Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/1eU5azh4DJkZNpbKVd0NsC9rN6U.roa
File: 1eU5azh4DJkZNpbKVd0NsC9rN6U.roa (raw, json)
Hash identifier: +xJgIcAgccwlLmvcKh/Tbx45JONz5xIHzGuSXBxkosw=
Subject key identifier: D5:E5:39:6B:38:78:0C:99:19:36:96:CA:55:DD:0D:B0:2F:6B:37:A5
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184F1463339DDD82C99CA053C40D04FE6EE
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/1eU5azh4DJkZNpbKVd0NsC9rN6U.roa
Signing time: Thu 08 Dec 2022 10:27:00 +0000
ROA not before: Thu 08 Dec 2022 10:27:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6854
IP address blocks: 109.188.0.0/16 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
212.69.96.0/19 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
109.74.112.0/20 maxlen: 24
80.253.0.0/20 maxlen: 20
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
62.64.16.0/20 maxlen: 20
62.64.24.0/21 maxlen: 21
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 19
195.5.128.0/19 maxlen: 24
83.229.128.0/17 maxlen: 17
212.44.64.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f1:46:33:39:dd:d8:2c:99:ca:05:3c:40:d0:4f:e6:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 8 10:27:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d5e5396b38780c99193696ca55dd0db02f6b37a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f4:0d:fe:2f:b4:59:16:67:d5:ee:ec:1e:ff:
87:da:47:80:e9:f0:15:af:e7:70:4c:8d:24:5a:0b:
0e:0c:87:07:d3:8d:6a:e4:df:d2:54:93:b9:75:35:
7d:24:32:b5:0f:ce:f0:55:a4:dc:90:f9:4a:2f:0c:
41:e1:8d:52:79:0e:b0:70:b2:12:33:54:62:01:4a:
fa:4f:e9:9d:66:94:c1:ff:59:a5:3c:c9:db:12:5f:
4c:03:e7:cb:9f:93:95:a2:92:98:07:9d:a9:e9:97:
11:c7:c9:ab:68:59:b2:58:74:42:fc:b8:2c:f7:c9:
c1:8b:57:ef:2f:77:2c:d3:b3:27:8f:e8:10:48:72:
ec:e6:3c:46:9b:44:25:fc:78:02:8c:3c:87:cb:10:
6d:6f:d7:30:ab:f8:80:6e:47:15:ed:0c:4e:92:6f:
ac:0e:21:b6:fe:44:94:4c:b9:10:3e:a5:fb:95:74:
34:ac:06:ef:e4:bf:06:11:3d:bb:54:7b:3e:a5:85:
95:83:41:41:bd:e6:29:48:61:84:0d:ab:04:80:28:
1c:03:c5:be:0d:4e:9d:09:c2:da:e7:6c:b4:9f:52:
87:cc:86:98:8a:2b:89:c7:e9:45:03:50:13:9e:9e:
a4:20:82:fd:3d:d3:20:ac:fd:82:38:c5:2f:32:de:
72:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E5:39:6B:38:78:0C:99:19:36:96:CA:55:DD:0D:B0:2F:6B:37:A5
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/1eU5azh4DJkZNpbKVd0NsC9rN6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.64.16.0/20
80.253.0.0/20
83.222.192.0/19
83.229.128.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
77:9f:ff:ac:be:97:98:5a:76:a3:fd:59:2e:3c:5b:8b:b0:0d:
85:f7:b3:e8:0e:a6:da:16:dc:fa:b8:53:4a:1e:22:4e:17:c6:
a7:78:fa:01:c0:c7:8b:ab:91:f8:bc:0c:2b:59:2a:af:b6:36:
1e:01:e8:b0:94:97:51:ee:67:07:1c:49:95:e5:38:b9:08:1c:
50:5b:c3:db:a0:1f:21:13:7a:2a:59:fb:19:09:3a:85:25:8c:
73:5e:b0:76:68:61:8c:da:d1:0e:b0:7f:5b:92:ea:b6:9f:c8:
6b:27:b6:32:37:d0:2c:54:8a:69:e2:f2:f7:ea:11:23:9a:e2:
05:12:84:76:3c:8a:58:6e:d3:81:0f:6b:5d:60:aa:79:6f:1a:
c3:f6:ae:85:6e:6b:2c:76:81:7f:14:a7:51:d0:7e:cd:d6:41:
73:bb:7f:75:cf:fa:19:5e:c1:7e:d8:02:9a:19:5b:21:09:97:
55:3a:73:f3:c1:c8:3c:c5:4f:f4:28:d1:6e:90:97:ae:7e:78:
86:31:be:d2:60:32:44:7a:4f:2a:22:6d:f9:70:80:39:5e:87:
0b:1d:99:50:28:fb:7b:58:38:cb:85:4c:3c:d4:41:c0:5a:4e:
05:60:fa:2f:c8:4e:14:45:26:35:4a:c2:fe:08:19:03:fd:27:
85:ef:57:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:23:37 2025 by rpki-client