Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/OYTtIdmNhVTsyl9tmI-n0nlngbE.roa
File: OYTtIdmNhVTsyl9tmI-n0nlngbE.roa (raw, json)
Hash identifier: X3MnM78finGI2LJAGLbT5BlZmLqTEuZhrREM01PQzSA=
Subject key identifier: 39:84:ED:21:D9:8D:85:54:EC:CA:5F:6D:98:8F:A7:D2:79:67:81:B1
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184D29A74FEEB8881AE13D77E5F49DCAE0D
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/OYTtIdmNhVTsyl9tmI-n0nlngbE.roa
Signing time: Fri 02 Dec 2022 11:30:48 +0000
ROA not before: Fri 02 Dec 2022 11:30:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8263
IP address blocks: 109.188.0.0/16 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
79.171.8.0/21 maxlen: 24
81.24.128.0/20 maxlen: 24
195.78.116.0/23 maxlen: 24
78.41.100.0/22 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
83.169.192.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
94.25.128.0/17 maxlen: 24
93.153.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
109.74.112.0/20 maxlen: 24
178.176.224.0/24 maxlen: 24
185.210.140.0/22 maxlen: 24
178.176.226.0/24 maxlen: 24
178.176.225.0/24 maxlen: 24
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
212.44.64.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d2:9a:74:fe:eb:88:81:ae:13:d7:7e:5f:49:dc:ae:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 2 11:30:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3984ed21d98d8554ecca5f6d988fa7d2796781b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e4:29:49:ff:77:74:f4:bc:5b:16:ba:b3:d4:
22:58:34:32:81:c6:a1:99:3f:90:8c:f2:da:d4:db:
32:ec:49:51:89:dc:f0:23:bd:85:37:d4:ad:1c:49:
73:6d:93:0e:8f:91:bf:65:2b:9d:81:9a:59:cf:41:
4d:c1:98:45:53:d3:c9:9b:67:e2:ae:d4:d6:35:a4:
38:04:3b:21:37:db:5c:97:70:be:c0:a7:05:3c:84:
ee:75:a7:4b:8f:17:0d:a4:05:01:61:1a:c1:70:f7:
aa:36:77:18:83:18:35:ad:68:39:38:66:2b:99:3a:
2f:f1:7a:7e:d0:31:88:60:4d:f1:99:bf:bf:73:4b:
4e:c2:69:f3:2f:cf:39:de:9d:54:5c:a8:56:dc:6a:
a9:7e:c3:fe:40:27:46:ba:e1:54:04:01:5f:50:1c:
be:1c:cd:65:50:e6:4f:28:ec:3f:55:6c:e1:1f:97:
73:53:af:b9:44:9b:2c:5d:33:84:4c:09:ba:1c:e8:
34:f2:f0:45:2a:98:06:fd:fe:15:44:b5:60:c4:ff:
f3:73:fa:5a:75:37:15:19:c4:4a:77:e4:7d:e8:22:
e4:56:a5:df:7d:c8:a0:be:76:2e:04:0d:6f:c6:9c:
0a:68:55:c3:39:30:7e:b6:7d:16:fd:f1:55:20:11:
27:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:84:ED:21:D9:8D:85:54:EC:CA:5F:6D:98:8F:A7:D2:79:67:81:B1
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/OYTtIdmNhVTsyl9tmI-n0nlngbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.224.0-178.176.226.255
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
54:2d:7d:60:b1:e0:77:33:cf:a0:b7:b0:ae:07:8c:38:9c:10:
75:04:d9:3c:a7:66:0e:ce:f1:a1:2b:71:d8:45:42:a8:30:a4:
f1:ec:a4:1b:94:d9:ab:c8:b0:6f:8f:c2:53:61:ed:cc:5b:96:
fa:36:ad:6c:eb:c4:ec:cd:42:50:4c:82:90:55:dc:8b:a1:43:
ca:35:66:28:d3:36:f2:f7:70:2b:a9:8f:75:83:af:d6:a5:90:
6b:87:68:2a:6a:d4:bf:f4:f1:48:1a:36:0b:0b:50:3e:ff:7b:
a0:e5:14:4a:1c:7f:0e:a2:a1:ab:cc:16:2e:3f:9e:bb:25:03:
99:27:f9:2f:3a:0f:bc:29:5d:78:fa:c8:cc:53:a7:fc:f9:79:
d2:32:3d:05:2f:73:27:5a:06:de:53:d9:47:29:6c:72:43:d9:
74:17:29:4f:7a:19:ef:6c:d8:51:d5:56:ca:3a:45:87:05:c4:
29:52:e0:3a:96:87:8e:41:37:dd:b1:1a:12:5a:a2:79:3f:ca:
49:d4:2f:ba:98:62:2f:57:d5:2b:10:59:45:79:14:d8:25:3a:
41:0e:7e:a2:f3:3d:13:79:66:65:8b:ac:7f:dc:ea:2c:f1:f5:
88:a4:b3:14:0c:1b:3a:70:34:fa:b9:90:74:d7:7d:92:9d:bb:
2e:dc:32:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:46:08 2025 by rpki-client