Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/fPmrb88jVZNwjRSOTVTrUz4C7e0.roa
File: fPmrb88jVZNwjRSOTVTrUz4C7e0.roa (raw, json)
Hash identifier: 40HGOjXHdFHz8YaYIoTIbS/iCtdYd45NjldCUSEex6k=
Subject key identifier: 7C:F9:AB:6F:CF:23:55:93:70:8D:14:8E:4D:54:EB:53:3E:02:ED:ED
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184D30EA46744A18BDAA86DAF983ECF90E0
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/fPmrb88jVZNwjRSOTVTrUz4C7e0.roa
Signing time: Fri 02 Dec 2022 13:37:42 +0000
ROA not before: Fri 02 Dec 2022 13:37:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6854
IP address blocks: 109.188.0.0/16 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
81.24.128.0/20 maxlen: 24
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
83.169.192.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
93.153.128.0/17 maxlen: 24
94.25.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
109.74.112.0/20 maxlen: 24
80.253.0.0/20 maxlen: 20
185.210.140.0/22 maxlen: 24
62.64.16.0/20 maxlen: 20
212.119.160.0/19 maxlen: 24
62.64.24.0/21 maxlen: 21
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
212.44.64.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d3:0e:a4:67:44:a1:8b:da:a8:6d:af:98:3e:cf:90:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 2 13:37:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7cf9ab6fcf235593708d148e4d54eb533e02eded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:19:d4:80:91:b5:da:e4:cb:35:b2:b9:f7:dd:
05:bc:b2:14:d9:f2:bb:4b:22:7e:79:1a:16:56:9a:
3c:7b:36:2f:29:a9:31:82:76:ec:6c:a6:0a:ab:4c:
7e:50:9c:91:58:a3:7e:44:c2:71:62:de:3d:96:a8:
38:2a:c9:8c:de:34:cb:6a:02:6c:b4:4f:40:89:59:
7e:0b:a8:df:0b:6b:67:d8:25:d5:f6:cb:a0:46:41:
92:1b:2a:eb:2d:99:b6:f1:5a:94:2f:8f:d1:9a:e8:
b1:53:31:ca:f7:45:72:a5:c7:8d:4a:a5:cf:0b:d8:
75:a9:05:2f:67:eb:bf:6d:10:fe:aa:0d:d5:ed:5b:
c9:b1:4f:64:fd:d4:52:6e:3b:e8:19:e6:01:69:24:
b0:dd:a9:de:5b:be:27:2f:17:d5:1d:93:ef:c4:37:
17:a0:72:c5:da:09:22:c3:4e:25:03:3c:e5:2a:48:
eb:c8:da:73:e6:68:1d:67:a4:cb:29:f3:cb:ee:0a:
db:ee:4b:33:d3:1f:9b:07:11:e8:aa:de:e2:80:97:
f7:a9:37:ea:6b:91:d1:59:5a:fb:c3:0d:c2:3d:3d:
ec:08:57:ad:c8:61:d1:81:f3:d5:58:c7:fb:30:51:
75:18:28:87:7f:40:a6:47:db:1f:1a:f1:24:35:5b:
84:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F9:AB:6F:CF:23:55:93:70:8D:14:8E:4D:54:EB:53:3E:02:ED:ED
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/fPmrb88jVZNwjRSOTVTrUz4C7e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.64.16.0/20
80.247.176.0/20
80.253.0.0/20
81.24.128.0/20
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
27:cf:58:f3:8a:37:5d:9e:4b:18:ce:d0:b0:64:a3:6f:c6:aa:
1b:ea:ef:92:fc:8e:e3:72:ee:9c:f0:7c:cd:e8:7d:b4:80:91:
c7:da:33:e1:34:ca:1a:3f:a9:cd:72:c3:1e:0b:3e:8f:2b:ae:
8a:53:53:c9:92:f3:1c:fa:a0:d4:81:75:78:58:74:4a:f3:66:
fb:cd:b1:bc:d6:b1:95:09:53:07:84:57:63:5a:94:83:27:67:
33:8f:1e:01:26:4e:a3:81:67:b6:a2:2a:0f:04:6e:0a:5a:fc:
bc:0a:d5:0e:48:5c:18:17:5f:ae:7b:1d:0f:4d:f2:fa:cc:66:
e3:87:f0:c1:65:fc:04:e0:43:14:79:12:32:3e:87:00:a9:ab:
6b:ff:d6:1a:22:02:31:2c:04:7a:3c:ee:fc:5b:07:47:c3:65:
dc:2f:a7:bb:85:89:00:b3:74:50:f0:89:f9:2c:79:6c:57:a0:
60:45:47:55:4e:25:15:15:7e:ce:89:72:26:65:38:f6:74:48:
36:c4:80:4a:80:3c:0f:69:de:ad:43:58:14:23:32:c0:d0:7c:
51:73:b3:20:a2:53:85:70:69:6e:99:4c:a5:4f:40:fa:d4:c9:
9f:29:2d:15:b7:73:69:40:5f:a3:e2:d9:55:c8:ee:31:96:38:
f6:90:fc:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:28:18 2025 by rpki-client