Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/8NMuK6UwW4X3GNJ4xqtBODouNRM.roa
File: 8NMuK6UwW4X3GNJ4xqtBODouNRM.roa (raw, json)
Hash identifier: pHFTN92MssSkWyQ0Y+8kgKZ5Qf6e/TtX6QCIoPPwPIg=
Subject key identifier: F0:D3:2E:2B:A5:30:5B:85:F7:18:D2:78:C6:AB:41:38:3A:2E:35:13
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184E2661024ADD3E652BEEA8925FA65D541
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/8NMuK6UwW4X3GNJ4xqtBODouNRM.roa
Signing time: Mon 05 Dec 2022 13:07:30 +0000
ROA not before: Mon 05 Dec 2022 13:07:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31088
IP address blocks: 109.188.0.0/16 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
94.25.128.0/17 maxlen: 24
93.153.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
109.74.112.0/20 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
91.193.212.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
212.44.64.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e2:66:10:24:ad:d3:e6:52:be:ea:89:25:fa:65:d5:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 5 13:07:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f0d32e2ba5305b85f718d278c6ab41383a2e3513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b3:6a:3a:07:29:97:3e:95:b4:23:26:e4:de:
f1:47:4d:da:46:20:b8:00:1d:51:35:91:a7:77:eb:
7f:3f:e9:67:7f:97:1d:e0:65:bd:cc:0e:f5:42:40:
3c:e8:6e:62:c5:5f:48:f9:a1:1b:cb:82:b0:9e:6d:
f9:dc:57:78:2b:3e:b4:ed:9f:e7:d9:de:73:b9:0e:
8e:41:7d:12:9e:2d:2a:32:d1:b5:da:f2:0b:1c:ff:
42:88:26:7e:c9:bf:b6:72:31:07:01:39:cf:f3:7a:
6e:55:c3:17:01:69:af:52:1b:fe:80:03:34:b2:a0:
af:1f:f9:b0:8d:15:dc:11:01:11:54:1c:c3:69:6d:
22:09:71:65:aa:d3:76:ca:d5:b0:4e:ac:ff:08:aa:
d9:c4:c8:28:7d:05:c7:2a:fc:f8:5f:8c:90:d3:2a:
0c:82:b9:1c:f7:1f:b7:86:08:1b:58:35:24:b1:26:
b2:90:78:64:cf:23:5b:03:85:d2:e8:a4:1a:48:ea:
63:d8:79:a8:9a:dc:65:e7:ab:d7:2a:08:f5:ff:79:
e3:b4:90:39:ac:9d:70:ba:55:a3:ae:da:75:75:90:
46:cb:e3:7e:8f:9b:e4:2d:8d:90:19:13:8b:19:82:
7b:c4:ce:46:24:fd:6d:39:22:5d:30:49:af:03:96:
e7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D3:2E:2B:A5:30:5B:85:F7:18:D2:78:C6:AB:41:38:3A:2E:35:13
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/8NMuK6UwW4X3GNJ4xqtBODouNRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
0c:37:d9:7c:18:6b:ca:65:92:6f:b9:ce:a2:55:d5:50:e2:18:
80:c3:2b:71:62:22:bc:2e:99:f4:93:6b:c6:77:59:4d:cf:b5:
ec:32:69:e6:00:c6:14:a4:90:83:62:d3:80:5e:eb:6c:bc:c2:
30:f6:83:d1:d0:84:18:f6:6d:9e:47:e7:e8:e4:79:75:eb:87:
74:17:1f:3c:b6:a8:60:1a:4c:18:e5:9d:c4:e7:af:ea:fd:a7:
f3:a5:5b:83:f4:f7:d7:53:63:36:35:40:8d:79:b4:46:9b:06:
5e:95:5d:6f:24:3c:47:0f:f1:19:58:57:d3:7b:da:9f:d1:d8:
f5:66:97:b9:32:08:58:11:e0:d9:13:84:24:f6:42:f4:38:28:
47:53:85:7b:7f:ab:7f:c4:c1:43:5f:2d:b5:a8:e5:76:9e:a7:
b1:0a:2d:1e:ef:9a:fd:80:58:a5:31:97:8d:53:12:af:23:c2:
59:67:7b:7d:40:50:0d:da:0a:35:2b:96:b3:00:be:81:02:79:
d4:db:38:74:a7:6f:64:31:05:5a:8e:4c:70:85:f9:c5:bb:af:
1b:ad:90:f9:66:63:76:be:d3:fd:51:09:40:5e:8e:ad:be:f9:
65:fb:fa:fe:a9:3e:ba:b2:c1:9e:8e:67:93:f3:48:8a:f3:d5:
ed:d6:37:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:33:51 2025 by rpki-client