Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/G9TziEwNopmjzZ6i6XpEB4EVIGo.roa
File: G9TziEwNopmjzZ6i6XpEB4EVIGo.roa (raw, json)
Hash identifier: RHBBH5oK+Q1PvkZNl6wcTHgCAFOHp0Guhh8f+UYeCfM=
Subject key identifier: 1B:D4:F3:88:4C:0D:A2:99:A3:CD:9E:A2:E9:7A:44:07:81:15:20:6A
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184F219E8718FC639C7B0B80CE345A0C453
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/G9TziEwNopmjzZ6i6XpEB4EVIGo.roa
Signing time: Thu 08 Dec 2022 14:18:14 +0000
ROA not before: Thu 08 Dec 2022 14:18:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41976
IP address blocks: 212.14.160.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
109.74.112.0/20 maxlen: 20
109.74.112.0/21 maxlen: 21
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
212.44.64.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f2:19:e8:71:8f:c6:39:c7:b0:b8:0c:e3:45:a0:c4:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 8 14:18:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1bd4f3884c0da299a3cd9ea2e97a44078115206a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:97:cf:e0:66:f1:93:95:d7:70:05:5d:83:34:
0a:05:c1:a4:6a:8f:36:4c:a5:00:66:54:80:63:42:
2c:3e:db:81:53:b0:d3:20:4f:f9:d5:c1:c8:6b:1a:
ca:f6:0b:fd:6e:8e:c9:18:9b:89:b4:5d:ce:4f:57:
56:f4:b6:71:37:76:bf:a1:fe:e2:48:10:4c:30:37:
0b:29:8b:3b:98:ef:38:3f:9c:1e:7f:0f:5d:4c:15:
cf:fa:25:e6:db:92:63:3a:89:91:be:90:84:57:36:
b4:f7:f1:32:ad:15:da:fc:d0:d3:23:74:15:d1:53:
af:94:de:fe:3a:28:60:77:2a:3d:67:14:49:ce:8a:
a8:df:a6:f8:12:81:65:33:c9:1f:2e:aa:b9:54:02:
74:c3:0d:95:ee:d1:14:99:af:f4:4e:ed:64:8b:08:
51:35:4f:01:87:aa:60:aa:36:f3:a5:35:a9:0f:8c:
98:25:e1:e7:73:84:41:ef:0e:e5:0f:9f:34:bc:5b:
49:ea:3f:3a:86:4f:9e:6c:df:3b:97:16:ab:13:39:
0c:2b:3f:37:17:11:df:04:7a:1d:ab:7e:d7:d4:44:
cd:e8:84:a2:b5:8c:e6:5f:66:77:05:23:e1:97:5a:
b4:96:83:06:d8:60:40:c1:e5:ce:ed:2c:9d:c3:53:
5e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D4:F3:88:4C:0D:A2:99:A3:CD:9E:A2:E9:7A:44:07:81:15:20:6A
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/G9TziEwNopmjzZ6i6XpEB4EVIGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.74.112.0/20
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
48:73:78:19:07:e6:b1:97:54:dc:03:e9:39:6e:15:10:dc:e2:
85:4f:2d:62:ec:f2:da:eb:12:73:f7:9d:f6:d3:51:21:c0:ca:
c9:d3:42:2e:55:57:6f:1d:7b:01:a5:dd:e6:97:6c:a6:cc:7b:
3f:61:d0:a0:b6:a7:0b:ac:10:82:44:24:8b:8c:62:39:91:7a:
5f:d3:e7:f6:bc:53:13:77:29:75:7c:ec:41:1e:02:5c:68:cc:
10:f5:bb:70:4f:12:a1:75:1f:cc:c7:5b:a6:c1:d8:b0:5b:24:
eb:8d:43:ad:9f:6b:cf:82:f2:7e:33:99:12:db:bc:61:b2:d1:
04:90:14:8a:7e:df:e6:0d:65:bf:c5:5f:18:bd:97:7f:eb:05:
89:ce:6c:57:eb:fb:a9:40:aa:d5:e8:ff:19:d5:07:5c:f3:77:
fa:61:89:6d:35:81:a5:f0:05:28:81:90:77:da:f7:19:fb:1a:
aa:55:23:50:2b:84:b3:a1:b7:18:c1:f0:3d:d9:a0:2b:7f:65:
2a:65:df:04:1f:5e:12:a5:98:ea:94:79:a6:eb:29:52:38:3a:
d7:ed:fe:07:bd:92:99:8b:a2:c8:e8:c4:27:27:aa:e1:38:2e:
fc:97:b0:50:2b:c4:d4:8f:08:a2:a6:50:ae:f7:a4:10:c2:19:
8c:55:78:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:26:02 2025 by rpki-client