Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b66b69-d225-4be7-853e-9f4c98098c45/1/d_Of87QVVIQn3yZ3tKkw8jic__M.roa
File: d_Of87QVVIQn3yZ3tKkw8jic__M.roa (raw, json)
Hash identifier: x9hFYeFpsP8Gp6KKlMWemojyVD8xyva8p+mHEOk+Awk=
Subject key identifier: 77:F3:9F:F3:B4:15:54:84:27:DF:26:77:B4:A9:30:F2:38:9C:FF:F3
Certificate issuer: /CN=ffd8609ce7a8c3c128908fc45f3e6d9b67260e4e
Certificate serial: 09E1FB2C
Authority key identifier: FF:D8:60:9C:E7:A8:C3:C1:28:90:8F:C4:5F:3E:6D:9B:67:26:0E:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_9hgnOeow8EokI_EXz5tm2cmDk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b66b69-d225-4be7-853e-9f4c98098c45/1/d_Of87QVVIQn3yZ3tKkw8jic__M.roa
Signing time: Sat 01 Jan 2022 04:58:32 +0000
ROA not before: Sat 01 Jan 2022 04:58:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56844
IP address blocks: 195.200.166.0/24 maxlen: 24
195.200.164.0/22 maxlen: 22
195.200.165.0/24 maxlen: 24
195.200.163.0/24 maxlen: 24
195.200.164.0/24 maxlen: 24
195.200.161.0/24 maxlen: 24
195.200.162.0/24 maxlen: 24
195.200.160.0/24 maxlen: 24
195.200.167.0/24 maxlen: 24
195.200.172.0/23 maxlen: 23
195.200.172.0/24 maxlen: 24
195.200.170.0/24 maxlen: 24
195.200.170.0/23 maxlen: 23
195.200.171.0/24 maxlen: 24
195.200.168.0/23 maxlen: 23
195.200.169.0/24 maxlen: 24
195.200.173.0/24 maxlen: 24
195.200.174.0/24 maxlen: 24
195.200.178.0/24 maxlen: 24
195.200.179.0/24 maxlen: 24
195.200.177.0/24 maxlen: 24
195.200.175.0/24 maxlen: 24
195.200.176.0/24 maxlen: 24
195.200.176.0/22 maxlen: 22
195.200.184.0/22 maxlen: 22
195.200.181.0/24 maxlen: 24
195.200.180.0/24 maxlen: 24
195.200.185.0/24 maxlen: 24
195.200.186.0/24 maxlen: 24
195.200.184.0/24 maxlen: 24
185.18.211.0/24 maxlen: 24
185.18.210.0/24 maxlen: 24
185.18.210.0/23 maxlen: 24
195.200.182.0/23 maxlen: 23
195.200.183.0/24 maxlen: 24
195.200.182.0/24 maxlen: 24
185.18.209.0/24 maxlen: 24
195.200.191.0/24 maxlen: 24
195.200.189.0/24 maxlen: 24
195.200.190.0/24 maxlen: 24
195.200.187.0/24 maxlen: 24
195.200.188.0/23 maxlen: 23
195.200.188.0/24 maxlen: 24
185.132.118.0/24 maxlen: 24
185.132.116.0/24 maxlen: 24
185.132.117.0/24 maxlen: 24
185.132.119.0/24 maxlen: 24
185.213.162.0/23 maxlen: 23
185.213.162.0/24 maxlen: 24
185.213.161.0/24 maxlen: 24
185.213.160.0/24 maxlen: 24
185.213.160.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165804844 (0x9e1fb2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffd8609ce7a8c3c128908fc45f3e6d9b67260e4e
Validity
Not Before: Jan 1 04:58:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=77f39ff3b415548427df2677b4a930f2389cfff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5d:d2:77:50:c8:98:37:10:cd:25:c8:c1:bc:
0f:42:b7:8a:c3:0d:1f:33:38:5b:01:e6:ab:e5:41:
dc:47:9d:97:f1:ee:5d:82:75:07:d7:23:6f:af:9d:
c4:cb:8a:ad:a7:7b:c2:83:9e:73:9b:86:5f:85:96:
09:37:b5:b8:e9:f7:e9:c8:e9:0b:9a:24:b9:89:c6:
8f:63:81:21:64:82:b7:11:fa:c6:01:76:2d:bb:ac:
10:10:22:4f:46:bf:aa:46:7a:ad:1c:76:02:47:c3:
f4:1d:70:58:3b:36:e0:69:3b:36:23:88:a2:23:fa:
de:de:04:58:c5:8b:7f:7d:28:d8:5a:ce:72:64:7d:
da:3e:b9:59:25:00:cf:e5:be:f1:2f:a4:86:15:65:
8a:3b:d7:33:56:ca:91:40:03:57:15:51:1b:2b:34:
28:a8:3d:0e:0d:51:c1:ac:bf:32:40:11:9d:00:d6:
ee:33:a8:4c:2e:1d:48:de:df:a3:e9:df:ec:e7:08:
68:d0:b9:89:6a:ae:f4:f2:60:c5:eb:c5:cc:29:99:
28:45:82:64:73:84:87:8d:22:39:4d:03:f1:13:bd:
3d:4c:da:57:7c:89:fc:70:49:11:61:90:76:d2:64:
de:34:ce:1d:e7:d0:06:8f:e3:f7:9e:6e:8f:3f:51:
87:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F3:9F:F3:B4:15:54:84:27:DF:26:77:B4:A9:30:F2:38:9C:FF:F3
X509v3 Authority Key Identifier:
keyid:FF:D8:60:9C:E7:A8:C3:C1:28:90:8F:C4:5F:3E:6D:9B:67:26:0E:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9hgnOeow8EokI_EXz5tm2cmDk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b66b69-d225-4be7-853e-9f4c98098c45/1/d_Of87QVVIQn3yZ3tKkw8jic__M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b66b69-d225-4be7-853e-9f4c98098c45/1/_9hgnOeow8EokI_EXz5tm2cmDk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.18.209.0-185.18.211.255
185.132.116.0/22
185.213.160.0/22
195.200.160.0/19
Signature Algorithm: sha256WithRSAEncryption
60:d7:27:bc:79:09:26:04:db:3a:a4:c8:90:10:cc:77:75:1b:
4b:37:21:b9:4e:17:32:3e:d3:5d:c5:ad:e8:20:ba:3a:72:fb:
6d:f9:27:a4:7a:d7:fa:03:b3:ed:4a:5c:43:ce:f2:2d:fd:a7:
cc:32:33:75:5e:72:9b:2e:b7:b7:e8:c0:db:b1:c6:a0:25:24:
f9:14:c4:c3:74:49:a4:24:ca:27:37:75:6b:bd:12:65:6d:7a:
c0:dc:5d:6a:ae:37:5b:54:56:82:12:9c:09:d2:6b:aa:77:63:
1a:55:f3:b3:07:87:7f:30:86:37:25:d5:77:30:07:32:dc:2c:
e6:c1:8a:51:ee:de:0c:63:b8:2e:ca:63:89:e3:5a:94:26:a2:
8d:9a:81:f9:20:f5:06:d5:02:33:c8:8f:3d:63:a8:50:6d:32:
b3:03:da:ed:81:5e:68:6b:76:91:96:b9:b7:78:dc:3f:72:3e:
24:28:75:19:98:d1:81:15:63:6d:f8:e9:9d:70:2f:60:c2:9b:
65:5d:be:9d:9d:d1:9e:52:b7:5d:61:b5:5d:bd:6c:00:c6:bd:
e5:8e:ef:fc:c8:5c:e2:ba:29:9c:6c:e6:b7:0b:bf:a1:b8:2b:
0a:2b:11:f8:65:b9:82:d2:dc:b1:e2:6c:1b:82:c4:13:35:9e:
59:30:b8:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:02 2025 by rpki-client