Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/4b6jY6c-9DbuRwOrWB9w90ZaLgA.roa
File: 4b6jY6c-9DbuRwOrWB9w90ZaLgA.roa (raw, json)
Hash identifier: D3SCVtANSC0WbYfQul+tS1hLRoIJJM1nQZRvuY+Nmeg=
Subject key identifier: E1:BE:A3:63:A7:3E:F4:36:EE:47:03:AB:58:1F:70:F7:46:5A:2E:00
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184F1C2B76720D4CC0E1F4E6DE307CEF0A5
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/4b6jY6c-9DbuRwOrWB9w90ZaLgA.roa
Signing time: Thu 08 Dec 2022 12:43:00 +0000
ROA not before: Thu 08 Dec 2022 12:43:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8263
IP address blocks: 212.14.160.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.162.0.0/16 maxlen: 24
195.230.64.0/19 maxlen: 24
188.94.168.0/21 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
178.176.225.0/24 maxlen: 24
178.176.224.0/24 maxlen: 24
185.210.140.0/22 maxlen: 24
178.176.226.0/24 maxlen: 24
212.119.160.0/19 maxlen: 24
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
178.23.144.0/21 maxlen: 24
212.44.64.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f1:c2:b7:67:20:d4:cc:0e:1f:4e:6d:e3:07:ce:f0:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 8 12:43:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e1bea363a73ef436ee4703ab581f70f7465a2e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e1:d3:bd:71:1f:83:75:e5:9e:ec:30:91:6b:
0c:c0:33:fe:b5:46:ee:09:08:f9:4d:5f:37:10:fb:
e7:4a:b9:ec:9d:bf:6c:3a:61:42:d9:48:e2:31:1e:
f4:a5:71:06:a1:ab:6f:f6:32:18:81:22:cb:a5:14:
71:fd:ea:81:96:71:52:dd:87:19:db:e3:b5:0d:61:
17:e3:06:82:77:15:29:84:d2:09:15:4b:77:09:e8:
e6:dd:de:20:80:c8:dd:1d:0b:ae:50:98:90:0e:04:
06:78:23:70:d4:38:08:64:9f:ed:43:a1:df:08:9b:
f0:c6:4e:3b:15:7f:03:67:6c:fa:1f:aa:68:c0:29:
e4:bb:a1:ca:b3:bd:dd:32:86:64:00:3d:f1:8c:71:
9a:59:80:2a:10:43:27:bb:83:c1:b2:ed:1f:d4:a1:
0a:95:e8:4f:1c:d9:25:b6:94:5e:3c:b5:8a:1b:5f:
a3:e7:23:09:8c:1c:cf:79:14:e0:94:0c:20:a2:66:
63:33:f2:f4:3a:9f:1b:f6:0c:47:6f:5f:16:7a:d5:
00:a7:ed:ee:61:4b:bc:35:45:bf:0b:85:4b:01:60:
7d:e5:42:93:d4:55:c3:26:8a:20:cf:f6:2c:5b:41:
db:5a:4c:7b:59:ea:e5:f5:69:88:b8:fc:11:e9:7b:
a4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:BE:A3:63:A7:3E:F4:36:EE:47:03:AB:58:1F:70:F7:46:5A:2E:00
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/4b6jY6c-9DbuRwOrWB9w90ZaLgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.204.64.0/18
178.23.144.0/21
178.176.224.0-178.176.226.255
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
62:90:2a:87:0e:04:fa:da:7b:4e:48:a1:3c:74:03:22:b5:80:
39:6b:06:b2:40:c3:b2:49:9e:2d:91:e2:0f:9f:61:0b:c0:4b:
90:19:5c:df:95:7f:0c:26:8e:95:a0:23:e5:71:ab:4b:8f:a1:
d6:50:48:d9:bb:4c:4f:83:cd:af:90:2d:39:d0:1c:32:95:49:
75:c9:cc:be:2b:0e:d0:ee:80:6b:ee:9d:54:4f:2d:88:6a:88:
8c:be:75:d6:57:0e:bd:6d:e8:6d:d2:3e:0f:22:f5:af:85:dd:
e7:b5:74:3c:81:1e:c9:49:d4:19:37:88:e3:55:5b:72:43:5d:
da:06:71:3f:46:56:db:7d:75:c5:fd:f7:17:e1:8a:fe:41:de:
53:f1:cf:3d:87:66:8a:88:a5:db:8d:db:37:7c:28:a1:6f:ea:
05:d4:6a:ce:4d:ba:03:e0:18:29:a8:a1:85:4b:53:38:3a:eb:
d0:08:b8:eb:83:91:a4:e1:71:39:6e:ad:6d:0b:44:a9:6a:0d:
a8:f9:a9:b4:df:6e:22:18:78:ad:d8:62:14:d5:88:74:f7:f0:
5c:8c:42:56:45:ed:e7:a9:f2:5f:39:7f:81:88:5a:e1:51:fc:
8e:43:6e:87:ba:3e:a0:e5:90:78:48:b3:5a:57:6b:06:2d:7e:
c7:d4:5e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:39:06 2025 by rpki-client