Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/IZqAZRy4hxrbPd1CUU_-KrEHTMU.roa
File: IZqAZRy4hxrbPd1CUU_-KrEHTMU.roa (raw, json)
Hash identifier: 8KEYbdCNCcdcQ6tOCRRTMWOo+ghZPpo8hGcD3SnuwcM=
Subject key identifier: 21:9A:80:65:1C:B8:87:1A:DB:3D:DD:42:51:4F:FE:2A:B1:07:4C:C5
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184E266150AB8558B93DD065070D2A05EDE
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/IZqAZRy4hxrbPd1CUU_-KrEHTMU.roa
Signing time: Mon 05 Dec 2022 13:07:31 +0000
ROA not before: Mon 05 Dec 2022 13:07:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35298
IP address blocks: 109.188.0.0/16 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.16.96.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
85.26.128.0/17 maxlen: 24
195.78.116.0/23 maxlen: 24
78.41.100.0/22 maxlen: 22
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
178.176.154.0/23 maxlen: 23
31.173.176.0/20 maxlen: 20
93.153.128.0/17 maxlen: 24
94.25.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
109.74.112.0/20 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
91.193.212.0/22 maxlen: 24
37.29.76.0/22 maxlen: 22
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
195.5.128.0/19 maxlen: 24
212.44.64.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e2:66:15:0a:b8:55:8b:93:dd:06:50:70:d2:a0:5e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 5 13:07:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=219a80651cb8871adb3ddd42514ffe2ab1074cc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:17:a4:f0:e2:f9:4a:7c:fd:04:92:0d:e2:06:
fa:a0:96:b5:d7:e4:bc:be:05:6d:70:9b:92:90:ad:
94:b8:1d:3e:94:e8:a8:4a:c4:ba:25:62:13:e0:5e:
cf:55:7b:f8:f7:65:b5:a9:78:8d:48:1f:60:b1:ea:
1e:f4:35:1f:dc:54:20:1a:3e:4b:bc:99:79:78:be:
0c:b1:2d:f7:17:1c:19:df:6e:23:7b:26:fb:ae:cf:
c3:78:f9:34:54:7b:c7:74:f8:19:30:4f:f8:4e:de:
16:09:21:46:94:92:bd:40:c1:6b:0f:89:d3:fe:b0:
c6:eb:05:a3:c1:aa:6e:64:b2:37:e6:22:82:bb:a3:
68:1b:5d:bb:7b:7e:1c:ab:22:0c:b0:b3:8e:b8:61:
61:fe:b8:bd:f5:2a:7d:8b:25:23:a7:a8:fb:2e:b7:
29:68:60:78:6c:19:ab:74:f4:df:f3:b9:0c:7a:0b:
1a:a2:43:19:63:9d:9a:dd:44:e2:8c:b4:70:68:54:
49:6b:a0:f2:29:06:58:50:0d:07:11:58:35:f3:b3:
dc:ec:bd:a1:b6:8f:c7:ab:e5:3d:5b:81:5d:64:e9:
5f:e2:fe:87:d1:49:d9:10:7b:27:7a:08:b7:44:fb:
92:9f:eb:d6:d7:9e:68:89:04:d2:e3:2c:a8:03:48:
c9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:9A:80:65:1C:B8:87:1A:DB:3D:DD:42:51:4F:FE:2A:B1:07:4C:C5
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/IZqAZRy4hxrbPd1CUU_-KrEHTMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.176.0/20
37.29.76.0/22
78.41.100.0/22
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.154.0/23
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
83:94:6c:42:c1:2c:8d:12:a0:2e:ac:52:88:53:f1:88:ca:5a:
7a:77:75:5b:81:51:c9:e2:c7:57:a4:2b:ae:f6:8e:e0:4c:32:
f6:f7:59:c0:cf:22:6d:51:4e:85:1d:61:64:56:f0:e2:98:cb:
e5:04:7e:67:82:33:14:66:5f:ed:cc:ce:54:d6:43:9c:ff:15:
63:fe:5d:87:39:2d:d6:1c:60:29:78:d2:75:97:08:62:d4:36:
94:17:2e:fe:5c:cf:e3:5c:48:b7:0c:ef:32:e2:ea:2d:78:13:
64:67:84:ac:d6:c0:77:94:84:15:3a:08:fa:08:ce:33:b5:94:
23:e4:34:47:02:6b:a4:e0:57:af:64:20:aa:d3:5a:d2:43:12:
95:52:af:d7:31:95:bf:d4:c2:d3:ed:0e:ee:ad:41:33:f4:8d:
13:d7:00:19:87:9d:ed:80:59:ba:f4:71:9c:81:de:d7:f8:6d:
8e:4f:7f:27:2e:20:2d:b5:ef:e4:6d:37:12:01:fb:b9:94:2c:
0c:e2:77:03:30:49:eb:09:b2:a8:dc:64:d2:fc:5e:17:e5:98:
84:47:ab:09:b4:65:c4:27:07:d2:8f:91:1c:0f:f1:13:f8:3a:
ce:1a:4b:79:1a:6c:17:1b:2c:f3:05:94:47:7d:6f:12:53:f6:
f9:58:56:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:51:05 2025 by rpki-client