Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/0ox6shloRGfwVt7P1m7SbolmTxA.roa
File: 0ox6shloRGfwVt7P1m7SbolmTxA.roa (raw, json)
Hash identifier: 2rkGm64TTPaaRKUl9J/+aNmKnIiCqc7XymtZOmQ/wO4=
Subject key identifier: D2:8C:7A:B2:19:68:44:67:F0:56:DE:CF:D6:6E:D2:6E:89:66:4F:10
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018505A4220EECCCF36B49344F04428DDE0C
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/0ox6shloRGfwVt7P1m7SbolmTxA.roa
Signing time: Mon 12 Dec 2022 09:22:00 +0000
ROA not before: Mon 12 Dec 2022 09:22:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6854
IP address blocks: 212.69.96.0/19 maxlen: 19
188.162.0.0/16 maxlen: 24
195.230.64.0/19 maxlen: 19
80.253.0.0/20 maxlen: 20
195.16.96.0/19 maxlen: 24
62.64.16.0/20 maxlen: 20
62.64.24.0/21 maxlen: 21
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
213.243.64.0/18 maxlen: 18
83.222.192.0/19 maxlen: 19
195.5.128.0/19 maxlen: 24
83.229.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:a4:22:0e:ec:cc:f3:6b:49:34:4f:04:42:8d:de:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 12 09:22:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d28c7ab219684467f056decfd66ed26e89664f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c8:3a:5b:1c:30:ee:f5:2c:46:23:35:a2:44:
db:d4:82:f3:3b:9f:7f:e9:da:8f:71:0d:9a:58:63:
d9:1b:d4:78:04:5e:66:19:1e:b2:94:1c:bd:60:4a:
31:15:b4:33:03:e5:f0:8d:23:87:d0:ce:ce:a2:06:
74:c9:18:f9:89:39:62:69:0e:41:c5:ee:a3:3f:26:
6b:44:d7:6a:c9:34:55:a2:92:0c:2c:b6:7d:27:20:
74:9f:01:1c:fc:bd:c9:45:fa:64:b6:f2:e2:d7:d3:
c1:22:66:99:32:23:b6:cb:67:17:fb:16:3f:3d:51:
df:6a:e9:d7:9b:36:70:17:a8:1f:8f:17:61:2c:0b:
c9:93:d3:b7:3c:db:03:17:26:3e:7a:70:6e:30:0f:
d5:78:ca:9d:5b:5f:8a:c5:12:8b:4e:dc:fa:cc:5d:
6d:fc:80:0a:d2:b9:22:ee:53:e0:04:7b:17:2c:bf:
28:01:bd:3a:14:e5:74:cc:29:85:d7:c8:d0:61:ac:
bd:b5:11:00:b2:02:39:1b:a6:c5:b4:86:6e:ac:c3:
b2:ff:86:a7:ac:6d:62:24:0f:66:57:3a:28:98:6a:
a3:17:23:d1:11:33:af:5a:f9:f9:0f:4b:ff:72:92:
50:db:0c:ef:c3:ff:a2:f1:32:fe:2a:cf:1e:25:f4:
11:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:8C:7A:B2:19:68:44:67:F0:56:DE:CF:D6:6E:D2:6E:89:66:4F:10
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/0ox6shloRGfwVt7P1m7SbolmTxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.64.16.0/20
80.253.0.0/20
83.222.192.0/19
83.229.128.0/17
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.230.64.0/19
212.69.96.0/19
213.243.64.0/18
Signature Algorithm: sha256WithRSAEncryption
5f:fb:2c:a3:08:9f:8c:e8:92:18:46:50:54:d9:74:1b:27:7a:
65:0f:be:6e:6b:2e:54:6a:05:4e:da:ed:99:80:26:0d:5c:c7:
76:cf:87:62:30:99:94:d1:4f:25:62:66:39:76:f0:42:d4:29:
76:ba:a3:d3:fa:7f:bb:45:cb:38:1c:9f:9c:0d:24:4f:fb:6b:
a6:44:9d:08:f8:6e:6e:3f:74:8b:5f:e8:d5:20:95:10:30:34:
90:d7:d7:ba:9e:da:a7:49:c1:95:78:d8:55:86:24:29:7c:2a:
e0:9e:0e:62:17:e2:8b:54:fc:dc:be:09:30:d5:ad:57:7b:d5:
07:fb:af:e7:1a:79:e8:03:0a:c7:3b:46:1f:ca:b5:13:a5:1b:
e5:a7:be:24:44:24:0c:8c:35:cc:a9:5a:7c:6d:0f:60:19:52:
94:4c:f8:d1:e6:e2:a4:cc:9f:ae:15:20:89:41:be:1b:03:02:
a4:3f:8b:60:d2:d6:35:68:c6:25:2b:79:7b:21:1f:63:a8:e6:
36:0b:c6:f1:af:fb:03:22:95:cd:ff:c8:89:68:e8:e4:ec:a2:
28:f4:c7:1f:3a:67:ec:7b:d8:db:e0:7e:dd:73:e0:99:75:fb:
97:0a:23:34:28:88:21:0a:ff:d5:ba:46:6a:db:06:3a:96:98:
6f:a2:b6:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:51:04 2025 by rpki-client