Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/Kt7mcYBz8-8VEKRSgLwYlwPAX58.roa
File: Kt7mcYBz8-8VEKRSgLwYlwPAX58.roa (raw, json)
Hash identifier: osxpdUo+5OzNnrqR+eDGSPmR+HBXg7v1pY08KjyjCCE=
Subject key identifier: 2A:DE:E6:71:80:73:F3:EF:15:10:A4:52:80:BC:18:97:03:C0:5F:9F
Certificate issuer: /CN=da8a978b9ce5d26ebcaad0ccb67918a9df318f86
Certificate serial: 176C0955
Authority key identifier: DA:8A:97:8B:9C:E5:D2:6E:BC:AA:D0:CC:B6:79:18:A9:DF:31:8F:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/Kt7mcYBz8-8VEKRSgLwYlwPAX58.roa
Signing time: Sat 01 Jan 2022 15:01:40 +0000
ROA not before: Sat 01 Jan 2022 15:01:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25455
IP address blocks: 91.107.72.0/21 maxlen: 21
91.107.88.0/21 maxlen: 21
185.79.40.0/22 maxlen: 22
159.253.124.0/22 maxlen: 22
83.143.68.0/22 maxlen: 22
31.210.169.0/24 maxlen: 24
91.90.200.0/21 maxlen: 21
92.43.164.0/23 maxlen: 23
94.232.30.0/24 maxlen: 24
185.91.132.0/22 maxlen: 22
2a05:7144::/30 maxlen: 30
2a05:7140::/32 maxlen: 32
2a05:7142::/31 maxlen: 31
2a05:7141::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 392956245 (0x176c0955)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8a978b9ce5d26ebcaad0ccb67918a9df318f86
Validity
Not Before: Jan 1 15:01:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2adee6718073f3ef1510a45280bc189703c05f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d0:22:c0:49:8c:44:d2:55:83:15:e7:7c:5e:
a9:89:64:a5:c2:32:a7:26:f5:70:8f:8a:ad:38:00:
27:83:d7:f4:4a:03:72:03:88:ae:a4:16:8a:86:76:
d0:9c:c4:50:82:f1:f0:16:c6:30:32:48:46:ed:ca:
47:18:fa:2e:90:f8:18:8c:ca:65:a4:a9:de:ea:98:
9a:f8:73:4b:61:01:0a:63:b3:83:85:91:40:52:e5:
f5:fb:fb:32:07:a1:7c:94:33:2b:30:1c:89:d6:8e:
b3:ac:74:44:cb:63:90:7c:74:a9:9a:fa:2f:2c:ed:
97:1c:a4:11:49:3c:06:09:a6:20:ba:82:ae:f3:0d:
65:bc:e1:a5:34:5e:77:d1:c4:6f:f6:ca:c2:41:8a:
0d:50:3c:77:ca:e2:bf:3f:5a:d0:c0:c6:85:04:89:
5d:e3:25:b9:8c:e7:d5:48:03:87:b7:c1:b5:e8:6a:
ef:0c:6d:55:a6:6c:4e:34:f9:20:82:52:c5:1d:9e:
fb:f6:43:b7:ea:8e:f9:21:ac:a2:9a:3a:8c:c7:d9:
a0:6c:be:ad:ed:9e:b3:2e:19:5b:72:85:35:0e:96:
73:13:d8:81:51:13:24:8d:b2:6b:d2:e8:03:f9:c5:
cb:4e:ab:d0:cd:76:84:1d:50:ec:e2:be:5f:7a:01:
f7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:DE:E6:71:80:73:F3:EF:15:10:A4:52:80:BC:18:97:03:C0:5F:9F
X509v3 Authority Key Identifier:
keyid:DA:8A:97:8B:9C:E5:D2:6E:BC:AA:D0:CC:B6:79:18:A9:DF:31:8F:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oqXi5zl0m68qtDMtnkYqd8xj4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/Kt7mcYBz8-8VEKRSgLwYlwPAX58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/18e48f-5972-4d3f-bb6a-b78dac37eac8/1/2oqXi5zl0m68qtDMtnkYqd8xj4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.169.0/24
83.143.68.0/22
91.90.200.0/21
91.107.72.0/21
91.107.88.0/21
92.43.164.0/23
94.232.30.0/24
159.253.124.0/22
185.79.40.0/22
185.91.132.0/22
IPv6:
2a05:7140::/29
Signature Algorithm: sha256WithRSAEncryption
00:ff:46:61:92:a1:6c:18:c7:0d:97:96:96:ae:66:8e:7f:b6:
75:87:9d:03:f5:f0:b5:12:65:0e:f7:50:a8:9d:54:1d:11:e6:
79:66:b4:a1:6c:f3:31:e8:fe:87:a2:70:5c:ce:48:61:e4:f5:
a7:cc:ec:94:94:c4:3b:1c:0c:50:72:62:98:3e:ca:20:58:35:
84:6b:c2:a2:fa:34:02:30:3b:88:87:cf:1f:da:65:76:02:70:
c6:b1:c1:22:a9:b0:71:70:c7:03:5d:b9:b4:43:ef:72:69:de:
31:36:5d:f1:d6:dc:3c:fb:e2:ae:d9:c8:10:a1:03:ae:37:08:
0a:55:67:f7:5c:40:0f:1f:88:bc:ff:8b:31:96:40:1b:4d:81:
0f:7d:bd:43:48:39:87:e1:e1:fe:ad:af:f6:dc:f4:4e:fa:b0:
48:0f:49:22:db:66:18:d1:e1:5b:0f:e6:5c:f8:09:ec:a5:51:
01:69:f2:3c:2b:3a:7f:d1:a4:3a:ab:c1:8d:4e:29:5f:26:1a:
d6:98:b7:15:23:a1:62:55:eb:cf:ed:81:00:59:74:51:83:ad:
49:71:73:f5:f8:a1:bc:43:b2:6c:bd:cf:2b:23:1f:b1:38:93:
05:ab:c9:28:6e:59:c8:72:ec:ca:72:f6:43:01:b2:2a:4b:e0:
87:fa:63:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:18:07 2025 by rpki-client