Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/S2WdHfyD5kGq4-uW7_5habEEzYo.roa
File: S2WdHfyD5kGq4-uW7_5habEEzYo.roa (raw, json)
Hash identifier: AMx1sF5wRqB7Q/MjOrrmYpoG7APgvqnVRIkpO3t/xGU=
Subject key identifier: 4B:65:9D:1D:FC:83:E6:41:AA:E3:EB:96:EF:FE:61:69:B1:04:CD:8A
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0185053F7181DA2712F86416C1926BF1BD84
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/S2WdHfyD5kGq4-uW7_5habEEzYo.roa
Signing time: Mon 12 Dec 2022 07:32:01 +0000
ROA not before: Mon 12 Dec 2022 07:32:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24866
IP address blocks: 212.14.160.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.162.0.0/16 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
212.119.160.0/19 maxlen: 24
178.176.229.0/24 maxlen: 24
178.176.228.0/24 maxlen: 24
178.176.227.0/24 maxlen: 24
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
212.44.64.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:3f:71:81:da:27:12:f8:64:16:c1:92:6b:f1:bd:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 12 07:32:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b659d1dfc83e641aae3eb96effe6169b104cd8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ab:97:8d:d8:4d:53:11:3a:f8:7d:1b:6d:7c:
df:10:1f:bb:80:fe:6e:bb:e8:ea:0f:a8:f5:b7:8d:
23:6b:37:e7:bf:0e:5a:df:c3:9e:1f:2d:7b:b6:c9:
86:84:97:e4:6c:b5:f2:f7:24:56:cf:28:1a:d3:53:
ff:58:9f:d1:95:9d:08:d5:80:d9:4b:be:9b:1d:82:
e3:1a:2a:44:cb:49:35:9d:8b:ce:36:5d:5f:4a:49:
e2:79:86:49:0f:5b:84:ee:bd:50:b7:cf:e2:2f:71:
f7:5f:ba:1a:62:1c:d1:6b:d3:8d:5e:fa:dd:69:3a:
cc:bf:d2:1c:02:37:ac:77:5b:6f:a3:d2:29:2b:f4:
9c:54:33:4a:34:2c:1c:65:90:6e:4d:f3:f3:fe:c9:
2f:30:3b:da:9f:52:ee:1b:b2:cb:ea:96:57:92:f6:
17:3f:63:ab:50:2a:4f:a7:71:08:1f:a9:01:84:af:
7f:d0:b9:a9:69:f7:0f:31:6d:72:57:6c:6c:97:5f:
a3:ff:1c:d3:e9:68:70:47:1a:84:27:db:a4:de:56:
c7:f6:11:27:d4:a7:bc:e3:74:33:07:90:6b:8c:03:
3a:c4:7e:bb:1f:ae:8c:d5:40:f7:9f:2a:be:7e:c6:
68:3f:dd:f1:a1:56:2c:6a:d0:1b:41:38:d1:eb:66:
31:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:65:9D:1D:FC:83:E6:41:AA:E3:EB:96:EF:FE:61:69:B1:04:CD:8A
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/S2WdHfyD5kGq4-uW7_5habEEzYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.176.227.0-178.176.229.255
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
Signature Algorithm: sha256WithRSAEncryption
26:49:f8:b6:58:c6:07:9b:30:37:9f:5b:ed:73:d3:c7:76:c1:
e9:68:16:1b:69:56:66:08:50:97:a6:54:0c:45:73:1e:df:cf:
7d:3a:54:45:9c:7a:8c:8b:92:48:5c:d5:2a:6d:3e:ab:f7:1a:
61:59:17:df:5e:aa:62:75:bc:fa:ee:28:dd:4d:56:10:3a:02:
33:c3:6e:6b:76:36:f4:83:c7:b2:b2:73:11:07:bd:66:d2:3e:
8e:c7:ca:95:27:78:39:4c:10:e4:80:cd:d6:f5:69:4e:9d:59:
0d:95:65:dd:6c:5a:d2:4a:e0:f8:07:22:e2:b5:db:69:03:66:
e9:dc:1d:a5:96:bf:20:47:88:47:23:e2:e3:8c:49:fd:e4:0e:
a0:14:4c:ef:30:fc:66:0a:af:ef:81:91:01:7b:1a:de:19:3d:
38:70:73:bd:78:33:a6:3b:7c:77:31:09:da:40:a9:5a:99:c6:
99:9e:a7:47:40:8c:61:f6:f3:f5:af:cb:57:31:79:0b:19:b6:
54:86:5f:48:4a:4e:5c:dc:f6:e5:6a:93:fe:c3:b9:bb:10:f3:
46:6f:2f:e6:82:78:7e:1e:65:ff:c4:f1:01:f1:34:c9:14:7d:
ba:07:ed:f4:1b:c9:bb:b8:79:1c:18:43:24:7a:47:eb:7a:38:
4a:c9:ac:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:38:28 2025 by rpki-client