Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/wLb_aVJwe9m3arPfH9lEX7xf1Cs.roa
File: wLb_aVJwe9m3arPfH9lEX7xf1Cs.roa (raw, json)
Hash identifier: 6Yo+UbsrCZFFWP5Jyww9tTVKKkKr+eOl1L9gEE92XzQ=
Subject key identifier: C0:B6:FF:69:52:70:7B:D9:B7:6A:B3:DF:1F:D9:44:5F:BC:5F:D4:2B
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184F219DC47A46FCFD2719AE19E300CEBCB
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/wLb_aVJwe9m3arPfH9lEX7xf1Cs.roa
Signing time: Thu 08 Dec 2022 14:18:11 +0000
ROA not before: Thu 08 Dec 2022 14:18:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6854
IP address blocks: 212.69.96.0/19 maxlen: 24
212.14.160.0/19 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
80.253.0.0/20 maxlen: 20
195.16.96.0/19 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
62.64.16.0/20 maxlen: 20
62.64.24.0/21 maxlen: 21
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 19
195.5.128.0/19 maxlen: 24
83.229.128.0/17 maxlen: 17
212.44.64.0/19 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f2:19:dc:47:a4:6f:cf:d2:71:9a:e1:9e:30:0c:eb:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 8 14:18:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c0b6ff6952707bd9b76ab3df1fd9445fbc5fd42b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:81:95:07:f4:16:e6:e6:06:4a:58:b2:c8:14:
1a:0e:e7:3e:8d:ab:37:eb:3a:29:87:61:1d:cf:0e:
b8:0a:a7:4d:43:dd:5e:b5:cb:82:eb:f1:b8:55:43:
dc:0d:2e:32:d6:05:6e:5f:50:83:f0:16:99:5a:83:
fa:e0:06:e5:a1:e7:05:a1:b3:4a:77:5a:1e:9d:ec:
16:c6:81:e4:67:ea:64:27:36:7d:ec:e1:99:ab:41:
9e:4e:b1:ed:7a:ac:31:4c:98:a4:5b:4f:35:16:af:
73:47:5c:fd:e7:f8:af:9a:3b:8c:d3:2f:e0:77:81:
6a:1c:fd:96:1a:b3:a0:7a:e6:7e:9e:a6:73:b2:80:
ca:bf:13:3b:15:bb:bd:ec:32:76:4d:bf:94:4e:02:
c4:26:41:75:ba:db:09:df:3c:d1:2a:9d:11:f5:d1:
58:c4:c5:9b:a2:aa:70:49:ac:53:da:79:13:50:19:
fe:87:b3:6f:34:0e:28:c0:ae:9f:c4:fa:c9:fa:74:
7c:a0:35:8f:48:3a:3f:e3:6d:72:5e:9d:2f:3f:d5:
97:f6:4d:0b:30:02:13:b8:56:b5:ce:42:1e:0b:1f:
ac:c7:7a:b3:32:46:13:19:e1:87:51:1d:c4:2e:90:
21:f8:10:5f:ec:0d:26:c1:09:f9:2a:9f:a7:67:65:
bd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B6:FF:69:52:70:7B:D9:B7:6A:B3:DF:1F:D9:44:5F:BC:5F:D4:2B
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/wLb_aVJwe9m3arPfH9lEX7xf1Cs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.64.16.0/20
80.253.0.0/20
83.222.192.0/19
83.229.128.0/17
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
9c:9c:65:6e:29:1f:57:df:d4:34:d2:d7:93:55:ad:f2:3f:1a:
8b:55:29:c3:a8:03:eb:74:8d:a0:03:5c:92:99:f6:6e:9a:36:
a6:1f:ad:cf:14:01:24:44:98:bb:23:28:c6:4a:89:d0:0b:dc:
39:83:0b:80:92:44:ab:0e:63:27:d3:9e:d5:12:64:48:57:94:
ca:c9:62:00:0f:b8:44:19:5b:f8:f7:0f:2b:a1:04:d9:5c:61:
1c:b5:10:47:42:33:30:6a:d2:eb:66:56:a2:d8:4c:80:84:2d:
f6:63:64:39:4b:01:c9:80:45:9a:06:e8:ae:de:fb:0b:b3:55:
48:af:97:e1:7d:68:8c:fa:28:1c:de:01:82:ba:f5:5d:e0:8c:
3b:82:14:94:5b:cb:ea:12:d2:5d:1b:ac:a0:11:ad:bc:82:e3:
af:73:5c:63:34:b2:ee:f4:a2:81:f3:1a:e3:89:09:a7:0b:cb:
1c:4d:3b:97:40:4a:d3:39:3d:23:5b:ce:19:a0:01:7f:ce:a3:
aa:13:e6:b1:08:59:34:c3:69:de:3e:58:ea:99:95:9c:5c:17:
fe:7e:dc:16:0d:48:f8:09:4d:8a:e7:e3:20:c8:19:df:34:50:
64:4e:c8:03:a5:69:6e:fa:46:7e:22:d9:02:c8:2f:bd:b0:84:
2f:77:e6:6b
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYTyGdxHpG/P0nGa4Z4wDOvLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjIxMjA4MTQxODExWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMGI2ZmY2OTUyNzA3YmQ5Yjc2YWIzZGYxZmQ5NDQ1ZmJjNWZkNDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4GVB/QW5uYGSliyyBQaDuc+jas3
6zoph2Edzw64CqdNQ91etcuC6/G4VUPcDS4y1gVuX1CD8BaZWoP64AbloecFobNK
d1oenewWxoHkZ+pkJzZ97OGZq0GeTrHteqwxTJikW081Fq9zR1z95/ivmjuM0y/g
d4FqHP2WGrOgeuZ+nqZzsoDKvxM7Fbu97DJ2Tb+UTgLEJkF1utsJ3zzRKp0R9dFY
xMWboqpwSaxT2nkTUBn+h7NvNA4owK6fxPrJ+nR8oDWPSDo/421yXp0vP9WX9k0L
MAITuFa1zkIeCx+sx3qzMkYTGeGHUR3ELpAh+BBf7A0mwQn5Kp+nZ2W9zwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFMC2/2lScHvZt2qz3x/ZRF+8X9QrMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvd0xiX2FWSndlOW0zYXJQZkg5bEVYN3hmMUNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGZBggrBgEFBQcBBwEB/wSBiTCBhjCBgwQCAAEwfQMEBD5A
EAMEBFD9AAMEBVPewAMEB1PlgAMEArnSjAMEA7xeqAMDALyiAwQCwcnkAwQFwwWA
AwQFwxBgAwQBw050AwQAw5VvAwQFw+ZAAwQF1A6gAwQF1CxAAwQF1EVgAwQF1Heg
AwQF1ZqgAwQF1aggAwQG1fNAAwQE2XNQMA0GCSqGSIb3DQEBCwUAA4IBAQCcnGVu
KR9X39Q00teTVa3yPxqLVSnDqAPrdI2gA1ySmfZumjamH63PFAEkRJi7IyjGSonQ
C9w5gwuAkkSrDmMn057VEmRIV5TKyWIAD7hEGVv49w8roQTZXGEctRBHQjMwatLr
Zlai2EyAhC32Y2Q5SwHJgEWaBuiu3vsLs1VIr5fhfWiM+igc3gGCuvVd4Iw7ghSU
W8vqEtJdG6ygEa28guOvc1xjNLLu9KKB8xrjiQmnC8scTTuXQErTOT0jW84ZoAF/
zqOqE+axCFk0w2nePljqmZWcXBf+ftwWDUj4CU2K5+MgyBnfNFBkTsgDpWlu+kZ+
ItkCyC+9sIQvd+Zr
-----END CERTIFICATE-----
Generated at Tue Apr 8 04:31:25 2025 by rpki-client