Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/hk_gaJHvKdtcfVFzUB2Ic40yorg.roa
File: hk_gaJHvKdtcfVFzUB2Ic40yorg.roa (raw, json)
Hash identifier: 8zGY+fn7606mJadsa7k5KaoV8RXUOxmRw2X76mpUr7E=
Subject key identifier: 86:4F:E0:68:91:EF:29:DB:5C:7D:51:73:50:1D:88:73:8D:32:A2:B8
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184F243D501D60E56A26ED294A2BE77E72D
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/hk_gaJHvKdtcfVFzUB2Ic40yorg.roa
Signing time: Thu 08 Dec 2022 15:04:02 +0000
ROA not before: Thu 08 Dec 2022 15:04:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31224
IP address blocks: 212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
178.176.104.0/21 maxlen: 21
83.149.32.0/22 maxlen: 22
83.149.36.0/22 maxlen: 22
83.149.34.0/24 maxlen: 24
83.149.37.0/24 maxlen: 24
83.149.39.0/24 maxlen: 24
195.78.116.0/23 maxlen: 24
85.26.192.0/22 maxlen: 22
193.201.228.0/22 maxlen: 24
178.178.88.0/22 maxlen: 22
178.178.92.0/22 maxlen: 22
31.173.96.0/24 maxlen: 24
31.173.97.0/24 maxlen: 24
31.173.102.0/24 maxlen: 24
31.173.99.0/24 maxlen: 24
31.173.103.0/24 maxlen: 24
31.173.100.0/24 maxlen: 24
31.173.100.0/23 maxlen: 23
31.173.101.0/24 maxlen: 24
178.176.112.0/24 maxlen: 24
178.176.113.0/24 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
83.169.216.0/24 maxlen: 24
212.69.96.0/19 maxlen: 24
188.162.0.0/16 maxlen: 24
31.173.123.0/24 maxlen: 24
31.173.122.0/24 maxlen: 24
31.173.121.0/24 maxlen: 24
31.173.125.0/24 maxlen: 24
31.173.120.0/24 maxlen: 24
31.173.124.0/24 maxlen: 24
31.173.127.0/24 maxlen: 24
31.173.126.0/24 maxlen: 24
212.119.160.0/19 maxlen: 24
78.25.88.0/22 maxlen: 22
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
46.229.132.0/22 maxlen: 22
195.5.128.0/19 maxlen: 24
212.44.64.0/19 maxlen: 24
128.204.68.0/24 maxlen: 24
128.204.69.0/24 maxlen: 24
37.29.44.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f2:43:d5:01:d6:0e:56:a2:6e:d2:94:a2:be:77:e7:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 8 15:04:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=864fe06891ef29db5c7d5173501d88738d32a2b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ec:da:b4:02:04:a3:ca:02:ef:97:1f:47:17:
23:69:35:9b:3f:40:cc:6b:62:88:83:bc:93:56:af:
2e:96:c1:d8:0e:7d:f1:7e:e8:6e:43:b6:e6:be:d2:
21:55:39:c3:ce:a5:83:a2:98:0d:e5:df:86:54:e5:
63:b9:02:9c:da:cd:ea:bc:6d:37:5b:70:0c:d1:13:
cc:e0:46:dd:2d:b7:89:1f:56:1f:57:d3:62:b9:b3:
37:c6:2c:e8:25:30:fc:21:c4:cf:fe:66:c9:b3:9a:
53:7f:77:96:60:9f:f5:0a:e5:de:b8:d0:0d:2f:ce:
b0:76:c1:aa:5f:cc:26:03:29:3d:80:ae:70:ac:2a:
29:04:8a:a9:0c:92:25:f2:5d:81:40:78:91:d0:ed:
20:8c:2a:93:5e:3a:e5:27:26:c8:aa:85:6c:e8:bd:
72:f0:c6:04:2f:12:ea:5e:f0:2a:99:d5:22:a8:a7:
a9:ef:ba:17:b3:13:18:bd:d0:08:43:d0:e1:2e:49:
97:72:61:62:88:11:a4:04:26:9f:91:cc:95:7a:00:
70:60:84:37:0a:da:4d:e8:97:d3:63:5a:41:7f:9a:
ea:58:c4:57:fb:06:77:0a:05:30:eb:ff:20:ce:2b:
60:28:8f:1a:42:68:a6:a9:0d:f4:2e:1f:6c:f9:ad:
ff:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:4F:E0:68:91:EF:29:DB:5C:7D:51:73:50:1D:88:73:8D:32:A2:B8
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/hk_gaJHvKdtcfVFzUB2Ic40yorg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.96.0/23
31.173.99.0-31.173.103.255
31.173.120.0/21
37.29.44.0/22
46.229.132.0/22
78.25.88.0/22
83.149.32.0/21
83.169.216.0/24
85.26.192.0/22
128.204.68.0/23
178.176.104.0-178.176.113.255
178.178.88.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
6e:85:7b:d4:1d:07:d3:0c:ff:4b:1f:9a:ae:4a:7c:be:1b:08:
ac:bb:e4:ab:75:f6:75:e4:dc:cc:6e:18:84:15:73:fb:70:06:
4f:d9:27:32:15:55:40:58:db:dc:7e:58:3e:17:22:6a:7b:d6:
c1:51:b6:c3:12:c0:8a:f3:11:39:d9:17:7a:38:a5:4f:cc:34:
48:97:45:82:21:37:91:a7:8a:ca:cd:de:35:ad:ce:bd:b2:a7:
3f:ca:3a:7a:cf:bd:b5:1a:f9:63:b9:70:1d:57:2c:ba:7a:ae:
ee:84:72:a9:6e:7d:77:81:72:18:cf:63:ec:9f:98:eb:4e:1a:
69:2f:dc:1a:f5:8d:74:b5:d0:45:97:02:21:a1:83:a0:98:05:
8c:52:51:53:10:83:42:fa:55:31:ae:7b:31:38:d8:61:ed:ee:
26:ea:66:ae:21:27:17:1b:fc:58:80:0e:39:9e:fb:b7:4d:a7:
65:3a:bc:66:1b:82:55:e8:9d:b4:df:44:94:11:bb:eb:36:4d:
7f:f0:c9:62:9f:14:b5:db:46:78:86:34:63:e6:b2:8d:34:f7:
ec:55:9f:55:ba:83:6e:88:91:21:3d:32:3c:f8:ee:d0:08:9e:
50:27:87:93:08:c4:68:8b:9f:eb:4e:6c:80:e0:c7:4a:a1:02:
96:ab:41:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:36:07 2025 by rpki-client