Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/f72WBb7m8kZRmJKl-2nciAnbcUA.roa
File: f72WBb7m8kZRmJKl-2nciAnbcUA.roa (raw, json)
Hash identifier: k1BZ/ASiWRimilT00AqvHg+CJZbJArkeWZe+t7MaVQs=
Subject key identifier: 7F:BD:96:05:BE:E6:F2:46:51:98:92:A5:FB:69:DC:88:09:DB:71:40
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184E2AF4AF5170DB4100BD6304C39045145
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/f72WBb7m8kZRmJKl-2nciAnbcUA.roa
Signing time: Mon 05 Dec 2022 14:27:29 +0000
ROA not before: Mon 05 Dec 2022 14:27:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20663
IP address blocks: 109.188.0.0/16 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
93.153.128.0/17 maxlen: 24
94.25.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
109.74.112.0/20 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
91.193.212.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
212.44.64.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e2:af:4a:f5:17:0d:b4:10:0b:d6:30:4c:39:04:51:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 5 14:27:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7fbd9605bee6f246519892a5fb69dc8809db7140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3d:b2:ce:60:cb:e1:70:cb:6d:b2:ce:f7:29:
9f:38:10:ed:51:bb:24:f3:7d:91:d8:75:57:bb:eb:
5e:98:2c:7e:ec:ac:40:1a:89:ad:64:c1:24:42:42:
d6:70:21:5b:c1:2c:6b:e8:93:70:8e:da:8c:97:46:
6a:a3:22:96:b8:e5:79:a2:b8:85:2c:47:bc:a5:3e:
8d:95:1a:62:27:bd:33:39:0b:f6:f2:38:67:a3:5f:
ad:a3:05:d0:17:70:91:e0:38:03:8c:59:ed:d5:79:
b7:55:43:d9:0c:2b:d5:04:53:58:51:87:99:dc:ce:
27:7d:30:73:18:69:10:9c:69:ce:cf:d6:2f:59:ea:
61:46:ed:20:55:f9:98:65:ea:bf:a0:e0:fc:aa:5d:
0c:71:b0:53:dc:d9:a2:bb:68:63:55:57:3b:dc:00:
4f:60:98:02:94:4c:1f:dc:3b:0b:a3:e5:ea:31:c7:
da:01:a2:68:6e:d0:ba:10:4f:26:6c:43:b0:e1:63:
16:cf:2c:37:27:f5:c4:6a:51:00:d7:46:d0:d9:4c:
4b:1f:60:79:c2:7e:03:3a:9a:4d:d8:d6:96:83:2b:
e7:23:9f:78:97:e4:df:de:d8:aa:5c:d4:8d:dd:ee:
77:fe:a5:3d:e1:c8:a2:09:cf:9c:15:5a:c2:c6:e5:
95:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:BD:96:05:BE:E6:F2:46:51:98:92:A5:FB:69:DC:88:09:DB:71:40
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/f72WBb7m8kZRmJKl-2nciAnbcUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
87:da:97:65:45:6f:6f:79:d6:6c:c2:9c:bf:09:35:be:dd:af:
f6:a4:3d:b4:26:15:d5:e7:56:46:76:14:67:82:28:b6:4f:a6:
a0:f7:33:ef:ff:79:40:40:1d:fb:4f:dc:44:be:a9:89:74:24:
22:87:b7:22:11:1e:83:3e:4f:87:26:a0:f5:26:b1:3d:c2:36:
63:0a:a6:d7:e9:4c:90:ba:27:e5:2d:c3:4f:05:9f:6a:05:fd:
b3:c3:4f:40:71:d9:36:78:0b:70:f2:92:cd:7e:1b:ed:22:44:
1b:bb:c5:8e:f3:75:01:ed:fd:c3:87:c6:19:c4:a2:62:b5:9f:
26:c8:97:f1:72:76:49:d0:2d:bd:e6:18:1f:d3:51:85:c8:ea:
9a:7a:17:d6:40:d4:c0:c6:73:d2:8b:2c:95:55:90:92:14:30:
a8:44:ae:34:46:c9:96:34:f1:ad:55:1a:48:b6:98:c5:10:f0:
48:ac:57:57:de:72:b6:99:48:87:0d:d2:78:7b:af:56:8b:9a:
83:2b:68:83:df:58:7c:e5:a2:a4:0b:83:be:49:8e:1c:9d:cf:
f5:01:2b:60:2a:0b:98:41:32:90:c5:d5:9f:39:d8:2a:96:ff:
99:84:f2:42:0b:65:eb:24:3f:cd:1f:2d:44:cf:4b:48:8e:4a:
d9:56:8b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:36:10 2025 by rpki-client