Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/EXbmbMzFbJ8GV_-jA63VftmpUmY.roa
File: EXbmbMzFbJ8GV_-jA63VftmpUmY.roa (raw, json)
Hash identifier: IT3MU44CS64uVSo9n6Jxw5uCX22P3DF9iLRSaWD3f8I=
Subject key identifier: 11:76:E6:6C:CC:C5:6C:9F:06:57:FF:A3:03:AD:D5:7E:D9:A9:52:66
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01841D90ACB894B9E2C67AE8B5CCDF2F2A46
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/EXbmbMzFbJ8GV_-jA63VftmpUmY.roa
Signing time: Fri 28 Oct 2022 07:48:51 +0000
ROA not before: Fri 28 Oct 2022 07:48:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3168
IP address blocks: 178.176.132.0/24 maxlen: 24
62.89.197.0/24 maxlen: 24
178.176.129.0/24 maxlen: 24
62.89.206.0/24 maxlen: 24
62.89.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1d:90:ac:b8:94:b9:e2:c6:7a:e8:b5:cc:df:2f:2a:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Oct 28 07:48:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1176e66cccc56c9f0657ffa303add57ed9a95266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ba:45:a4:da:db:7e:7a:f1:8f:41:47:ae:0c:
37:af:09:84:bc:48:fb:f6:fa:ff:31:b8:41:4a:32:
17:97:b0:d9:37:66:d4:c0:3f:95:81:01:c7:6b:be:
b3:6e:62:ce:a9:cf:d9:c3:9a:f8:46:7b:cc:d3:36:
13:2d:82:de:27:c9:75:53:e8:56:ea:66:e9:9a:e0:
fb:78:81:5d:d0:46:e9:84:8a:c7:d5:c1:9f:6f:40:
ed:07:3c:5b:5d:7b:a7:39:20:6f:56:8e:4c:ee:2e:
e3:9f:5e:20:4e:ad:a7:b7:97:2f:1c:95:e9:21:c7:
c3:0f:6e:98:b3:6a:9d:93:ed:28:1c:ef:bb:9d:b0:
b5:60:55:fa:bb:68:86:2e:50:4f:14:a3:f6:e8:8b:
98:ff:e9:e0:2d:84:ae:b5:60:1c:79:2b:dc:e4:ab:
0e:e0:6d:f8:d0:03:05:c8:26:7f:2b:cc:aa:9b:53:
2f:a5:64:0d:ec:f9:64:76:ec:22:d2:73:94:76:69:
de:cc:9a:0f:92:0f:24:2f:f7:90:57:14:c6:8c:04:
70:c2:95:06:79:d2:c9:4f:ad:90:94:9f:0c:47:6c:
45:97:38:15:ec:a0:5e:86:09:05:b9:9e:12:24:91:
d9:9b:07:fd:01:0d:81:3a:dc:ee:e6:0f:93:2a:29:
c9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:76:E6:6C:CC:C5:6C:9F:06:57:FF:A3:03:AD:D5:7E:D9:A9:52:66
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/EXbmbMzFbJ8GV_-jA63VftmpUmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.89.197.0/24
62.89.206.0/23
178.176.129.0/24
178.176.132.0/24
Signature Algorithm: sha256WithRSAEncryption
74:07:0d:0b:51:5a:6a:9c:98:63:76:60:62:e3:9e:5a:28:d3:
3b:1d:01:1d:ec:5d:0b:61:1d:e3:ce:c2:52:b0:ee:46:dc:61:
98:03:3c:89:70:c0:5e:c5:b3:d9:b2:df:4d:5a:87:76:4f:e5:
13:bb:34:56:96:76:c4:f9:2d:2c:4b:b8:1c:21:d7:2b:dd:5f:
ce:05:02:e7:a6:2c:df:1e:4d:d7:69:77:4d:d2:f5:65:cf:6f:
42:33:f3:b9:d2:20:7c:02:84:1f:20:97:9b:89:19:c8:03:72:
ab:9e:4f:67:1f:2e:1b:e4:5a:3a:df:9a:e5:8c:c8:49:bf:50:
3e:18:d3:1d:7b:39:fc:9e:67:a6:a2:1b:49:4b:19:1b:34:e3:
a3:0c:b2:90:fc:2e:b3:21:f7:60:33:72:57:44:b5:ef:47:bc:
60:bf:6a:ab:5b:a6:80:c6:2c:a4:24:f3:c8:62:ea:5d:cb:e9:
24:9d:d8:95:dc:a3:7e:10:dc:ff:49:88:4f:c4:4b:b1:00:b1:
ae:94:99:0d:86:3e:44:3c:e4:51:25:b1:f4:11:a3:8d:22:61:
cf:e7:ce:89:97:00:51:b0:f2:14:80:41:f5:b5:ee:ca:81:6b:
ab:73:7d:ba:7b:a0:a7:0b:36:a9:df:84:51:45:18:4b:52:de:
3e:4e:7b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:43:30 2025 by rpki-client