Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/yfU2yQr6sGH10TY1ko25gB0TjwE.roa
File: yfU2yQr6sGH10TY1ko25gB0TjwE.roa (raw, json)
Hash identifier: Kslrp8VtM3YjX+8NdFGKq64DQp46kjw+Iw0R5ucdkjE=
Subject key identifier: C9:F5:36:C9:0A:FA:B0:61:F5:D1:36:35:92:8D:B9:80:1D:13:8F:01
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184C3EFCF95D2199601FB22BB5D0C38477C
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/yfU2yQr6sGH10TY1ko25gB0TjwE.roa
Signing time: Tue 29 Nov 2022 15:09:44 +0000
ROA not before: Tue 29 Nov 2022 15:09:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47395
IP address blocks: 109.188.0.0/16 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
77.233.160.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
79.171.8.0/21 maxlen: 24
81.24.128.0/20 maxlen: 24
195.78.116.0/23 maxlen: 24
78.41.100.0/22 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
83.169.192.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
93.153.128.0/17 maxlen: 24
94.25.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
109.74.112.0/20 maxlen: 24
78.25.64.0/18 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
212.44.64.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c3:ef:cf:95:d2:19:96:01:fb:22:bb:5d:0c:38:47:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Nov 29 15:09:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c9f536c90afab061f5d13635928db9801d138f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1f:8d:66:29:d4:84:9c:80:cb:03:2a:91:12:
9f:83:03:98:db:f9:30:b2:b5:b5:91:58:55:20:4d:
5e:10:73:e8:b2:56:20:68:f1:c7:07:08:fc:27:c8:
94:53:d4:11:26:85:76:4a:54:9e:84:e2:84:0c:0f:
52:3f:cf:58:53:b1:a9:09:64:99:5d:98:c8:11:01:
60:9e:45:24:20:c5:c3:81:71:82:f6:b6:e2:83:6a:
c0:d1:01:7a:95:11:ac:19:e7:0f:b1:18:b3:88:ff:
c4:2c:f3:5c:60:3c:fa:2a:a7:e0:3b:87:4b:cb:23:
43:2f:6d:98:d8:e6:ba:53:9c:c3:c9:d3:b4:68:8e:
49:e8:4a:0a:4d:1c:0c:0d:06:09:75:e5:8a:b0:5e:
e4:1e:80:26:d1:c7:34:62:81:23:fe:a5:90:dd:53:
ef:79:a6:1e:18:e9:d0:a5:f3:1a:a8:b1:09:81:da:
5e:74:00:cb:bf:57:88:93:67:6c:84:ae:85:92:18:
ce:f7:61:25:aa:16:0d:87:4c:de:39:39:e5:82:0e:
6b:cc:ce:2d:c4:e2:95:53:de:13:be:85:36:e8:60:
30:d7:32:d9:a5:fc:dc:a3:e1:45:d3:e4:52:95:9e:
f1:ef:bb:b4:fb:aa:a4:6c:11:09:95:d2:f1:93:a5:
e3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F5:36:C9:0A:FA:B0:61:F5:D1:36:35:92:8D:B9:80:1D:13:8F:01
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/yfU2yQr6sGH10TY1ko25gB0TjwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
22:05:27:32:ed:61:f9:ae:d7:c7:a3:4d:d7:e4:03:48:4d:c5:
5e:cf:d1:2f:af:7c:11:7c:6d:8d:45:a3:28:91:1f:a9:6b:5f:
b7:52:2d:88:8b:7c:26:94:2a:bd:43:22:ed:8a:a0:db:eb:28:
20:2b:d8:cc:1c:71:59:e3:92:d8:34:14:75:3c:84:a1:99:02:
d1:df:f6:a6:e1:56:04:18:99:30:5d:00:5b:d7:3e:a2:5e:54:
39:13:c0:33:7a:71:03:7a:7c:ac:ba:eb:11:6e:6e:ea:92:6e:
a8:3d:3f:70:57:5e:11:d8:aa:c9:50:fe:6b:fd:0a:e9:bc:cc:
dd:13:4f:70:51:5b:b9:dd:53:57:ab:b7:51:62:b7:49:12:29:
27:07:ca:2d:03:97:e7:cc:5c:6b:02:0c:5a:d3:48:f4:13:a8:
06:9b:a2:36:1e:f2:3b:0e:51:96:1f:30:69:ca:7c:2d:7d:1f:
d0:bb:56:d4:79:df:3a:b9:f7:47:99:3a:72:61:bc:1f:94:83:
de:6a:e1:3f:8f:60:a6:c3:08:33:ee:30:36:69:e0:64:27:77:
7a:52:ce:40:42:43:35:b1:34:4f:77:68:3c:d2:cf:89:11:8b:
01:35:39:b1:22:af:3c:dc:ef:51:c4:00:13:d5:0a:ad:62:f5:
b2:2a:f1:ac
-----BEGIN CERTIFICATE-----
MIIF3jCCBMagAwIBAgISAYTD78+V0hmWAfsiu10MOEd8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjIxMTI5MTUwOTQ0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOWY1MzZjOTBhZmFiMDYxZjVkMTM2MzU5MjhkYjk4MDFkMTM4ZjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4B+NZinUhJyAywMqkRKfgwOY2/kw
srW1kVhVIE1eEHPoslYgaPHHBwj8J8iUU9QRJoV2SlSehOKEDA9SP89YU7GpCWSZ
XZjIEQFgnkUkIMXDgXGC9rbig2rA0QF6lRGsGecPsRiziP/ELPNcYDz6KqfgO4dL
yyNDL22Y2Oa6U5zDydO0aI5J6EoKTRwMDQYJdeWKsF7kHoAm0cc0YoEj/qWQ3VPv
eaYeGOnQpfMaqLEJgdpedADLv1eIk2dshK6FkhjO92ElqhYNh0zeOTnlgg5rzM4t
xOKVU94TvoU26GAw1zLZpfzco+FF0+RSlZ7x77u0+6qkbBEJldLxk6XjEwIDAQAB
o4IC6jCCAuYwHQYDVR0OBBYEFMn1NskK+rBh9dE2NZKNuYAdE48BMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEveWZVMnlRcjZzR0gxMFRZMWtvMjVnQjBUandFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIH/BggrBgEFBQcBBwEB/wSB7zCB7DCB6QQCAAEwgeIDBAVN
6aADBAZOGUADBAJOKWQDBANPqwgDBARQ97ADBARRGIADBAZTqcADBAVT3sADBAdT
5YADBAdVGoADBAVWbcADBAJbwdQDBAddmYADBAdeGYADBAdfiQADBARtSnADBAZt
fEADAwBtvAMEBoDMQAMEA7IXkAMEArkDIAMEArnSjAMEA7xeqAMDALyiAwQCwcnk
AwQFwwWAAwQFwxBgAwQBw050AwQAw5VvAwQFw+ZAAwQF1A6gAwQF1CxAAwQF1EVg
AwQF1HegAwQF1ZqgAwQF1aggAwQG1fNAAwQE2XNQMA0GCSqGSIb3DQEBCwUAA4IB
AQAiBScy7WH5rtfHo03X5ANITcVez9Evr3wRfG2NRaMokR+pa1+3Ui2Ii3wmlCq9
QyLtiqDb6yggK9jMHHFZ45LYNBR1PIShmQLR3/am4VYEGJkwXQBb1z6iXlQ5E8Az
enEDenysuusRbm7qkm6oPT9wV14R2KrJUP5r/QrpvMzdE09wUVu53VNXq7dRYrdJ
EiknB8otA5fnzFxrAgxa00j0E6gGm6I2HvI7DlGWHzBpynwtfR/Qu1bUed86ufdH
mTpyYbwflIPeauE/j2Cmwwgz7jA2aeBkJ3d6Us5AQkM1sTRPd2g80s+JEYsBNTmx
Iq883O9RxAAT1QqtYvWyKvGs
-----END CERTIFICATE-----
Generated at Tue Apr 8 04:33:45 2025 by rpki-client