e:
38:5e:81:9c:79:d3:31:50:9b:36:25:a8:5f:80:68:df:bd:0d:
3a:49:07:d6:05:f6:7b:8a:a3:38:56:0b:fa:8c:49:53:c4:de:
4d:09:4c:00:cc:e0:36:9b:c8:57:34:20:43:a8:d7:7e:61:2c:
c7:f4:30:eb:91:ea:3b:3e:c0:6d:d7:76:4b:ef:c5:d6:5c:7d:
d9:58:67:44:57:80:aa:17:4e:71:f4:a9:1d:2d:3e:e8:28:cb:
12:cb:12:1c:b4:cc:12:c8:33:5a:aa:bd:b1:85:df:92:94:e0:
83:4d:1f:e9:b4:92:13:ef:b8:4e:b4:b5:9d:a1:39:07:ef:e4:
2e:b6:bb:78:0e:80:c9:ce:d9:5a:d5:4d:17:d0:68:64:d9:bf:
69:d2:84:99:69:a3:fe:26:b7:09:d7:b4:13:08:ea:f5:8e:3f:
6d:20:18:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:34 2023 by rpki-client on console-fra.rpki-client.org