Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/0btcGo7FbGo5_wqstxnb7Lk35bI.roa
File: 0btcGo7FbGo5_wqstxnb7Lk35bI.roa (raw, json)
Hash identifier: +UOOO96iEezULwP/DHY/0/foA5dx/7WuaLO8F8EqdNA=
Subject key identifier: D1:BB:5C:1A:8E:C5:6C:6A:39:FF:0A:AC:B7:19:DB:EC:B9:37:E5:B2
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01856ED4E60340E6062A7E5BB3CD8C26B5F7
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/0btcGo7FbGo5_wqstxnb7Lk35bI.roa
Signing time: Sun 01 Jan 2023 19:35:24 +0000
ROA not before: Sun 01 Jan 2023 19:35:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31224
IP address blocks: 178.176.104.0/21 maxlen: 21
83.149.32.0/22 maxlen: 22
83.149.36.0/22 maxlen: 22
83.149.34.0/24 maxlen: 24
83.149.37.0/24 maxlen: 24
83.149.39.0/24 maxlen: 24
85.26.192.0/22 maxlen: 22
178.178.88.0/22 maxlen: 22
178.178.92.0/22 maxlen: 22
31.173.96.0/24 maxlen: 24
31.173.97.0/24 maxlen: 24
31.173.102.0/24 maxlen: 24
31.173.99.0/24 maxlen: 24
31.173.103.0/24 maxlen: 24
31.173.100.0/24 maxlen: 24
31.173.100.0/23 maxlen: 23
31.173.101.0/24 maxlen: 24
178.176.112.0/24 maxlen: 24
178.176.113.0/24 maxlen: 24
83.169.216.0/24 maxlen: 24
31.173.123.0/24 maxlen: 24
31.173.122.0/24 maxlen: 24
31.173.121.0/24 maxlen: 24
31.173.125.0/24 maxlen: 24
31.173.120.0/24 maxlen: 24
31.173.124.0/24 maxlen: 24
31.173.127.0/24 maxlen: 24
31.173.126.0/24 maxlen: 24
78.25.88.0/22 maxlen: 22
46.229.132.0/22 maxlen: 22
128.204.68.0/24 maxlen: 24
128.204.69.0/24 maxlen: 24
37.29.44.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:e6:03:40:e6:06:2a:7e:5b:b3:cd:8c:26:b5:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 19:35:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d1bb5c1a8ec56c6a39ff0aacb719dbecb937e5b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f9:9a:e8:80:f4:a0:39:8b:25:01:f9:00:38:
04:aa:c8:99:ac:f3:45:1f:3e:16:0f:fc:49:46:15:
12:52:73:10:15:13:b3:ef:9a:4b:18:37:0d:e7:03:
af:41:e2:14:75:3a:ec:9a:3e:81:57:ca:da:ce:22:
78:a0:aa:2b:f4:ba:3e:df:94:34:25:ec:30:46:0f:
3c:1e:ea:50:71:55:60:22:8a:f7:c3:23:74:0a:4d:
9e:59:8e:2b:e1:d9:7b:fa:d4:ea:8e:d7:26:c6:1d:
d4:0a:6b:a8:98:2c:f5:c0:d9:87:8c:27:08:0a:7d:
67:f7:e1:14:1a:53:2e:98:ae:b4:85:12:2e:19:5b:
22:2c:a6:23:dc:dc:ae:5c:55:47:ee:af:e6:25:05:
3b:5d:0c:6a:74:e7:7e:4c:0f:8b:02:53:56:37:78:
88:a8:19:47:36:e0:96:f4:f5:6d:9a:07:0d:1b:d3:
09:80:a7:1b:21:64:58:23:fd:2f:5e:ab:5b:2c:2e:
55:51:1c:b8:b1:6f:34:d8:4f:75:af:d8:21:39:59:
b5:64:14:f6:73:50:c4:16:fa:e2:47:6a:a0:97:55:
6b:12:b0:f9:d7:30:4a:e0:fe:8b:12:7f:29:8a:13:
c0:8c:88:d2:5d:8b:09:0b:4c:94:10:5b:f7:08:4d:
3b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:BB:5C:1A:8E:C5:6C:6A:39:FF:0A:AC:B7:19:DB:EC:B9:37:E5:B2
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/0btcGo7FbGo5_wqstxnb7Lk35bI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.96.0/23
31.173.99.0-31.173.103.255
31.173.120.0/21
37.29.44.0/22
46.229.132.0/22
78.25.88.0/22
83.149.32.0/21
83.169.216.0/24
85.26.192.0/22
128.204.68.0/23
178.176.104.0-178.176.113.255
178.178.88.0/21
Signature Algorithm: sha256WithRSAEncryption
1e:e4:41:57:39:70:b7:49:f7:4b:49:f0:71:d2:12:ed:2a:79:
f3:44:86:fd:60:90:4a:96:a6:b8:e6:bf:4c:fb:94:bc:26:d1:
3f:91:70:19:5f:99:7a:f3:ba:4b:55:8a:30:3d:46:8d:7d:a9:
c0:88:d0:e8:c1:d8:a4:54:51:cd:45:79:95:c1:5e:5b:d2:1d:
16:07:99:3d:71:22:db:d1:2c:5c:48:6e:18:13:3a:11:8d:fe:
c7:5d:cd:a1:04:e2:81:d2:06:7c:29:ef:67:cc:8e:57:72:eb:
77:3b:d9:59:3c:7a:57:8d:85:d2:bf:9e:ce:01:1c:9a:04:d7:
3b:3f:a6:a7:98:db:4b:fa:8b:cd:72:79:66:b1:91:4f:23:89:
d2:e6:76:37:a5:4d:e1:c1:47:d3:f7:a5:55:18:ba:3a:24:db:
b0:eb:28:5a:44:aa:48:f0:b7:5c:c5:17:ae:93:41:2d:31:d9:
81:d0:e6:01:b6:32:7f:cf:c1:a0:6c:b2:ea:c0:9e:7f:71:59:
0a:a6:30:87:97:37:c8:e5:d7:f4:68:4a:f4:ee:60:10:fc:c7:
c6:a4:e4:5c:03:b1:b2:42:42:c2:b4:a8:23:45:64:d4:f1:ff:
91:72:ae:8f:d7:87:3c:00:77:97:3c:a3:7d:3a:0f:2d:19:32:
bf:24:c1:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:46:13 2025 by rpki-client