Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/EEfU6awHh91zWsf25ab67hdy4Js.roa
File: EEfU6awHh91zWsf25ab67hdy4Js.roa (raw, json)
Hash identifier: D7GZvydWkzyeRRPnRTWp4KAdgyN/zq96iDJp41HOdzQ=
Subject key identifier: 10:47:D4:E9:AC:07:87:DD:73:5A:C7:F6:E5:A6:FA:EE:17:72:E0:9B
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0185053F78671674AB6903C6E9EAD351FC63
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/EEfU6awHh91zWsf25ab67hdy4Js.roa
Signing time: Mon 12 Dec 2022 07:32:03 +0000
ROA not before: Mon 12 Dec 2022 07:32:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31268
IP address blocks: 212.14.160.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.162.0.0/16 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
212.119.160.0/19 maxlen: 24
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
212.44.64.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:3f:78:67:16:74:ab:69:03:c6:e9:ea:d3:51:fc:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 12 07:32:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1047d4e9ac0787dd735ac7f6e5a6faee1772e09b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:86:38:c3:e9:94:26:f0:80:86:12:20:21:70:
6f:97:3e:bb:9e:8b:16:15:ba:0a:c5:12:11:a6:bd:
66:91:ed:a0:ff:46:a1:59:da:5e:1d:72:09:1a:c6:
81:87:53:54:42:5d:4a:d3:b3:4d:cc:e7:f5:af:5b:
5b:7c:00:52:12:76:3e:0d:1a:a0:e8:a6:81:53:c1:
83:2e:ff:17:98:ee:5d:50:6c:88:3e:a5:d8:8a:f1:
06:3b:79:08:5c:1f:2f:b7:10:76:8e:f6:ea:b3:e7:
ac:e7:44:53:bb:6e:d2:46:78:99:7e:6d:b8:cb:f6:
e8:3f:0d:1a:eb:ed:60:72:74:7c:c1:d3:79:23:7e:
3d:14:0a:82:06:25:1d:c4:61:96:17:22:e6:6f:e2:
43:34:83:5e:9d:d2:70:53:95:6b:3d:38:bc:e3:e8:
72:07:86:78:75:0f:7f:78:5f:9e:af:a4:bb:21:ec:
83:22:1b:c3:64:fe:bf:e8:5c:c3:58:49:64:b2:0b:
c8:ca:bd:7f:e6:09:db:97:58:5b:45:5f:df:aa:05:
20:05:dd:3c:24:15:d3:3c:5a:e6:3e:d7:e2:e8:dd:
b3:97:61:88:07:87:fb:22:9f:06:78:2f:98:8b:10:
56:7a:5f:ce:e2:9e:ca:0e:93:dd:7b:ed:40:db:96:
a4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:47:D4:E9:AC:07:87:DD:73:5A:C7:F6:E5:A6:FA:EE:17:72:E0:9B
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/EEfU6awHh91zWsf25ab67hdy4Js.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
Signature Algorithm: sha256WithRSAEncryption
9e:86:94:8b:56:70:01:31:0b:8c:6b:a0:05:bc:47:97:d8:2b:
88:e4:1c:2f:82:2c:94:03:e6:ff:ec:29:23:3e:5a:f1:bc:7c:
44:6d:30:34:94:6a:68:75:ef:62:23:37:34:a8:4c:87:39:f0:
91:2a:40:26:49:80:32:7f:7c:54:5b:07:31:6e:e2:4c:84:1f:
55:ad:40:4d:a4:3f:09:d4:1a:42:dd:09:32:d8:31:ad:8b:12:
f0:22:bd:d0:1f:36:54:80:ee:8a:cc:9d:64:37:7b:47:7d:f2:
4d:94:31:71:2a:9d:f0:fd:91:9a:f3:b0:dc:6f:ca:e5:89:4b:
fc:21:eb:3a:8e:af:f4:a2:08:6b:45:df:93:96:30:74:20:69:
f2:e7:03:dd:39:59:0c:f2:61:c7:e3:01:55:95:d2:d5:c8:34:
49:6d:bc:36:dd:33:62:cf:21:83:1f:9f:c4:28:29:b8:77:22:
d1:30:ee:a8:49:1e:52:eb:d9:53:9f:cc:82:65:e7:6c:ac:ca:
77:15:27:d8:6b:cd:e8:2b:71:4a:fb:32:5c:bc:5a:3e:8c:31:
38:e2:ac:9c:ec:23:a6:60:e9:c1:06:6c:93:3c:ec:52:89:c0:
45:e4:63:18:aa:a3:b5:b6:55:b8:cf:66:b8:4e:eb:64:57:c3:
19:85:45:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:28:22 2025 by rpki-client