Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/fBSx8-sjUVPGLXk3TATKZDz6T-s.roa
File: fBSx8-sjUVPGLXk3TATKZDz6T-s.roa (raw, json)
Hash identifier: JZOs+KvklaMqN7B364Njpi93pd8KGQtUbGa7T/4AH8I=
Subject key identifier: 7C:14:B1:F3:EB:23:51:53:C6:2D:79:37:4C:04:CA:64:3C:FA:4F:EB
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0188D3D2BAA4FB431C234592A0C2CF77D6A6
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/fBSx8-sjUVPGLXk3TATKZDz6T-s.roa
Signing time: Mon 19 Jun 2023 13:23:02 +0000
ROA not before: Mon 19 Jun 2023 13:23:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25159
IP address blocks: 195.16.96.0/19 maxlen: 19
109.188.112.0/23 maxlen: 23
193.201.228.0/22 maxlen: 22
109.188.114.0/24 maxlen: 24
195.16.110.0/23 maxlen: 23
109.188.64.0/19 maxlen: 19
195.16.114.0/23 maxlen: 23
85.26.144.0/20 maxlen: 20
109.188.96.0/21 maxlen: 21
78.25.119.0/24 maxlen: 24
94.25.131.0/24 maxlen: 24
94.25.144.0/20 maxlen: 20
94.25.160.0/24 maxlen: 24
94.25.164.0/24 maxlen: 24
212.69.106.0/24 maxlen: 24
94.25.172.0/22 maxlen: 22
212.69.113.0/24 maxlen: 24
94.25.168.0/22 maxlen: 22
212.69.114.0/24 maxlen: 24
188.170.25.0/24 maxlen: 24
188.170.32.0/21 maxlen: 21
188.170.40.0/21 maxlen: 21
37.28.176.0/21 maxlen: 21
178.177.0.0/18 maxlen: 18
178.177.3.0/24 maxlen: 24
78.25.112.0/22 maxlen: 22
78.25.116.0/23 maxlen: 23
78.25.118.0/24 maxlen: 24
94.25.176.0/21 maxlen: 21
212.69.125.0/24 maxlen: 24
94.25.184.0/21 maxlen: 21
128.204.78.0/23 maxlen: 23
37.29.32.0/21 maxlen: 21
128.204.76.0/23 maxlen: 23
128.204.76.0/22 maxlen: 22
178.176.52.0/22 maxlen: 22
178.176.72.0/21 maxlen: 21
31.173.0.0/21 maxlen: 21
195.230.70.0/23 maxlen: 23
31.173.8.0/21 maxlen: 21
178.176.0.0/19 maxlen: 19
213.243.109.0/24 maxlen: 24
213.243.116.0/24 maxlen: 24
83.229.254.0/24 maxlen: 24
178.176.32.0/21 maxlen: 21
178.176.40.0/21 maxlen: 21
31.173.72.0/21 maxlen: 21
31.173.80.0/21 maxlen: 21
31.173.88.0/21 maxlen: 21
188.170.0.0/19 maxlen: 19
188.170.24.0/24 maxlen: 24
31.173.16.0/21 maxlen: 21
195.230.91.0/24 maxlen: 24
31.173.24.0/21 maxlen: 21
195.230.92.0/24 maxlen: 24
31.173.32.0/19 maxlen: 19
31.173.60.0/24 maxlen: 24
31.173.64.0/21 maxlen: 21
62.64.0.0/20 maxlen: 20
91.205.168.0/23 maxlen: 23
91.205.170.0/23 maxlen: 23
83.229.211.0/24 maxlen: 24
46.229.128.0/22 maxlen: 22
83.222.212.0/22 maxlen: 22
83.222.216.0/21 maxlen: 21
2a03:d000:4000::/36 maxlen: 36
2a03:d000:4200::/40 maxlen: 40
2a03:d000:4100::/40 maxlen: 40
2a03:d000:4400::/40 maxlen: 40
2a03:d000:4300::/40 maxlen: 40
2a03:d004::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d3:d2:ba:a4:fb:43:1c:23:45:92:a0:c2:cf:77:d6:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jun 19 13:23:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c14b1f3eb235153c62d79374c04ca643cfa4feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:dd:ea:34:fb:1c:92:e3:2e:05:d5:b1:75:22:
9b:2e:d5:32:35:33:0f:bf:e6:fb:9e:1f:27:1e:3e:
3c:89:3f:40:4e:2d:81:be:b5:f2:0d:65:ec:a9:04:
f6:d4:02:e6:09:18:96:56:16:3e:08:51:72:28:6d:
94:b8:f7:77:64:68:a7:56:7f:a0:99:36:0b:77:6d:
61:b5:59:68:1a:84:88:32:6b:89:d8:d2:27:95:40:
e9:3e:7d:05:7b:ad:dc:05:dc:2d:87:ab:e5:ff:a0:
42:c6:48:2f:35:0c:4f:79:5a:ce:34:dd:f1:df:b1:
c1:6b:37:fa:1a:b8:4c:5f:94:24:1a:64:fe:6b:b7:
74:0f:e6:87:a1:0b:b1:c7:30:57:ff:be:d1:18:fd:
ae:93:b1:94:c0:8c:ab:88:5b:19:5c:8b:8a:12:58:
d9:64:7b:60:24:55:7d:56:5a:38:72:a4:9e:af:9d:
e9:f7:88:d8:c2:59:22:71:17:06:c5:93:eb:9c:31:
b6:c9:bb:46:0f:b1:0e:f4:46:5e:25:c1:f1:2a:ef:
a6:ec:95:4d:8c:db:2e:88:0f:a6:5c:02:e7:82:02:
8c:e4:7e:de:dd:41:87:19:d4:bf:ec:56:59:3d:6e:
01:ad:ec:ab:65:7f:ba:b9:66:29:c7:22:23:44:ec:
5d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:14:B1:F3:EB:23:51:53:C6:2D:79:37:4C:04:CA:64:3C:FA:4F:EB
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/fBSx8-sjUVPGLXk3TATKZDz6T-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.0.0-31.173.95.255
37.28.176.0/21
37.29.32.0/21
46.229.128.0/22
62.64.0.0/20
78.25.112.0/21
83.222.212.0-83.222.223.255
83.229.211.0/24
83.229.254.0/24
85.26.144.0/20
91.205.168.0/22
94.25.131.0/24
94.25.144.0-94.25.160.255
94.25.164.0/24
94.25.168.0-94.25.191.255
109.188.64.0-109.188.103.255
109.188.112.0-109.188.114.255
128.204.76.0/22
178.176.0.0-178.176.47.255
178.176.52.0/22
178.176.72.0/21
178.177.0.0/18
188.170.0.0-188.170.47.255
193.201.228.0/22
195.16.96.0/19
195.230.70.0/23
195.230.91.0-195.230.92.255
212.69.106.0/24
212.69.113.0-212.69.114.255
212.69.125.0/24
213.243.109.0/24
213.243.116.0/24
IPv6:
2a03:d000:4000::/36
2a03:d004::/40
Signature Algorithm: sha256WithRSAEncryption
97:83:7f:dc:f9:c1:1e:34:c3:4c:95:1d:d5:ef:16:1c:9a:cd:
02:59:8b:6d:79:e0:c2:bf:e8:58:d5:a4:d3:9b:94:42:00:a6:
e8:b3:d1:29:d1:9e:b2:e3:53:91:2e:a4:f4:e5:3d:17:ef:2f:
50:41:b0:89:bb:14:11:9e:00:24:92:fd:bf:ab:db:c1:4b:4b:
93:52:b1:ea:94:d7:13:3c:1a:a0:91:53:7d:3e:0a:86:50:2e:
62:da:0e:b2:df:40:1b:59:5e:f9:cb:e6:94:98:1e:26:1a:7c:
c9:29:c0:85:77:0d:66:e5:d1:90:e0:97:80:24:48:70:e5:34:
39:c8:1a:34:b0:ae:6d:d0:5a:9b:42:2f:25:aa:ef:3e:13:d9:
95:35:9a:a5:c4:28:ae:bd:c7:86:77:b8:a7:74:e6:7e:a9:96:
06:9a:5a:fd:4d:86:bf:db:b5:66:6e:53:be:b6:26:ea:09:d4:
97:75:12:c6:03:bd:40:3a:79:0f:bd:22:7c:1c:af:7b:43:25:
ac:fb:10:fe:9d:1a:c6:30:1d:57:6a:71:c3:a9:0b:a3:ec:9c:
e3:f8:80:68:8d:82:77:5a:ed:6a:9f:51:04:7a:d3:08:41:98:
58:21:35:74:47:d2:1e:c6:ef:0d:eb:f1:ae:cc:6b:30:d5:90:
e8:01:87:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:36:06 2025 by rpki-client