Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/wOhV4VIfmKP2fuVmprqFHunguF8.roa
File: wOhV4VIfmKP2fuVmprqFHunguF8.roa (raw, json)
Hash identifier: CIRjiP11tNg2KRXfolG7rt3upJzVZBgMZpES9069ijA=
Subject key identifier: C0:E8:55:E1:52:1F:98:A3:F6:7E:E5:66:A6:BA:85:1E:E9:E0:B8:5F
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018505E112F65E4C8DA1E6FEAB6E8414256A
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/wOhV4VIfmKP2fuVmprqFHunguF8.roa
Signing time: Mon 12 Dec 2022 10:28:34 +0000
ROA not before: Mon 12 Dec 2022 10:28:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20663
IP address blocks: 213.154.187.0/24 maxlen: 24
213.154.190.0/23 maxlen: 23
213.154.189.0/24 maxlen: 24
213.154.188.0/24 maxlen: 24
213.154.163.0/24 maxlen: 24
213.154.162.0/24 maxlen: 24
213.154.166.0/24 maxlen: 24
213.154.161.0/24 maxlen: 24
213.154.165.0/24 maxlen: 24
213.154.160.0/24 maxlen: 24
213.154.164.0/24 maxlen: 24
213.154.160.0/21 maxlen: 21
213.154.167.0/24 maxlen: 24
213.154.171.0/24 maxlen: 24
213.154.172.0/23 maxlen: 23
213.154.169.0/24 maxlen: 24
213.154.168.0/24 maxlen: 24
213.154.176.0/23 maxlen: 23
213.154.179.0/24 maxlen: 24
213.154.174.0/24 maxlen: 24
213.154.178.0/24 maxlen: 24
213.154.178.0/23 maxlen: 23
213.154.186.0/24 maxlen: 24
213.154.181.0/24 maxlen: 24
213.154.185.0/24 maxlen: 24
213.154.180.0/24 maxlen: 24
188.162.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:e1:12:f6:5e:4c:8d:a1:e6:fe:ab:6e:84:14:25:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 12 10:28:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c0e855e1521f98a3f67ee566a6ba851ee9e0b85f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d2:9f:9b:f9:2e:50:2e:29:0a:b5:e0:49:12:
48:33:1a:dd:c6:37:c4:ef:31:f1:7b:36:6e:47:6a:
3a:c7:69:40:f1:27:07:6d:ed:05:a8:f7:33:2e:e4:
86:27:65:aa:00:62:6c:e5:f9:32:5e:de:73:e6:df:
96:8c:2d:22:08:fa:5d:e4:1b:b9:c8:bc:f3:0d:33:
fd:79:05:1a:fd:b0:97:3f:9f:e3:a0:0f:11:80:db:
3b:2e:76:0c:03:e9:31:c8:c8:b0:39:61:67:a3:49:
d2:18:f5:19:6a:4e:a5:c7:ed:cd:f7:2b:d9:3f:ec:
b4:99:23:e9:67:13:12:ab:ae:1b:42:f5:ab:b3:5b:
8c:b4:0b:31:e7:1b:c7:76:16:fc:92:ce:45:05:97:
9a:41:00:b5:1d:8d:30:f9:3c:50:06:34:f0:97:3f:
7e:5d:68:35:54:c5:ba:12:18:e8:8f:ba:1f:03:9b:
93:89:9f:86:cc:02:23:21:38:d2:f4:45:3f:82:dd:
4e:f5:3a:5c:9d:70:d2:04:29:35:a7:38:20:4e:92:
d1:d7:91:5c:ff:7b:b1:06:4d:34:77:42:40:c9:29:
0b:7b:f2:75:55:d8:5f:71:ef:ac:74:23:cd:76:87:
42:b1:24:2b:2b:05:b4:d2:7a:38:a5:e5:e3:a0:b2:
ec:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E8:55:E1:52:1F:98:A3:F6:7E:E5:66:A6:BA:85:1E:E9:E0:B8:5F
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/wOhV4VIfmKP2fuVmprqFHunguF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.162.0.0/16
213.154.160.0-213.154.169.255
213.154.171.0-213.154.174.255
213.154.176.0-213.154.181.255
213.154.185.0-213.154.191.255
Signature Algorithm: sha256WithRSAEncryption
7e:5f:62:eb:34:e0:85:82:cb:d7:0e:d3:59:9d:ac:03:fa:8f:
c0:91:ab:28:26:f4:37:57:26:c5:fd:bb:a1:4f:2a:7c:62:a9:
12:cd:ba:a3:02:92:0d:32:65:93:ba:77:b3:5f:92:f7:c0:67:
67:d5:1b:4c:ee:7b:c7:7e:f7:76:4c:b7:49:99:7c:8e:31:a6:
85:1d:38:eb:bf:ce:b5:ce:1d:b5:8d:c6:4d:79:b2:07:47:8b:
94:35:2e:02:d6:45:2c:fb:26:f1:b9:29:e2:8b:b5:ab:58:80:
d9:12:91:6e:7c:10:c0:fe:92:be:78:b2:02:2a:60:40:bd:37:
d0:ec:c6:6b:4c:31:5e:c8:ee:51:18:51:04:f3:b3:f4:ae:3f:
7e:3c:d6:46:0f:8a:78:bb:81:d5:1d:3a:ce:0b:04:2d:8f:da:
16:05:75:d8:3e:1f:50:76:6d:9c:56:27:54:2d:9d:4c:a9:63:
32:9d:2e:14:b8:f0:8e:cd:31:61:5f:d8:cd:8d:f7:ed:03:9c:
50:3e:55:91:18:ad:b5:64:0e:f8:52:46:58:63:73:bd:34:17:
11:1d:ba:7b:4d:ec:83:0c:07:a2:08:53:b0:45:e5:0c:3f:12:
13:25:d7:c7:55:7a:9c:e1:99:43:c0:07:73:55:33:a1:ee:e3:
89:a8:be:0e
-----BEGIN CERTIFICATE-----
MIIFNDCCBBygAwIBAgISAYUF4RL2XkyNoeb+q26EFCVqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjIxMjEyMTAyODM0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMGU4NTVlMTUyMWY5OGEzZjY3ZWU1NjZhNmJhODUxZWU5ZTBiODVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndKfm/kuUC4pCrXgSRJIMxrdxjfE
7zHxezZuR2o6x2lA8ScHbe0FqPczLuSGJ2WqAGJs5fkyXt5z5t+WjC0iCPpd5Bu5
yLzzDTP9eQUa/bCXP5/joA8RgNs7LnYMA+kxyMiwOWFno0nSGPUZak6lx+3N9yvZ
P+y0mSPpZxMSq64bQvWrs1uMtAsx5xvHdhb8ks5FBZeaQQC1HY0w+TxQBjTwlz9+
XWg1VMW6Ehjoj7ofA5uTiZ+GzAIjITjS9EU/gt1O9TpcnXDSBCk1pzggTpLR15Fc
/3uxBk00d0JAySkLe/J1Vdhfce+sdCPNdodCsSQrKwW00no4peXjoLLsowIDAQAB
o4ICQDCCAjwwHQYDVR0OBBYEFMDoVeFSH5ij9n7lZqa6hR7p4LhfMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvd09oVjRWSWZtS1AyZnVWbXBycUZIdW5ndUY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFYGCCsGAQUFBwEHAQH/BEcwRTBDBAIAATA9AwMAvKIwDAME
BdWaoAMEAdWaqDAMAwQA1ZqrAwQA1ZquMAwDBATVmrADBAHVmrQwDAMEANWauQME
BtWagDANBgkqhkiG9w0BAQsFAAOCAQEAfl9i6zTghYLL1w7TWZ2sA/qPwJGrKCb0
N1cmxf27oU8qfGKpEs26owKSDTJlk7p3s1+S98BnZ9UbTO57x373dky3SZl8jjGm
hR0467/Otc4dtY3GTXmyB0eLlDUuAtZFLPsm8bkp4ou1q1iA2RKRbnwQwP6Svniy
AipgQL030OzGa0wxXsjuURhRBPOz9K4/fjzWRg+KeLuB1R06zgsELY/aFgV12D4f
UHZtnFYnVC2dTKljMp0uFLjwjs0xYV/YzY337QOcUD5VkRittWQO+FJGWGNzvTQX
ER26e03sgwwHoghTsEXlDD8SEyXXx1V6nOGZQ8AHc1Uzoe7jiai+Dg==
-----END CERTIFICATE-----
Generated at Tue Apr 8 04:33:49 2025 by rpki-client