Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/tEGdgXunKFAPuB5WTJ4SZESCnpw.roa
File: tEGdgXunKFAPuB5WTJ4SZESCnpw.roa (raw, json)
Hash identifier: 16dZGvhFmaYD8NQQQz+cttcQQx7cIqYibBxf0XUxcBo=
Subject key identifier: B4:41:9D:81:7B:A7:28:50:0F:B8:1E:56:4C:9E:12:64:44:82:9E:9C
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184F219E448603E145FBB2BC3B28F2479AB
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/tEGdgXunKFAPuB5WTJ4SZESCnpw.roa
Signing time: Thu 08 Dec 2022 14:18:13 +0000
ROA not before: Thu 08 Dec 2022 14:18:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31205
IP address blocks: 212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.16.96.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
188.170.247.0/24 maxlen: 24
83.149.50.0/24 maxlen: 24
195.78.116.0/23 maxlen: 24
83.149.49.0/24 maxlen: 24
83.149.48.0/24 maxlen: 24
83.149.51.0/24 maxlen: 24
178.176.48.0/24 maxlen: 24
193.201.228.0/22 maxlen: 24
83.169.252.0/22 maxlen: 22
83.169.248.0/22 maxlen: 22
85.26.226.0/24 maxlen: 24
85.26.224.0/24 maxlen: 24
85.26.230.0/24 maxlen: 24
85.26.229.0/24 maxlen: 24
85.26.228.0/24 maxlen: 24
85.26.231.0/24 maxlen: 24
85.26.227.0/24 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
46.232.202.0/23 maxlen: 23
46.232.200.0/23 maxlen: 23
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
178.176.240.0/22 maxlen: 22
178.176.244.0/22 maxlen: 22
78.25.92.0/23 maxlen: 23
78.25.94.0/23 maxlen: 23
37.29.86.0/23 maxlen: 23
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
188.170.240.0/22 maxlen: 22
31.173.240.0/23 maxlen: 23
195.5.128.0/19 maxlen: 24
212.44.64.0/19 maxlen: 24
128.204.66.0/24 maxlen: 24
31.173.242.0/23 maxlen: 23
128.204.67.0/24 maxlen: 24
31.173.244.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f2:19:e4:48:60:3e:14:5f:bb:2b:c3:b2:8f:24:79:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 8 14:18:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b4419d817ba728500fb81e564c9e126444829e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:93:23:de:4b:aa:91:c9:57:95:b7:ed:d4:3b:
fc:70:91:de:e1:01:d2:80:f0:49:90:d1:cc:32:a1:
2a:1f:fd:a8:b5:1c:1c:0a:02:1c:14:c3:ea:a3:ee:
9b:c2:c4:49:23:a2:6a:d0:0e:64:97:6c:b0:c6:95:
c6:51:d7:0a:7a:6b:51:47:a0:19:b1:68:51:86:a5:
4d:54:ae:fe:69:9f:b0:83:2d:5b:11:a6:bb:7f:38:
f0:83:f6:33:2b:a2:45:45:64:fe:fb:8b:ef:28:81:
c0:97:e6:5f:77:aa:47:9a:d9:19:f3:dd:7e:87:bb:
d5:6b:f8:9b:46:96:7e:79:ee:c4:13:a0:35:6f:17:
07:b0:6f:35:3e:d6:1f:75:02:8a:95:54:3d:2c:35:
f5:8d:be:06:7a:2f:22:95:35:64:33:d5:11:1e:d1:
6b:3c:1b:67:43:ff:13:6b:5d:0b:bb:d4:85:b2:d9:
a7:77:f3:c9:2c:6f:4b:71:20:48:d5:01:a7:6b:94:
74:b4:73:0b:52:2c:96:62:ca:a2:bb:16:20:21:cb:
45:75:2d:ad:4d:05:e6:4c:55:1f:2a:23:21:5d:26:
6f:20:17:2c:12:f9:2a:5d:aa:17:2a:e5:2c:dc:07:
44:22:a3:33:b9:b0:fa:f6:42:e6:8c:9c:a9:e5:b6:
2c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:41:9D:81:7B:A7:28:50:0F:B8:1E:56:4C:9E:12:64:44:82:9E:9C
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/tEGdgXunKFAPuB5WTJ4SZESCnpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.240.0/21
37.29.86.0/23
46.232.200.0/22
78.25.92.0/22
83.149.48.0/22
83.169.248.0/21
85.26.224.0/24
85.26.226.0-85.26.231.255
128.204.66.0/23
178.176.48.0/24
178.176.240.0/21
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
188.170.240.0/22
188.170.247.0/24
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
a0:3a:fb:44:54:75:e6:9e:98:cc:9b:db:57:24:87:8e:bb:f6:
d2:67:77:e3:53:4b:ab:06:9e:bd:dc:f8:b9:34:3f:df:cf:a4:
04:92:e9:76:78:99:3e:f1:93:2d:5c:f0:28:7a:89:1c:87:77:
97:7d:77:a6:0a:0f:47:e0:b5:a8:95:2d:e9:d3:18:83:c7:ca:
91:bf:ed:19:d1:7c:48:ce:b3:cf:c7:61:15:5e:99:30:57:c7:
3f:49:a4:bd:40:ea:73:f7:b3:23:8d:b4:f9:9b:9e:30:51:f4:
60:97:b2:be:17:bc:a0:ea:f8:5f:7f:2d:b1:e5:94:6d:67:b7:
d2:39:07:9b:0f:47:57:e3:84:93:75:7b:c6:c3:9d:7a:78:5d:
a3:f0:f5:96:e9:e3:59:f4:5a:f6:1b:45:ee:36:c3:e8:8d:5d:
60:b6:f6:0b:af:31:dd:49:4e:0e:8b:0e:1e:f4:64:84:4e:9b:
b8:71:63:e5:54:23:56:46:ae:c4:8d:72:37:25:7e:f8:6c:ed:
1d:85:2d:da:1f:70:76:d6:21:b5:dc:9f:fb:84:6a:e4:d1:0a:
f2:2d:40:78:4a:6a:dc:b4:1a:85:16:c1:a5:ea:ac:79:8c:8d:
23:63:a4:c3:2e:20:c1:09:4d:f3:af:7e:a7:02:38:f2:48:bc:
e0:d0:2a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:25:57 2025 by rpki-client