Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/gup8Om3SCdfTMF4R0yWGT9XAUDo.roa
File: gup8Om3SCdfTMF4R0yWGT9XAUDo.roa (raw, json)
Hash identifier: lTfM8eZ9MTPyA1CQfGQhsNsrH4CB6KngBM5QNhzkbAM=
Subject key identifier: 82:EA:7C:3A:6D:D2:09:D7:D3:30:5E:11:D3:25:86:4F:D5:C0:50:3A
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0185053F7A591E5D0BAD97D61B5CDB751879
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/gup8Om3SCdfTMF4R0yWGT9XAUDo.roa
Signing time: Mon 12 Dec 2022 07:32:04 +0000
ROA not before: Mon 12 Dec 2022 07:32:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42891
IP address blocks: 212.14.160.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.162.0.0/16 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
212.119.160.0/19 maxlen: 24
195.78.116.0/23 maxlen: 24
91.193.212.0/22 maxlen: 22
193.201.228.0/22 maxlen: 24
212.44.64.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:3f:7a:59:1e:5d:0b:ad:97:d6:1b:5c:db:75:18:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 12 07:32:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=82ea7c3a6dd209d7d3305e11d325864fd5c0503a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e9:f7:11:df:00:f6:20:3b:f1:83:37:ad:7f:
0d:2e:b0:60:b7:75:80:9a:3a:28:c9:f7:5d:a2:70:
0a:0c:50:11:cd:c3:89:a7:42:c2:51:42:7f:37:ca:
a9:5b:2f:26:5b:1a:70:7d:82:8a:4f:65:5e:a6:71:
1b:5e:f9:ec:b3:0b:0f:ca:3d:85:15:2b:13:c4:7a:
39:5e:ea:f9:b9:49:77:9f:f5:70:83:ab:08:ef:2f:
d9:67:93:ef:49:c8:25:4c:97:2d:d7:60:99:87:f8:
dd:07:0c:73:67:60:f1:8a:3e:3e:96:19:7c:e6:ae:
75:89:5f:ba:8e:ba:51:4f:83:17:99:df:8d:9d:77:
66:d0:c2:d8:9b:6a:7d:4c:88:da:8a:3d:f5:14:b8:
3d:52:7f:ab:6b:74:4d:53:a7:c7:27:e0:a9:72:dc:
39:c6:56:0e:24:64:ab:d0:a9:8e:d6:56:00:65:bb:
47:67:49:50:0b:ff:96:9c:9e:55:79:be:7e:4d:13:
0c:92:4c:cf:0d:57:dc:62:9a:29:58:d4:64:53:55:
08:3b:29:ad:b6:c6:74:35:60:9c:3a:4a:b5:eb:05:
db:45:18:0d:6d:3c:3d:23:6f:f2:0b:82:04:2a:20:
46:55:47:bf:5b:a6:77:52:e9:45:3f:79:9c:0a:cd:
23:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:EA:7C:3A:6D:D2:09:D7:D3:30:5E:11:D3:25:86:4F:D5:C0:50:3A
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/gup8Om3SCdfTMF4R0yWGT9XAUDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.212.0/22
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
Signature Algorithm: sha256WithRSAEncryption
1c:32:8d:df:4e:27:1f:2c:76:87:f2:66:89:f3:dd:02:33:4b:
65:b5:0a:1e:e9:c5:38:eb:30:22:fe:95:35:15:b3:91:6d:be:
e6:d1:ca:3a:2c:45:1c:f1:17:a0:a4:29:d1:65:cc:00:0a:a2:
80:8d:3e:f1:75:86:75:5d:d9:48:3f:27:60:88:ac:5f:b3:ab:
16:b0:f3:32:64:39:1f:39:bf:81:6d:bb:0c:19:a2:53:5c:3b:
4e:0f:ec:57:26:53:79:97:5e:20:e9:9a:a4:34:41:09:0e:33:
93:a8:c8:96:d6:06:95:3c:08:2c:1c:58:5b:7a:94:81:c1:5d:
d7:27:31:83:70:5b:03:dc:72:98:91:1f:4a:17:63:e2:a5:c0:
c1:93:ed:20:f9:1d:a6:c3:b0:8b:46:7d:98:2f:76:ad:f3:f5:
a4:7f:61:0b:50:7f:9a:a8:58:93:10:62:e1:78:cb:ff:03:ff:
e7:9e:3b:56:f1:86:1d:ce:eb:7c:07:c8:1d:9c:37:29:12:e3:
38:a6:5b:ae:1e:a7:17:de:69:8a:58:bf:e9:9d:f4:fe:3b:ae:
59:72:7b:58:22:e0:56:97:53:3a:4e:a4:3f:65:48:3d:3f:a7:
6e:a1:8a:b2:98:be:ef:31:8f:62:e8:38:26:66:de:25:7a:15:
ab:dc:43:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:23:39 2025 by rpki-client