Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/1-EdEb-HoTKqvman-jyiq0MoRTlo.roa
File: 1-EdEb-HoTKqvman-jyiq0MoRTlo.roa (raw, json)
Hash identifier: KqXhizeSHwt6XflCYa5fVDYx0w01RM1iyo1McMwmToo=
Subject key identifier: F8:47:44:6F:E1:E8:4C:AA:AF:99:A9:FE:8F:28:AA:D0:CA:11:4E:5A
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184F219DD8A38DCA11D35F0D9DA80C488F6
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/1-EdEb-HoTKqvman-jyiq0MoRTlo.roa
Signing time: Thu 08 Dec 2022 14:18:12 +0000
ROA not before: Thu 08 Dec 2022 14:18:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20632
IP address blocks: 84.204.230.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
84.204.160.0/20 maxlen: 20
84.204.176.0/21 maxlen: 21
79.171.8.0/21 maxlen: 21
84.204.188.0/22 maxlen: 22
84.204.192.0/18 maxlen: 18
193.201.228.0/22 maxlen: 24
109.124.108.0/22 maxlen: 22
217.195.64.0/19 maxlen: 19
109.124.64.0/18 maxlen: 18
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
84.204.0.0/17 maxlen: 17
93.153.128.0/17 maxlen: 17
93.153.144.0/21 maxlen: 21
212.69.96.0/19 maxlen: 24
93.153.158.0/24 maxlen: 24
93.153.162.0/24 maxlen: 24
93.153.161.0/24 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 20
84.204.132.0/22 maxlen: 22
94.25.248.0/21 maxlen: 21
84.204.139.0/24 maxlen: 24
84.204.138.0/24 maxlen: 24
84.204.136.0/24 maxlen: 24
84.204.140.0/22 maxlen: 22
84.204.144.0/20 maxlen: 20
195.5.128.0/19 maxlen: 24
82.140.64.0/18 maxlen: 18
82.140.93.0/24 maxlen: 24
95.137.0.0/17 maxlen: 17
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
82.196.64.0/19 maxlen: 19
81.24.128.0/20 maxlen: 20
195.78.116.0/23 maxlen: 24
213.172.0.0/19 maxlen: 19
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
195.144.224.0/19 maxlen: 19
81.3.128.0/18 maxlen: 18
213.182.160.0/19 maxlen: 19
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
212.44.64.0/19 maxlen: 24
46.47.192.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f2:19:dd:8a:38:dc:a1:1d:35:f0:d9:da:80:c4:88:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 8 14:18:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f847446fe1e84caaaf99a9fe8f28aad0ca114e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5b:43:16:c1:23:e9:03:a3:fd:40:87:00:e4:
f2:00:4f:4d:c7:06:c2:02:99:51:bd:77:1c:8e:63:
1e:26:36:d6:21:54:dc:19:db:86:95:e9:41:e4:41:
4a:7f:5f:ff:f4:28:c1:e6:a1:c2:ea:92:45:da:5e:
94:ef:b5:ec:62:6c:4c:88:93:e4:2f:ae:8f:54:50:
c6:ac:69:8a:34:8e:85:82:d8:af:de:8f:39:a6:b2:
4f:67:e5:b2:ec:ef:a6:71:58:8c:1a:9a:aa:6e:7d:
97:96:17:97:91:28:99:79:b9:9c:f5:ad:38:29:25:
5e:1a:2c:55:7d:87:2d:62:3a:bb:0b:58:86:ed:45:
04:05:b5:99:0e:a4:74:9d:55:17:c8:0a:3f:1c:cf:
40:91:49:a6:21:74:2f:d4:5a:a7:e2:6f:60:68:73:
98:86:9f:d4:5d:1e:58:f9:41:8a:a1:d3:c6:49:29:
ad:d8:60:ca:0c:64:c1:aa:71:f5:e5:ad:be:92:46:
20:b9:35:1a:28:ed:05:3f:e2:bd:eb:53:3b:c1:7a:
1f:36:fb:57:45:36:50:d7:80:ec:4a:b0:a1:35:d3:
f1:1d:f9:e5:7f:d2:25:aa:fc:aa:5f:76:eb:91:1e:
68:2a:6c:5f:a3:18:20:1a:78:c2:aa:07:09:aa:a9:
05:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:47:44:6F:E1:E8:4C:AA:AF:99:A9:FE:8F:28:AA:D0:CA:11:4E:5A
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/1-EdEb-HoTKqvman-jyiq0MoRTlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.47.192.0/18
79.171.8.0/21
80.247.176.0/20
81.3.128.0/18
81.24.128.0/20
82.140.64.0/18
82.196.64.0/19
84.204.0.0/17
84.204.132.0-84.204.136.255
84.204.138.0-84.204.183.255
84.204.188.0-84.204.255.255
93.153.128.0/17
94.25.248.0/21
95.137.0.0/17
109.124.64.0/18
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.144.224.0/19
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.172.0.0/19
213.182.160.0/19
213.243.64.0/18
217.115.80.0/20
217.195.64.0/19
Signature Algorithm: sha256WithRSAEncryption
9e:fa:62:83:78:9d:1d:15:12:d3:dc:c8:36:a3:05:63:8a:28:
46:de:3d:29:29:45:de:e7:c3:c8:0b:82:10:99:05:5f:58:f0:
63:5f:01:d6:36:b0:ef:46:dd:6e:e5:c5:de:3b:c3:ca:88:1f:
52:67:37:54:6f:ce:68:84:37:08:f3:ec:90:2e:8c:b3:9d:46:
d7:7d:a1:ba:97:5c:cf:e6:fb:a6:f8:fd:b7:23:65:d4:02:7e:
a7:92:af:0f:41:94:c6:09:6f:c2:ff:88:6e:31:59:8d:ce:f7:
22:85:c6:86:72:76:09:b6:de:e1:68:b0:a9:68:b5:73:0e:af:
18:fb:c2:95:d3:0b:0a:9a:58:20:a9:2c:79:1c:0d:20:a0:48:
dd:20:f4:10:de:20:d4:3c:51:5a:4c:84:b5:dd:f2:02:46:99:
c9:b7:7d:b9:6c:7d:9f:ae:b1:db:5b:04:0d:a0:69:92:b9:d8:
86:a3:02:d7:8e:90:eb:fb:39:c8:50:0f:74:1f:61:b0:e4:0c:
ec:ed:7a:15:63:21:43:24:2d:3d:aa:e1:ac:08:10:4b:c2:aa:
31:34:1b:7b:4d:88:2c:6e:c6:d8:8c:16:f6:f9:b6:6e:d2:84:
ed:55:61:e3:c6:a3:59:f8:80:96:38:e1:b7:b3:96:17:45:26:
36:04:36:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:41:12 2025 by rpki-client