Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/bEFhYHlocxjcJ9Hp1rnXhBFRmTk.roa
File: bEFhYHlocxjcJ9Hp1rnXhBFRmTk.roa (raw, json)
Hash identifier: m8VGzBIO1QRqI6nEzowhJ72ZSpfr1kvjirP4JqSM9Do=
Subject key identifier: 6C:41:61:60:79:68:73:18:DC:27:D1:E9:D6:B9:D7:84:11:51:99:39
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01856ED4DE97E5113709EDA8EC15848AA71A
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/bEFhYHlocxjcJ9Hp1rnXhBFRmTk.roa
Signing time: Sun 01 Jan 2023 19:35:22 +0000
ROA not before: Sun 01 Jan 2023 19:35:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12396
IP address blocks: 212.109.175.0/24 maxlen: 24
195.191.18.0/23 maxlen: 24
195.49.192.0/21 maxlen: 21
194.247.168.0/23 maxlen: 23
91.219.124.0/22 maxlen: 22
195.8.34.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:de:97:e5:11:37:09:ed:a8:ec:15:84:8a:a7:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 19:35:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c41616079687318dc27d1e9d6b9d78411519939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:17:b5:d9:64:fb:05:e8:23:a2:69:7a:45:61:
b0:1b:e6:50:33:95:15:e0:e8:b5:5c:1d:32:ec:e2:
01:10:3f:62:c1:41:f4:e9:a0:3a:ef:d8:71:76:64:
88:bd:68:2f:93:67:58:88:0e:12:83:e8:d2:b5:36:
e0:3a:69:4f:ee:74:b0:ad:28:0b:64:3c:6e:c4:0a:
ea:7d:ea:37:4d:c8:cc:b9:29:c4:eb:3f:83:f6:64:
17:c9:c6:71:c8:51:30:85:d7:a5:db:e0:54:74:36:
1b:d7:83:30:fe:b0:c6:6a:5d:6f:00:2f:b7:0e:d5:
03:b3:47:96:c1:3b:6a:83:01:8a:81:17:49:87:c1:
83:2a:f0:fb:55:09:66:fa:0c:f7:67:32:0c:b4:bc:
04:ed:9c:17:62:52:25:3f:57:8a:e0:af:47:cf:88:
6d:fb:17:07:c3:01:7a:20:36:61:8e:90:27:ec:b4:
36:c0:16:4b:56:41:d7:57:2f:cb:1c:43:91:d6:60:
76:14:ff:bf:f3:ab:53:5c:75:ef:68:56:51:68:77:
89:cd:6c:11:52:79:c9:72:03:d6:b2:d1:28:36:48:
f9:b9:56:62:6b:b0:09:e4:1e:36:9e:05:00:e6:51:
79:8d:ab:49:16:9c:82:f6:a5:61:40:1d:7f:9d:64:
21:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:41:61:60:79:68:73:18:DC:27:D1:E9:D6:B9:D7:84:11:51:99:39
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/bEFhYHlocxjcJ9Hp1rnXhBFRmTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.124.0/22
194.247.168.0/23
195.8.34.0/23
195.49.192.0/21
195.191.18.0/23
212.109.175.0/24
Signature Algorithm: sha256WithRSAEncryption
38:51:aa:84:5a:4c:9a:df:6a:19:58:d4:37:b1:20:8e:c5:68:
12:53:33:ae:b2:7b:34:01:83:c3:ef:f9:9f:40:30:3d:16:69:
1d:1c:4a:75:48:da:d7:cb:42:7e:ad:b4:31:d1:ba:f3:48:8a:
23:bb:56:ad:fe:0a:cb:4b:6a:1f:2d:96:4b:b6:2c:7f:3d:8d:
85:e8:68:9a:75:86:f4:c1:0d:fc:a3:82:85:dc:74:b9:5a:6a:
29:10:27:2f:1f:5c:08:ea:45:c0:82:7d:1c:f5:79:54:aa:ce:
f3:8d:4d:1f:d4:12:b5:32:b5:75:4f:fc:3c:ba:d9:6b:db:c4:
88:86:ee:27:44:1c:53:3c:a0:a7:22:a3:8c:29:d9:c1:62:41:
e6:b2:56:59:70:89:01:fb:74:e9:e2:37:00:90:65:dc:4b:9d:
18:fb:cf:71:6b:ea:8a:d3:ba:9d:23:ee:77:34:8d:5b:5a:09:
64:4f:98:fd:8d:55:2c:1c:e2:b6:f6:99:ac:db:37:31:f4:04:
cb:81:59:f4:d9:81:85:1f:3f:89:53:37:02:b7:ae:21:c7:4d:
6e:08:71:7b:27:06:9b:13:aa:87:3d:ba:a5:bd:63:d7:88:48:
09:6e:e7:7b:7a:6a:15:c6:8d:bd:07:17:d3:db:c0:49:d6:0b:
f8:66:58:d3
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYVu1N6X5RE3Ce2o7BWEiqcaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjMwMTAxMTkzNTIyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzQxNjE2MDc5Njg3MzE4ZGMyN2QxZTlkNmI5ZDc4NDExNTE5OTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRe12WT7Begjoml6RWGwG+ZQM5UV
4Oi1XB0y7OIBED9iwUH06aA679hxdmSIvWgvk2dYiA4Sg+jStTbgOmlP7nSwrSgL
ZDxuxArqfeo3TcjMuSnE6z+D9mQXycZxyFEwhdel2+BUdDYb14Mw/rDGal1vAC+3
DtUDs0eWwTtqgwGKgRdJh8GDKvD7VQlm+gz3ZzIMtLwE7ZwXYlIlP1eK4K9Hz4ht
+xcHwwF6IDZhjpAn7LQ2wBZLVkHXVy/LHEOR1mB2FP+/86tTXHXvaFZRaHeJzWwR
UnnJcgPWstEoNkj5uVZia7AJ5B42ngUA5lF5jatJFpyC9qVhQB1/nWQh8QIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFGxBYWB5aHMY3CfR6da514QRUZk5MB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvYkVGaFlIbG9jeGpjSjlIcDFyblhoQkZSbVRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCW9t8AwQB
wveoAwQBwwgiAwQDwzHAAwQBw78SAwQA1G2vMA0GCSqGSIb3DQEBCwUAA4IBAQA4
UaqEWkya32oZWNQ3sSCOxWgSUzOusns0AYPD7/mfQDA9FmkdHEp1SNrXy0J+rbQx
0brzSIoju1at/grLS2ofLZZLtix/PY2F6GiadYb0wQ38o4KF3HS5WmopECcvH1wI
6kXAgn0c9XlUqs7zjU0f1BK1MrV1T/w8utlr28SIhu4nRBxTPKCnIqOMKdnBYkHm
slZZcIkB+3Tp4jcAkGXcS50Y+89xa+qK07qdI+53NI1bWglkT5j9jVUsHOK29pms
2zcx9ATLgVn02YGFHz+JUzcCt64hx01uCHF7JwabE6qHPbqlvWPXiEgJbud7emoV
xo29BxfT28BJ1gv4ZljT
-----END CERTIFICATE-----
Generated at Tue Apr 8 04:43:32 2025 by rpki-client