Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ToSZmWYUxb-pHVISRsX0cLwW6gw.roa
File: ToSZmWYUxb-pHVISRsX0cLwW6gw.roa (raw, json)
Hash identifier: ed0Egc/JYfXyBT3chVRk8zuh5clXuRTxQJJWG9YJP08=
Subject key identifier: 4E:84:99:99:66:14:C5:BF:A9:1D:52:12:46:C5:F4:70:BC:16:EA:0C
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0185053F79196898A4C6B366E7C56AC3993C
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ToSZmWYUxb-pHVISRsX0cLwW6gw.roa
Signing time: Mon 12 Dec 2022 07:32:03 +0000
ROA not before: Mon 12 Dec 2022 07:32:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35298
IP address blocks: 31.173.176.0/20 maxlen: 20
212.14.160.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.162.0.0/16 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
212.119.160.0/19 maxlen: 24
195.78.116.0/23 maxlen: 24
78.41.100.0/22 maxlen: 22
193.201.228.0/22 maxlen: 24
37.29.76.0/22 maxlen: 22
212.44.64.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
178.176.154.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:3f:79:19:68:98:a4:c6:b3:66:e7:c5:6a:c3:99:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 12 07:32:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4e8499996614c5bfa91d521246c5f470bc16ea0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7f:86:7d:d9:72:7a:d2:db:a7:f6:8c:45:d3:
11:0c:d1:74:0b:6f:f6:1f:36:1a:ab:87:77:34:84:
c1:de:4a:b5:dd:07:ae:c2:39:ca:b3:f2:08:fc:bc:
a7:e2:8b:b5:a7:a2:86:73:a9:0b:9c:d9:cf:9e:3b:
c2:8a:36:58:b6:53:be:8b:c4:9b:67:54:0b:52:f1:
06:3b:28:a2:67:b2:f2:54:fa:1e:11:ef:18:42:d9:
ae:52:1c:0e:8f:9f:8c:bc:ab:40:20:ae:d8:0c:3d:
1b:c4:28:a4:2e:a7:c0:fd:d7:dd:6a:48:4f:c8:fa:
3c:c4:3c:2a:9e:d1:99:ef:13:a3:0d:65:46:15:5c:
85:94:a1:b0:9e:ed:e6:78:dd:9d:16:de:f4:be:11:
e1:47:74:18:6d:44:53:65:41:7f:54:90:30:ce:97:
87:19:04:5a:0a:bd:3b:a3:e1:60:90:b0:18:34:9a:
b0:a4:fe:81:01:b0:80:3c:53:7a:38:61:d9:6f:2b:
9a:6b:11:c2:71:c7:8b:37:39:31:dd:de:b9:03:7d:
3b:54:5f:7a:2d:6e:37:99:d1:b5:c7:f4:b2:5e:88:
5d:10:7f:5d:85:a0:d2:8f:07:72:d2:02:f6:74:e0:
96:a6:a0:0d:c6:65:6e:cb:6b:99:cd:05:04:05:49:
bd:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:84:99:99:66:14:C5:BF:A9:1D:52:12:46:C5:F4:70:BC:16:EA:0C
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ToSZmWYUxb-pHVISRsX0cLwW6gw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.176.0/20
37.29.76.0/22
78.41.100.0/22
178.176.154.0/23
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
Signature Algorithm: sha256WithRSAEncryption
2a:fc:85:b5:f2:2d:8d:fd:eb:c7:9b:e6:3d:82:76:2d:8f:11:
11:f3:5d:03:e1:e1:74:6f:0b:ae:1d:37:70:60:e4:69:b2:1c:
5e:03:4e:47:5d:e3:40:c9:dd:ff:d9:79:4d:89:03:0c:03:b5:
13:b5:23:67:0b:ab:f7:95:39:b7:ac:55:80:ee:2d:cc:ac:b5:
d5:18:28:7b:c6:91:87:a4:b8:86:40:96:bb:97:33:87:ed:7a:
82:b7:4f:87:65:fb:27:34:5d:68:e5:e3:f1:b5:52:b7:2d:6b:
b1:3c:e5:a9:6a:02:8b:82:22:43:31:e5:d0:62:ce:e2:f3:7e:
ba:2a:3d:68:e5:95:51:4c:9e:ac:ae:25:e2:04:27:46:98:d8:
03:95:fe:aa:e0:00:fe:35:33:4b:74:27:9a:7a:cd:c1:63:d0:
94:d5:94:0d:fc:33:1c:04:51:39:ff:32:a2:04:42:15:b6:5c:
b6:48:f1:4a:39:c1:4e:ef:d5:71:85:27:96:25:4b:23:f6:0e:
a0:57:ff:b1:4f:31:0a:ab:75:14:a5:c5:21:9f:2d:df:e7:c8:
e4:6c:42:63:f4:68:74:ff:cf:88:a3:65:9e:1c:64:f0:0a:65:
ad:ad:d8:36:f4:4b:8b:fc:5d:34:a5:90:8d:df:ff:53:b1:b8:
d1:5e:ac:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:43:35 2025 by rpki-client