Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/KGmZ3dz-4m-VfumE3ZAN6LHvEIg.roa
File: KGmZ3dz-4m-VfumE3ZAN6LHvEIg.roa (raw, json)
Hash identifier: ZjymReWQ46F5PPdewunBLRTctUkfYTgWGX6JIyrvD+Q=
Subject key identifier: 28:69:99:DD:DC:FE:E2:6F:95:7E:E9:84:DD:90:0D:E8:B1:EF:10:88
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018505911647BEE39DFF4F9165981032541B
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/KGmZ3dz-4m-VfumE3ZAN6LHvEIg.roa
Signing time: Mon 12 Dec 2022 09:01:12 +0000
ROA not before: Mon 12 Dec 2022 09:01:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47395
IP address blocks: 193.201.228.0/22 maxlen: 24
109.188.0.0/17 maxlen: 17
94.25.128.0/18 maxlen: 18
212.14.160.0/19 maxlen: 24
188.162.0.0/16 maxlen: 24
195.230.64.0/19 maxlen: 24
195.16.96.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.5.128.0/19 maxlen: 24
195.78.116.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:91:16:47:be:e3:9d:ff:4f:91:65:98:10:32:54:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 12 09:01:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=286999dddcfee26f957ee984dd900de8b1ef1088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c5:4d:b0:bc:4a:ad:87:ae:56:98:9a:54:b2:
b7:d3:34:cf:d7:84:32:8c:d2:ed:1a:31:39:41:36:
af:1d:e7:41:27:0f:a8:d7:e9:8b:77:50:d5:7e:94:
d2:27:6d:3c:b0:13:9e:92:ba:db:2b:18:b4:4e:1d:
d0:44:60:5a:78:61:54:7f:6e:a9:8a:9b:4e:f1:89:
20:e2:41:f6:e7:66:7f:21:36:37:42:e6:8f:83:65:
53:1e:1d:45:1a:f7:cc:a8:30:fc:02:fa:e2:e5:7b:
58:31:63:22:7c:05:42:06:31:4d:cb:3d:fa:d6:f6:
47:8a:da:12:40:34:19:cd:14:c6:2b:cf:9e:82:54:
0b:22:f7:e7:58:0c:ef:b2:02:ce:05:e0:69:41:16:
40:26:b1:72:f1:0f:45:f7:71:c7:61:35:fd:23:07:
1f:97:fb:3c:9f:a2:46:55:fd:90:6c:5e:c1:51:13:
dd:e3:f6:24:03:22:07:f4:b0:fd:32:24:fd:97:04:
07:63:df:fe:3e:65:4a:3c:18:0e:8c:5c:4e:39:8e:
d5:89:6d:fb:7f:21:18:6c:18:76:de:cd:72:0f:87:
7b:eb:db:74:91:bd:53:44:31:77:b0:39:a2:f5:4f:
c2:36:09:1e:6b:41:cd:1e:d3:9f:8a:2f:db:47:19:
f1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:69:99:DD:DC:FE:E2:6F:95:7E:E9:84:DD:90:0D:E8:B1:EF:10:88
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/KGmZ3dz-4m-VfumE3ZAN6LHvEIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.25.128.0/18
109.188.0.0/17
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
Signature Algorithm: sha256WithRSAEncryption
73:42:1a:35:52:58:85:82:de:db:8b:53:8d:95:6a:61:e0:b0:
36:f1:ee:ea:59:92:4d:ba:ad:84:2d:e8:3f:43:fd:5a:ee:a1:
8b:b5:5a:49:f3:21:35:59:c1:7a:dc:f7:e8:a7:82:e8:c2:db:
86:2a:a2:f6:51:d6:7b:4a:f2:57:4c:a0:88:40:cb:e6:bf:65:
f7:9f:21:1d:fc:74:de:2f:30:1c:26:3e:51:2f:61:6a:b4:d3:
3c:63:87:97:1e:4f:6c:64:1e:6e:d1:10:b6:14:7a:36:fd:3c:
94:0d:ce:da:ee:91:9b:b2:11:3b:47:48:11:4a:ec:d1:c4:df:
82:36:6d:7b:90:2a:67:d9:11:46:a3:cc:60:a8:df:10:d0:41:
19:95:15:bf:98:30:16:b1:a6:9c:4e:13:b0:c3:ba:e7:e2:58:
e8:f4:12:88:29:b0:87:ce:e3:4c:cd:ff:0e:a8:78:26:ca:4c:
be:f7:bf:d3:67:ac:26:e5:e1:ad:29:7b:25:b2:86:2f:9f:34:
9d:6c:9c:73:89:1c:9e:9b:9d:0f:56:0a:04:60:55:f1:bb:27:
b5:b2:5b:be:3d:96:31:de:a9:d8:2e:bf:74:e4:1a:c2:4d:c9:
ee:86:ad:a1:94:c1:d5:61:d3:4e:a8:6f:60:63:4a:86:4b:6c:
62:8a:e5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:37:52 2025 by rpki-client