Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/c2mxQ1QMWOT-JjFzhTTU1_Q2HaY.roa
File: c2mxQ1QMWOT-JjFzhTTU1_Q2HaY.roa (raw, json)
Hash identifier: NHGbOdNkaSURE36RY18ndM23O1i8PGbmpNBKh/hDteg=
Subject key identifier: 73:69:B1:43:54:0C:58:E4:FE:26:31:73:85:34:D4:D7:F4:36:1D:A6
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0186015A6A37FE6506697A8385F4F915D55E
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/c2mxQ1QMWOT-JjFzhTTU1_Q2HaY.roa
Signing time: Mon 30 Jan 2023 06:25:48 +0000
ROA not before: Mon 30 Jan 2023 06:25:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12714
IP address blocks: 128.140.164.0/24 maxlen: 24
128.140.166.0/24 maxlen: 24
217.19.104.0/23 maxlen: 23
195.225.160.0/24 maxlen: 24
195.225.161.0/24 maxlen: 24
195.225.162.0/24 maxlen: 24
195.225.163.0/24 maxlen: 24
212.13.26.0/24 maxlen: 24
194.28.218.0/24 maxlen: 24
194.28.216.0/24 maxlen: 24
109.170.106.0/24 maxlen: 24
109.75.240.0/24 maxlen: 24
109.170.68.0/24 maxlen: 24
109.75.249.0/24 maxlen: 24
109.106.213.0/24 maxlen: 24
109.106.214.0/24 maxlen: 24
178.211.1.0/24 maxlen: 24
217.115.176.0/24 maxlen: 24
176.192.224.0/24 maxlen: 24
176.192.225.0/24 maxlen: 24
93.91.224.0/24 maxlen: 24
93.91.232.0/23 maxlen: 23
109.95.231.0/24 maxlen: 24
217.8.86.0/24 maxlen: 24
217.8.93.0/24 maxlen: 24
95.129.92.0/23 maxlen: 23
212.48.141.0/24 maxlen: 24
212.48.155.0/24 maxlen: 24
176.192.75.0/24 maxlen: 24
176.192.22.0/24 maxlen: 24
213.145.7.0/24 maxlen: 24
176.192.50.0/24 maxlen: 24
213.145.10.0/24 maxlen: 24
178.212.214.0/24 maxlen: 24
213.138.210.0/24 maxlen: 24
213.138.211.0/24 maxlen: 24
213.138.212.0/24 maxlen: 24
213.138.208.0/24 maxlen: 24
213.138.213.0/24 maxlen: 24
213.138.209.0/24 maxlen: 24
213.138.214.0/24 maxlen: 24
213.138.215.0/24 maxlen: 24
213.138.222.0/24 maxlen: 24
213.138.221.0/24 maxlen: 24
176.192.116.0/24 maxlen: 24
176.192.125.0/24 maxlen: 24
176.192.124.0/24 maxlen: 24
2a00:16d0::/32 maxlen: 32
2a00:d18::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:01:5a:6a:37:fe:65:06:69:7a:83:85:f4:f9:15:d5:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 30 06:25:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7369b143540c58e4fe2631738534d4d7f4361da6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5f:2f:59:e5:a0:0d:d8:dd:86:a3:ef:b6:86:
02:d8:1b:81:31:1f:ce:40:eb:cb:ce:45:68:81:d7:
74:52:7d:91:cd:64:93:44:bb:28:de:80:89:8e:d6:
4e:3c:53:50:97:e4:fc:b4:97:fd:4e:e9:8d:cd:8a:
17:24:9c:6d:2a:39:06:24:0b:a5:23:ba:85:b3:1a:
ee:75:71:31:d0:51:f1:41:d7:4f:6e:de:c7:88:6b:
64:94:24:e3:e1:1c:43:24:80:4b:a7:62:0a:b8:37:
db:c1:da:33:9f:e6:e6:26:52:3b:f8:ac:ff:a1:88:
1b:38:87:3e:49:c8:f0:b1:66:65:8b:ad:05:c1:03:
d2:1b:02:bb:54:5e:00:d4:dc:12:e9:f2:fe:b3:f8:
d9:78:65:ca:cc:79:34:36:21:0d:a1:dd:f3:f0:87:
9a:01:3c:dd:3e:38:80:70:1e:86:d5:b8:a4:93:5a:
04:d3:52:a4:9f:ef:a9:82:38:e8:ee:26:0d:d7:14:
98:39:64:23:f1:d4:9f:54:76:ff:fd:39:d1:6f:ed:
44:6d:98:2a:ba:87:3a:ac:97:e8:99:41:15:5b:1f:
d9:bd:10:8b:e3:ad:a8:c0:58:92:04:8d:6a:45:9e:
2c:eb:09:0c:b6:df:f7:73:20:8a:e1:96:3f:6e:1b:
e9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:69:B1:43:54:0C:58:E4:FE:26:31:73:85:34:D4:D7:F4:36:1D:A6
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/c2mxQ1QMWOT-JjFzhTTU1_Q2HaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.91.224.0/24
93.91.232.0/23
95.129.92.0/23
109.75.240.0/24
109.75.249.0/24
109.95.231.0/24
109.106.213.0-109.106.214.255
109.170.68.0/24
109.170.106.0/24
128.140.164.0/24
128.140.166.0/24
176.192.22.0/24
176.192.50.0/24
176.192.75.0/24
176.192.116.0/24
176.192.124.0/23
176.192.224.0/23
178.211.1.0/24
178.212.214.0/24
194.28.216.0/24
194.28.218.0/24
195.225.160.0/22
212.13.26.0/24
212.48.141.0/24
212.48.155.0/24
213.138.208.0/21
213.138.221.0-213.138.222.255
213.145.7.0/24
213.145.10.0/24
217.8.86.0/24
217.8.93.0/24
217.19.104.0/23
217.115.176.0/24
IPv6:
2a00:d18::/32
2a00:16d0::/32
Signature Algorithm: sha256WithRSAEncryption
56:6c:7b:77:11:a6:de:86:96:4d:78:01:12:20:14:da:0b:41:
9f:59:f3:4a:81:6e:dd:98:c5:da:d5:26:d3:5c:4e:ee:8b:c4:
f4:54:8f:0b:5c:ba:66:58:3d:f2:1e:08:d6:d6:35:0f:ce:38:
31:cc:9a:79:a5:55:9f:01:35:f6:00:c6:1d:30:1d:95:08:6a:
7d:7b:19:07:bb:2e:f6:4c:46:2b:6a:ee:c5:5a:23:64:85:db:
70:67:32:e7:ef:22:dd:fb:54:eb:77:62:ce:26:7f:0a:2d:23:
3a:9f:47:69:9f:1a:f5:8e:23:78:ce:30:f9:28:6f:54:aa:b3:
a5:6d:63:8f:04:90:3f:70:9b:0a:a0:5d:6d:bc:b8:e7:c0:f1:
58:d2:a1:9c:f1:6d:f3:6c:55:9e:20:f5:98:b7:3e:78:76:96:
74:b3:95:83:9b:16:76:61:4f:d9:24:fa:d0:f0:72:f5:37:58:
06:00:c0:7a:2c:cd:3a:e5:7c:ca:a7:49:a2:bd:30:0f:36:18:
6e:d3:d8:e6:b2:5d:fb:eb:da:f2:8c:fc:43:56:60:f2:1e:5d:
48:af:61:57:66:75:fb:f5:e9:58:26:a2:c4:bb:d2:c8:15:d3:
4d:e7:14:d1:0a:08:51:6d:2c:35:1f:a8:5a:19:22:8e:10:74:
c9:05:0d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:38:37 2025 by rpki-client