Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/2foLf9ToB3e77ZTVCvfRG7ImHr8.roa
File: 2foLf9ToB3e77ZTVCvfRG7ImHr8.roa (raw, json)
Hash identifier: JM6p27RWfp82N5Yp3Glj0G0jgLG50U0A7zjOk/kbT1Q=
Subject key identifier: D9:FA:0B:7F:D4:E8:07:77:BB:ED:94:D5:0A:F7:D1:1B:B2:26:1E:BF
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0185056157F593AF939027F6838EF88DB088
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/2foLf9ToB3e77ZTVCvfRG7ImHr8.roa
Signing time: Mon 12 Dec 2022 08:09:03 +0000
ROA not before: Mon 12 Dec 2022 08:09:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35298
IP address blocks: 31.173.176.0/20 maxlen: 20
212.14.160.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.162.0.0/16 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
212.119.160.0/19 maxlen: 24
195.78.116.0/23 maxlen: 24
78.41.100.0/22 maxlen: 22
193.201.228.0/22 maxlen: 24
37.29.76.0/22 maxlen: 22
212.44.64.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
213.154.160.0/19 maxlen: 24
178.176.154.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:61:57:f5:93:af:93:90:27:f6:83:8e:f8:8d:b0:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 12 08:09:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d9fa0b7fd4e80777bbed94d50af7d11bb2261ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1e:5e:b2:82:72:a4:b8:41:e7:06:da:8b:4f:
b8:df:59:5e:d8:9d:df:0b:bc:79:e0:60:29:ce:5e:
7c:53:bb:5b:6e:14:af:4b:49:5e:ed:15:c3:16:a7:
13:3f:17:04:7c:45:5d:18:53:1e:0a:34:72:3d:d3:
c2:8f:d8:84:df:56:30:f7:6d:93:0e:71:70:86:2f:
b3:74:1b:ba:fe:6f:6a:de:7c:22:f4:85:38:e5:6e:
94:92:59:e3:ea:88:d6:65:ac:44:08:bf:34:b1:bb:
cc:7e:83:2e:85:b8:be:7a:56:fe:27:c4:3b:9a:df:
c0:6a:9a:ab:7f:33:b1:97:f4:bd:6f:2d:c6:fa:94:
aa:f9:2e:e9:2b:a1:ce:21:a0:69:60:71:f1:2e:86:
2a:8a:3b:77:20:1e:43:13:8c:6a:54:0b:44:64:c3:
c2:ac:ca:1d:63:9c:35:5f:8f:98:a4:4b:63:5c:c4:
24:45:e3:af:d1:d4:7e:c7:61:6e:17:9c:2c:a4:a3:
48:fc:e8:c2:ae:80:f7:b5:ee:47:c7:a8:09:09:f3:
ab:f6:b1:6f:b0:0c:9d:f5:99:54:65:74:93:32:31:
d8:cd:5b:3e:85:32:48:dd:c5:eb:21:01:aa:c0:52:
9d:5e:7c:cc:cf:fe:a9:ef:16:1b:00:89:fa:1d:88:
e3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:FA:0B:7F:D4:E8:07:77:BB:ED:94:D5:0A:F7:D1:1B:B2:26:1E:BF
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/2foLf9ToB3e77ZTVCvfRG7ImHr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.176.0/20
37.29.76.0/22
78.41.100.0/22
178.176.154.0/23
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
Signature Algorithm: sha256WithRSAEncryption
49:29:a8:81:98:a8:cf:a9:e0:48:ca:a5:d0:18:cc:e9:e0:36:
39:2a:a5:7d:bf:cd:68:5f:00:61:a8:ef:d3:ac:c5:26:2a:8f:
fa:43:f4:77:03:c5:c7:84:7d:24:4d:f4:3d:c5:c7:d8:ff:1c:
b1:27:7d:d8:6b:fc:3b:d6:e8:47:b5:ee:46:7d:cb:3b:10:6a:
99:11:7e:78:db:e1:82:c4:58:a5:d9:ec:1d:93:64:55:ff:51:
b4:cd:5d:d1:75:c8:6a:36:35:69:6e:8c:85:b4:83:e4:97:e8:
c0:fd:8e:9a:b3:b6:28:7f:b5:0a:06:9a:cd:9e:70:01:a6:70:
dc:5c:48:b9:1f:15:61:ec:0d:b0:a2:e5:86:3c:45:55:32:85:
39:83:89:16:52:87:37:37:11:73:ad:48:5e:c0:be:cc:f4:f5:
1d:ba:12:a6:32:19:ba:71:5a:54:c9:d2:67:24:a4:ff:75:31:
81:78:66:b2:70:59:2d:01:ff:e7:2b:61:d9:d1:4e:9d:b8:ee:
fe:ca:a9:db:27:e6:dd:bb:a3:11:e3:96:97:78:23:48:85:3b:
08:69:80:ee:76:8a:19:9c:bb:9a:a9:79:f5:ec:b1:d3:59:f6:
6d:94:0c:3e:61:6f:f3:8a:f6:7a:70:3d:c7:ed:f0:62:32:37:
20:14:65:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:23:42 2025 by rpki-client