Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/BABtPftOQ5qPnEdnocYrBFqiJHQ.roa
File: BABtPftOQ5qPnEdnocYrBFqiJHQ.roa (raw, json)
Hash identifier: 7OP/nuxvjQxnjA1G0oZLPO+cGWFAs2163PTfFrgLjb4=
Subject key identifier: 04:00:6D:3D:FB:4E:43:9A:8F:9C:47:67:A1:C6:2B:04:5A:A2:24:74
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01856ED4E5C38AA03C1449BB83F7D3D42689
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/BABtPftOQ5qPnEdnocYrBFqiJHQ.roa
Signing time: Sun 01 Jan 2023 19:35:24 +0000
ROA not before: Sun 01 Jan 2023 19:35:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31213
IP address blocks: 85.26.128.0/20 maxlen: 20
85.26.208.0/22 maxlen: 22
85.26.212.0/22 maxlen: 22
109.188.128.0/17 maxlen: 17
85.26.216.0/22 maxlen: 22
85.26.220.0/22 maxlen: 22
188.170.80.0/21 maxlen: 21
78.25.120.0/22 maxlen: 22
188.170.92.0/22 maxlen: 22
37.28.160.0/21 maxlen: 21
85.26.248.0/22 maxlen: 22
85.26.252.0/22 maxlen: 22
37.28.168.0/21 maxlen: 21
78.25.96.0/21 maxlen: 21
78.25.104.0/22 maxlen: 22
188.170.68.0/24 maxlen: 24
188.170.65.0/24 maxlen: 24
188.170.66.0/24 maxlen: 24
188.170.67.0/24 maxlen: 24
78.25.108.0/22 maxlen: 22
188.170.72.0/21 maxlen: 21
94.25.228.0/23 maxlen: 23
94.25.232.0/21 maxlen: 21
37.29.71.0/24 maxlen: 24
37.29.68.0/23 maxlen: 23
37.29.70.0/24 maxlen: 24
83.149.0.0/21 maxlen: 21
128.204.74.0/24 maxlen: 24
128.204.75.0/24 maxlen: 24
94.25.208.0/22 maxlen: 22
37.29.48.0/21 maxlen: 21
188.162.64.0/23 maxlen: 23
37.29.56.0/21 maxlen: 21
94.25.216.0/21 maxlen: 21
94.25.224.0/21 maxlen: 21
37.29.64.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:e5:c3:8a:a0:3c:14:49:bb:83:f7:d3:d4:26:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 19:35:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=04006d3dfb4e439a8f9c4767a1c62b045aa22474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8d:5c:22:13:ad:cd:9b:5a:31:98:2a:71:47:
91:02:b8:10:99:58:96:ba:5d:95:23:d5:44:e5:84:
42:c9:02:ce:71:b9:49:da:0c:7f:da:c7:5e:e3:bf:
1c:74:73:3a:aa:de:da:4e:96:39:68:b8:ab:d3:c5:
7f:31:2f:ab:33:86:e9:0d:1d:4d:66:bd:e9:27:79:
2a:2c:c5:1d:47:d9:4b:e5:a3:0c:2e:51:98:52:31:
7c:f9:c7:09:64:12:79:c1:1f:ec:77:3a:69:16:3e:
16:03:c0:fe:15:88:b7:7b:9e:01:bf:c0:6b:6a:59:
61:b4:8e:ba:a5:1e:3d:61:56:ae:12:d5:3d:d6:6f:
f9:41:41:aa:43:e6:03:e4:17:44:5e:b9:75:d9:d1:
3e:87:31:cf:4b:9b:66:80:c9:61:dd:87:dc:e8:68:
7a:44:ed:6b:f1:73:ca:b7:0c:63:c7:04:6d:cf:5f:
e7:e6:bd:a5:e1:00:ca:b5:32:89:f4:67:0a:a8:55:
79:7f:67:2d:dc:4f:81:4d:41:89:00:5f:8e:04:93:
e4:06:c2:a4:44:0f:98:40:5c:94:18:38:69:ef:88:
87:b8:40:44:81:14:1b:69:55:34:02:aa:8b:81:54:
9b:78:bc:46:60:72:15:b0:56:a2:11:56:54:43:a1:
c1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:00:6D:3D:FB:4E:43:9A:8F:9C:47:67:A1:C6:2B:04:5A:A2:24:74
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/BABtPftOQ5qPnEdnocYrBFqiJHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.28.160.0/20
37.29.48.0-37.29.71.255
78.25.96.0/20
78.25.120.0/22
83.149.0.0/21
85.26.128.0/20
85.26.208.0/20
85.26.248.0/21
94.25.208.0/22
94.25.216.0-94.25.239.255
109.188.128.0/17
128.204.74.0/23
188.162.64.0/23
188.170.65.0-188.170.68.255
188.170.72.0-188.170.87.255
188.170.92.0/22
Signature Algorithm: sha256WithRSAEncryption
37:79:15:a6:da:b7:42:c1:bb:4e:d4:96:7d:a6:18:3c:16:c7:
cc:6c:62:40:a7:14:1f:e9:4e:01:98:db:66:c6:8d:a4:c2:8c:
c8:e6:2e:a5:9e:64:43:fc:8e:60:ab:1f:ec:52:87:4e:29:ab:
0b:bd:00:27:c9:ea:65:c4:91:fb:d6:06:e6:c5:d4:a9:05:bd:
6a:bc:85:c8:89:ce:1d:f4:8e:6a:e0:fb:a7:b3:9a:ed:2f:68:
56:5d:ee:f5:ac:ff:3f:90:8f:41:6e:55:96:fd:84:5d:1d:15:
a5:13:01:72:3d:cc:fa:b6:87:d7:f5:ad:43:3f:83:67:46:fb:
49:3d:1f:99:0a:e0:e7:99:f8:a1:9d:0f:04:73:ab:28:b5:4a:
ed:04:96:7b:9f:9b:ee:d2:b8:3b:0c:e6:82:8b:6a:d8:30:3c:
b8:4b:40:a3:5c:b1:34:de:35:e5:7a:92:87:98:7a:50:b2:4c:
49:5e:23:f9:52:a3:9c:e9:95:db:26:f1:fe:50:7b:66:1b:ae:
b7:0a:51:06:95:79:51:c5:04:11:c1:de:86:4f:88:69:61:7f:
f5:05:02:13:f6:1a:cb:39:64:ad:4f:09:58:f6:d7:4d:df:de:
58:12:7d:ac:2a:36:20:2f:cc:94:ee:65:ac:96:e7:33:31:0a:
74:4a:04:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:43:40 2025 by rpki-client