Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/KZ6RcjWQvfkvMGSpwjWrDtW5bGc.roa
File: KZ6RcjWQvfkvMGSpwjWrDtW5bGc.roa (raw, json)
Hash identifier: oOuvr39RDP0onCW/xncIN6RhPMg4XALH7HyM6VZJFV4=
Subject key identifier: 29:9E:91:72:35:90:BD:F9:2F:30:64:A9:C2:35:AB:0E:D5:B9:6C:67
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018505A42A681F83D884D95ADABD473E96EB
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/KZ6RcjWQvfkvMGSpwjWrDtW5bGc.roa
Signing time: Mon 12 Dec 2022 09:22:02 +0000
ROA not before: Mon 12 Dec 2022 09:22:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31224
IP address blocks: 195.16.96.0/19 maxlen: 24
178.176.104.0/21 maxlen: 21
83.149.32.0/22 maxlen: 22
83.149.36.0/22 maxlen: 22
83.149.34.0/24 maxlen: 24
83.149.37.0/24 maxlen: 24
83.149.39.0/24 maxlen: 24
195.78.116.0/23 maxlen: 24
85.26.192.0/22 maxlen: 22
193.201.228.0/22 maxlen: 24
178.178.88.0/22 maxlen: 22
178.178.92.0/22 maxlen: 22
31.173.96.0/24 maxlen: 24
31.173.97.0/24 maxlen: 24
31.173.102.0/24 maxlen: 24
31.173.99.0/24 maxlen: 24
31.173.103.0/24 maxlen: 24
31.173.100.0/24 maxlen: 24
31.173.100.0/23 maxlen: 23
31.173.101.0/24 maxlen: 24
178.176.112.0/24 maxlen: 24
178.176.113.0/24 maxlen: 24
83.169.216.0/24 maxlen: 24
188.162.0.0/16 maxlen: 24
31.173.123.0/24 maxlen: 24
31.173.122.0/24 maxlen: 24
31.173.121.0/24 maxlen: 24
31.173.125.0/24 maxlen: 24
31.173.120.0/24 maxlen: 24
31.173.124.0/24 maxlen: 24
31.173.127.0/24 maxlen: 24
31.173.126.0/24 maxlen: 24
78.25.88.0/22 maxlen: 22
46.229.132.0/22 maxlen: 22
195.5.128.0/19 maxlen: 24
128.204.68.0/24 maxlen: 24
128.204.69.0/24 maxlen: 24
37.29.44.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:a4:2a:68:1f:83:d8:84:d9:5a:da:bd:47:3e:96:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 12 09:22:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=299e91723590bdf92f3064a9c235ab0ed5b96c67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2e:ef:e2:b7:4a:34:86:6f:dc:64:1b:5c:3a:
65:36:96:c6:12:1e:e4:5c:2c:90:c3:83:78:3b:5a:
17:37:bd:ca:fa:e0:a3:29:aa:26:b6:c9:a9:2d:48:
42:66:fb:c7:e7:a8:3f:94:38:ca:70:c6:d0:0d:41:
be:0f:bc:e5:7f:5f:10:18:35:40:91:db:63:69:e6:
74:94:e7:ff:34:15:c2:c6:4a:ce:c0:30:a4:5d:d3:
ec:90:7b:6d:23:88:12:4e:e9:0c:08:69:47:14:19:
80:88:18:ff:98:e5:ea:69:44:f9:3a:5c:07:08:3c:
48:9b:55:0c:2f:3e:d3:23:17:aa:b1:bb:9c:60:24:
22:40:b3:e8:da:1c:97:ea:9e:5c:3c:a8:ef:76:d8:
b5:56:3b:db:50:6a:1d:1e:b6:20:d1:f1:76:dd:c0:
b2:2a:62:b6:5e:5b:08:0b:08:3e:9c:56:2f:4a:f8:
49:78:86:47:91:86:fa:06:d6:dc:fb:cf:6d:c2:0d:
f7:5d:8b:b4:65:58:12:cb:07:92:9a:e2:b4:e0:61:
a6:67:cd:d9:c4:3c:e0:36:3f:62:66:02:c6:13:95:
96:6c:53:f7:64:da:02:e8:07:76:eb:fc:c1:30:11:
b4:3e:81:49:ed:3f:ea:6d:fe:f5:69:47:1f:fb:c7:
a3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:9E:91:72:35:90:BD:F9:2F:30:64:A9:C2:35:AB:0E:D5:B9:6C:67
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/KZ6RcjWQvfkvMGSpwjWrDtW5bGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.96.0/23
31.173.99.0-31.173.103.255
31.173.120.0/21
37.29.44.0/22
46.229.132.0/22
78.25.88.0/22
83.149.32.0/21
83.169.216.0/24
85.26.192.0/22
128.204.68.0/23
178.176.104.0-178.176.113.255
178.178.88.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
Signature Algorithm: sha256WithRSAEncryption
76:bf:b1:58:c3:32:ce:64:fc:54:c1:f3:29:08:d0:00:2d:c4:
21:c4:41:52:90:22:f6:02:b7:b6:f0:60:6c:3c:7a:fa:32:4a:
ea:43:20:ec:e0:ff:82:f0:68:a6:85:e8:c1:a4:6f:06:c9:c6:
a3:b0:2a:f1:ad:59:14:fe:fe:12:c7:74:5e:c3:10:09:22:97:
c8:20:8f:cc:68:39:27:07:ec:ad:52:66:e8:85:2d:bf:8f:44:
ef:b3:e3:a8:73:43:9d:0d:6c:39:6f:2c:88:67:a6:25:ff:fa:
8b:30:43:98:e1:b2:53:0b:da:74:25:8d:4b:91:22:95:69:e0:
a6:81:51:8e:b3:c4:27:86:7e:4f:a2:4a:9b:cb:93:5f:54:d0:
2f:19:ff:52:99:93:a1:17:60:d7:74:51:60:41:a2:ee:ee:16:
2a:72:f8:14:ee:22:78:08:cc:11:0b:f8:bb:0a:c1:58:bc:17:
04:85:74:4e:67:b9:de:85:d6:84:9c:e4:ab:5c:2a:9d:78:fd:
4a:be:b4:ee:41:80:86:28:31:62:d7:40:9a:3d:64:19:4e:7f:
18:31:ad:54:4f:c6:90:c0:d8:46:a8:30:26:6d:24:50:b1:68:
68:64:ef:2f:7f:cf:ea:64:5a:d5:ae:d8:cc:d0:02:6d:8a:9d:
00:91:63:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:33:53 2025 by rpki-client