Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/J3QHKerLY6u5R18sQAvfvSSSiRE.roa
File: J3QHKerLY6u5R18sQAvfvSSSiRE.roa (raw, json)
Hash identifier: cwnSJGxx75wUgnGCjPBT45zz/tCrCfyTmOtV80ETY6w=
Subject key identifier: 27:74:07:29:EA:CB:63:AB:B9:47:5F:2C:40:0B:DF:BD:24:92:89:11
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018505AE3B7C31B4F80FCA0E904F5A0CE140
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/J3QHKerLY6u5R18sQAvfvSSSiRE.roa
Signing time: Mon 12 Dec 2022 09:33:02 +0000
ROA not before: Mon 12 Dec 2022 09:33:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31205
IP address blocks: 195.16.96.0/19 maxlen: 24
188.170.247.0/24 maxlen: 24
83.149.50.0/24 maxlen: 24
83.149.49.0/24 maxlen: 24
83.149.48.0/24 maxlen: 24
83.149.51.0/24 maxlen: 24
178.176.48.0/24 maxlen: 24
193.201.228.0/22 maxlen: 24
83.169.252.0/22 maxlen: 22
83.169.248.0/22 maxlen: 22
85.26.226.0/24 maxlen: 24
85.26.224.0/24 maxlen: 24
85.26.230.0/24 maxlen: 24
85.26.229.0/24 maxlen: 24
85.26.228.0/24 maxlen: 24
85.26.231.0/24 maxlen: 24
85.26.227.0/24 maxlen: 24
188.162.0.0/16 maxlen: 24
46.232.202.0/23 maxlen: 23
46.232.200.0/24 maxlen: 24
185.210.142.0/23 maxlen: 23
185.210.140.0/23 maxlen: 23
178.176.240.0/22 maxlen: 22
178.176.244.0/22 maxlen: 22
78.25.92.0/23 maxlen: 23
78.25.94.0/23 maxlen: 23
37.29.86.0/23 maxlen: 23
188.170.240.0/22 maxlen: 22
31.173.240.0/23 maxlen: 23
195.5.128.0/19 maxlen: 24
128.204.66.0/24 maxlen: 24
31.173.242.0/23 maxlen: 23
128.204.67.0/24 maxlen: 24
31.173.244.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:ae:3b:7c:31:b4:f8:0f:ca:0e:90:4f:5a:0c:e1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 12 09:33:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=27740729eacb63abb9475f2c400bdfbd24928911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:89:a7:bb:e6:7c:25:ac:29:21:b0:88:79:f9:
b2:47:02:b9:74:78:b5:2f:c8:56:2b:93:c4:4f:01:
cd:30:f8:11:b4:b0:60:dc:d8:8f:31:83:29:83:96:
6f:82:94:7f:fc:c9:2f:f5:f1:cf:46:f5:eb:61:96:
d9:14:68:60:7d:a2:4d:6e:e3:18:58:08:6a:30:7b:
3c:81:6e:dd:77:94:66:48:26:0d:95:3d:ef:8f:9c:
6d:2f:1a:f6:89:77:d2:a2:39:73:32:3d:39:ff:c6:
8b:7f:ae:6f:1d:5a:e2:78:5e:4f:9c:f2:66:7e:ef:
16:21:7a:ea:55:33:71:24:3a:54:df:78:91:3e:93:
20:0f:7d:ef:f5:e8:35:7f:55:3c:71:f3:5c:b9:53:
c4:6e:fd:88:3f:14:00:91:61:8f:8f:97:64:30:48:
f4:66:9f:bb:d8:79:d5:4e:42:1f:60:b8:c7:17:ea:
ea:d5:7e:4e:12:c4:a4:3e:07:fe:54:2a:b1:43:c6:
e0:89:2c:32:e5:81:a5:7f:fc:72:c4:b5:74:77:e3:
33:ce:6b:0e:24:81:e1:74:47:93:ec:f4:35:a1:ef:
7e:01:77:d0:fa:d3:8e:0f:e3:ab:5a:da:69:75:14:
cb:e5:79:23:98:ae:a1:50:72:52:71:8b:18:8a:7d:
5a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:74:07:29:EA:CB:63:AB:B9:47:5F:2C:40:0B:DF:BD:24:92:89:11
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/J3QHKerLY6u5R18sQAvfvSSSiRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.240.0/21
37.29.86.0/23
46.232.200.0/24
46.232.202.0/23
78.25.92.0/22
83.149.48.0/22
83.169.248.0/21
85.26.224.0/24
85.26.226.0-85.26.231.255
128.204.66.0/23
178.176.48.0/24
178.176.240.0/21
185.210.140.0/22
188.162.0.0/16
188.170.240.0/22
188.170.247.0/24
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
Signature Algorithm: sha256WithRSAEncryption
1e:f1:cd:d1:ce:df:7d:2a:81:bc:b5:ef:9e:80:39:d0:53:71:
73:33:25:1e:e7:5a:d0:9f:20:d1:46:e8:33:87:53:cd:44:88:
7c:50:04:01:8a:d3:39:be:a2:1d:83:35:db:b0:32:dd:36:94:
1e:28:ed:cd:09:9a:f8:48:2d:c2:35:59:b2:a2:7e:7f:69:c5:
45:67:55:4a:db:03:a8:d4:dd:bd:fe:f5:3e:81:35:1b:32:a2:
3c:0e:fc:76:a1:98:7c:7d:b5:f3:51:1f:99:ac:8a:04:ca:c9:
9e:ad:80:9b:f6:8e:f3:67:a8:99:53:10:59:82:15:06:48:35:
31:04:17:84:57:07:72:5d:56:e2:a7:ce:19:0d:a3:b2:2a:2b:
4d:5f:a2:29:2d:51:98:c4:e6:26:e0:55:92:99:ca:58:13:b7:
19:a7:99:e2:53:06:5d:55:7b:4b:3d:3d:f8:1b:ea:bb:d9:d7:
48:e7:25:c4:f9:0d:35:8c:3a:77:10:8f:fe:1f:4d:48:6a:64:
77:9c:d5:ab:28:3c:15:41:45:0f:59:bf:87:10:83:05:3d:b8:
cc:5b:62:90:2a:8e:e4:52:c3:7a:fd:0a:28:27:6f:76:ee:f7:
af:fb:2e:f9:a0:47:b6:f3:29:ca:b8:9d:e9:22:03:9c:b1:8a:
40:54:b6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:31:18 2025 by rpki-client