Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/12w-B6Il4rbaLY4YT0z0C0BZ_os.roa
File: 12w-B6Il4rbaLY4YT0z0C0BZ_os.roa (raw, json)
Hash identifier: uTwE9+Dno4aubwRPAkV6Wsec0xy4RGQWBIgBTmDd9sQ=
Subject key identifier: D7:6C:3E:07:A2:25:E2:B6:DA:2D:8E:18:4F:4C:F4:0B:40:59:FE:8B
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0185E3D2C4444B97F000AEB69871F5A3E892
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/12w-B6Il4rbaLY4YT0z0C0BZ_os.roa
Signing time: Tue 24 Jan 2023 12:48:38 +0000
ROA not before: Tue 24 Jan 2023 12:48:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31195
IP address blocks: 85.26.240.0/22 maxlen: 22
178.178.64.0/24 maxlen: 24
178.178.71.0/24 maxlen: 24
178.178.67.0/24 maxlen: 24
178.178.70.0/24 maxlen: 24
178.178.66.0/24 maxlen: 24
178.178.65.0/24 maxlen: 24
178.178.68.0/24 maxlen: 24
178.178.73.0/24 maxlen: 24
178.178.72.0/24 maxlen: 24
78.25.124.0/22 maxlen: 22
78.25.127.0/24 maxlen: 24
31.173.225.0/24 maxlen: 24
31.173.226.0/24 maxlen: 24
31.173.132.0/23 maxlen: 23
31.173.134.0/23 maxlen: 23
31.173.135.0/24 maxlen: 24
178.176.233.0/24 maxlen: 24
178.176.235.0/24 maxlen: 24
178.176.234.0/24 maxlen: 24
31.173.143.0/24 maxlen: 24
37.28.190.0/24 maxlen: 24
37.28.188.0/22 maxlen: 22
37.28.191.0/24 maxlen: 24
37.29.91.0/24 maxlen: 24
37.29.88.0/22 maxlen: 22
37.29.89.0/24 maxlen: 24
37.29.95.0/24 maxlen: 24
37.29.94.0/24 maxlen: 24
37.29.92.0/22 maxlen: 22
188.170.232.0/24 maxlen: 24
188.170.233.0/24 maxlen: 24
188.170.230.0/24 maxlen: 24
188.170.231.0/24 maxlen: 24
188.170.228.0/23 maxlen: 23
188.170.236.0/24 maxlen: 24
188.170.237.0/24 maxlen: 24
188.170.234.0/24 maxlen: 24
188.170.239.0/24 maxlen: 24
188.170.235.0/24 maxlen: 24
31.173.230.0/24 maxlen: 24
31.173.231.0/24 maxlen: 24
31.173.228.0/23 maxlen: 23
31.173.232.0/23 maxlen: 23
31.173.228.0/24 maxlen: 24
31.173.229.0/24 maxlen: 24
31.173.238.0/24 maxlen: 24
31.173.235.0/24 maxlen: 24
31.173.239.0/24 maxlen: 24
31.173.236.0/23 maxlen: 23
37.29.43.0/24 maxlen: 24
83.149.52.0/22 maxlen: 22
83.169.230.0/24 maxlen: 24
83.169.228.0/23 maxlen: 23
83.169.227.0/24 maxlen: 24
83.169.226.0/24 maxlen: 24
83.169.224.0/23 maxlen: 23
85.26.244.0/22 maxlen: 22
85.26.247.0/24 maxlen: 24
2a03:d006:200::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e3:d2:c4:44:4b:97:f0:00:ae:b6:98:71:f5:a3:e8:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 24 12:48:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d76c3e07a225e2b6da2d8e184f4cf40b4059fe8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ca:d9:02:2b:d5:8a:fe:17:89:48:41:89:a5:
97:5e:93:7e:a3:96:72:43:9a:65:12:37:ea:ae:cd:
da:9f:bf:36:de:a9:a1:46:48:22:d1:6c:60:34:58:
1b:9a:31:7c:2d:73:96:fe:09:3a:5e:1b:70:50:6b:
cb:53:f8:d3:4e:98:e0:1a:dd:0c:bd:8f:b3:ed:1b:
4d:14:38:d2:81:41:0e:f9:79:4f:86:a2:b6:bc:6f:
45:c7:7f:80:c1:d2:25:13:b3:e0:f9:29:80:cd:17:
4f:4e:07:95:01:8f:1b:4c:16:75:48:c8:cf:70:a8:
1b:33:39:49:37:2f:e3:90:d9:22:5d:8a:38:ea:26:
82:28:5a:00:1f:48:be:af:26:4a:0e:c8:27:fb:a9:
65:38:47:37:48:a8:58:d9:1a:ce:2e:75:b1:b2:00:
a2:36:92:90:5f:03:b3:3b:84:ac:b2:c7:62:74:65:
62:b4:42:15:d8:f2:05:56:9c:46:91:57:9b:f7:57:
81:ba:08:87:c6:cb:bf:52:6e:c5:f6:5e:55:ab:49:
0e:61:d1:d3:b4:ab:70:c5:31:92:07:26:8c:08:c2:
12:4b:6f:35:88:89:d3:dc:44:22:18:e9:ae:09:e4:
32:44:77:99:e4:4e:a9:b7:74:9a:01:a6:f2:da:f3:
a4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:6C:3E:07:A2:25:E2:B6:DA:2D:8E:18:4F:4C:F4:0B:40:59:FE:8B
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/12w-B6Il4rbaLY4YT0z0C0BZ_os.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.132.0/22
31.173.143.0/24
31.173.225.0-31.173.226.255
31.173.228.0-31.173.233.255
31.173.235.0-31.173.239.255
37.28.188.0/22
37.29.43.0/24
37.29.88.0/21
78.25.124.0/22
83.149.52.0/22
83.169.224.0-83.169.230.255
85.26.240.0/21
178.176.233.0-178.176.235.255
178.178.64.0-178.178.68.255
178.178.70.0-178.178.73.255
188.170.228.0-188.170.237.255
188.170.239.0/24
IPv6:
2a03:d006:200::/40
Signature Algorithm: sha256WithRSAEncryption
17:a1:71:fd:54:79:57:8f:ba:9f:54:47:04:8e:8f:8f:5d:c5:
7b:a3:58:f2:89:76:ba:8d:ba:d1:16:a3:27:5d:64:0e:39:ca:
40:bb:6a:3f:2b:dc:21:bc:58:5c:11:5a:cb:76:21:ec:1d:69:
08:80:d2:26:e3:58:46:e8:6e:74:93:f6:45:06:0b:3b:35:1a:
51:79:09:f8:69:ad:3a:e4:63:2e:6e:71:0e:5c:f9:0a:f4:b1:
68:bf:bb:1e:3f:2d:09:4d:04:0d:b3:18:de:65:6b:e7:de:4c:
ff:40:c2:22:4a:7c:82:3e:55:e8:b7:6d:5d:fe:9b:30:09:7d:
91:6a:5c:29:a4:ab:04:06:69:2c:0c:a3:37:ca:2d:d8:c3:ae:
84:a4:f9:b0:fe:fc:03:32:65:89:a2:94:28:f3:94:74:00:01:
ed:6a:ae:7f:ca:90:1f:bf:aa:90:aa:18:8e:6d:f1:13:25:2a:
54:b0:17:72:b5:5b:34:d9:55:ed:e4:39:5a:d4:ef:78:b5:94:
72:63:3b:8b:10:d0:59:0f:3e:0e:57:34:71:88:32:4a:e3:4a:
e4:7e:83:15:89:0f:40:29:95:62:65:65:b1:e5:e8:54:dc:04:
ab:d4:1a:80:e1:86:2c:a7:7a:57:82:06:19:3a:f1:f3:8b:0a:
99:8e:51:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:56:07 2025 by rpki-client