Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/7v3DnCxTsQLnhBkVDhZEdWNTBwA.roa
File: 7v3DnCxTsQLnhBkVDhZEdWNTBwA.roa (raw, json)
Hash identifier: oUkvN1OWvvLrtlRk2zcEq2Iz6mHAq+pxyr1p89NmBe4=
Subject key identifier: EE:FD:C3:9C:2C:53:B1:02:E7:84:19:15:0E:16:44:75:63:53:07:00
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184E2660AA603FD9EAB54AFBBC109823E5E
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/7v3DnCxTsQLnhBkVDhZEdWNTBwA.roa
Signing time: Mon 05 Dec 2022 13:07:28 +0000
ROA not before: Mon 05 Dec 2022 13:07:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6854
IP address blocks: 109.188.0.0/16 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
93.153.128.0/17 maxlen: 24
94.25.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
109.74.112.0/20 maxlen: 24
80.253.0.0/20 maxlen: 20
185.210.140.0/22 maxlen: 24
62.64.16.0/20 maxlen: 20
212.119.160.0/19 maxlen: 24
62.64.24.0/21 maxlen: 21
91.193.212.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 19
195.5.128.0/19 maxlen: 24
212.44.64.0/19 maxlen: 24
83.229.128.0/17 maxlen: 17
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e2:66:0a:a6:03:fd:9e:ab:54:af:bb:c1:09:82:3e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 5 13:07:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eefdc39c2c53b102e78419150e16447563530700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1d:b5:d3:07:20:f2:48:67:ef:c5:5b:7c:40:
6a:26:57:a6:58:95:3e:37:7a:6b:53:b1:dc:b1:31:
93:a5:ca:57:72:cc:df:ac:0f:3f:a6:b1:7f:8b:f3:
70:8b:38:93:b1:30:e6:7c:0b:71:54:78:0a:91:57:
d3:f2:48:32:b9:f1:48:0e:e0:c0:6d:cf:dc:3e:60:
64:b0:6c:ee:63:3c:95:85:e1:43:e7:2c:e4:c4:39:
31:7f:11:34:4a:ee:39:fb:aa:27:46:4c:67:8f:f8:
6f:64:a3:07:85:84:c4:c3:11:03:5d:3a:f7:3f:86:
1c:55:36:67:1e:86:ec:bd:20:15:1b:94:96:c3:b6:
33:87:4f:df:12:16:f6:91:32:bd:7e:ed:a1:e7:03:
53:ce:57:c3:55:83:98:78:8b:2d:83:df:4b:25:57:
09:89:20:e6:06:aa:f7:2f:b8:fa:32:d9:54:22:23:
15:e5:96:fa:bd:b0:ea:b1:b3:3f:36:0b:a1:38:4c:
db:de:0b:61:c9:0b:66:99:fb:1e:2c:1b:56:f3:cc:
14:c8:ce:c6:9e:99:9c:a5:f0:dd:b8:c6:bf:a2:08:
9f:5d:9d:a2:d3:fb:64:1b:59:d4:d8:66:cf:3e:4f:
2f:30:f1:e5:40:7c:b0:a5:25:9d:4e:4a:45:a2:9b:
4d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:FD:C3:9C:2C:53:B1:02:E7:84:19:15:0E:16:44:75:63:53:07:00
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/7v3DnCxTsQLnhBkVDhZEdWNTBwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.64.16.0/20
80.253.0.0/20
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
0e:48:a3:44:2f:32:e8:73:b1:c6:0b:3e:b6:2e:11:cc:a5:b0:
8c:94:73:56:c9:95:8a:79:e5:74:3b:b0:38:6a:d1:37:20:cd:
34:17:85:f7:ba:3f:34:65:f8:5d:d5:d7:72:fe:c1:97:be:98:
e0:82:ac:08:01:f7:a6:e3:33:79:29:49:cf:d0:3e:a6:ee:37:
f9:88:d9:55:d6:c7:58:88:26:e9:98:a9:93:b9:c6:12:f4:df:
88:ae:e1:b8:82:d6:e2:ed:c3:4b:21:76:76:c0:04:1a:fb:37:
5e:40:c8:ee:fc:ed:ff:9b:f9:73:85:11:d4:c3:db:c6:6c:e8:
10:5f:e3:88:2b:6e:39:d9:c8:44:23:de:8f:01:7c:48:0e:28:
85:84:b9:ad:48:0e:bf:e1:d2:95:b0:94:1e:b9:12:43:30:5a:
f4:c3:cf:db:4e:2c:da:28:a1:2c:04:d5:74:8b:4d:25:ea:b7:
06:d1:6a:07:0a:75:ab:6c:55:49:eb:65:19:5e:a3:9a:09:56:
e8:ab:74:e3:46:89:3f:27:ad:70:1b:1e:99:bc:a7:13:d5:a9:
b9:3c:bb:c9:3f:78:73:14:64:4c:93:a3:aa:2c:b8:76:7b:4c:
c9:35:44:0c:69:2f:68:19:2f:c3:3e:73:c1:19:7b:f8:b4:88:
8c:b9:99:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:36:00 2025 by rpki-client