Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ce9779-3ada-4b03-a9ea-662b194869c0/1/ktCcGQUXCBv5IFrNjWRY3opSagc.roa
File: ktCcGQUXCBv5IFrNjWRY3opSagc.roa (raw, json)
Hash identifier: yzLpzmIh53krBilq3g+ACs87b0QD7a6iTrWFYX/B04A=
Subject key identifier: 92:D0:9C:19:05:17:08:1B:F9:20:5A:CD:8D:64:58:DE:8A:52:6A:07
Certificate issuer: /CN=96a8d72552e5ba942ad9d94bdbf102895ea96ee4
Certificate serial: 018570E7741CAA2EF78115C16B244F26822B
Authority key identifier: 96:A8:D7:25:52:E5:BA:94:2A:D9:D9:4B:DB:F1:02:89:5E:A9:6E:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lqjXJVLlupQq2dlL2_ECiV6pbuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ce9779-3ada-4b03-a9ea-662b194869c0/1/ktCcGQUXCBv5IFrNjWRY3opSagc.roa
Signing time: Mon 02 Jan 2023 05:14:54 +0000
ROA not before: Mon 02 Jan 2023 05:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15774
IP address blocks: 109.171.48.0/23 maxlen: 23
91.105.128.192/26 maxlen: 26
91.105.128.128/26 maxlen: 26
109.171.52.0/24 maxlen: 24
109.171.58.0/24 maxlen: 24
91.105.137.128/26 maxlen: 26
109.171.70.0/24 maxlen: 24
109.171.65.0/24 maxlen: 24
109.171.76.0/24 maxlen: 24
109.171.0.0/23 maxlen: 23
195.238.101.0/24 maxlen: 24
109.171.7.0/24 maxlen: 24
37.49.196.0/24 maxlen: 24
37.49.205.0/24 maxlen: 24
37.49.204.0/24 maxlen: 24
37.49.207.0/24 maxlen: 24
109.171.29.0/24 maxlen: 24
37.205.77.0/24 maxlen: 24
37.205.76.128/25 maxlen: 25
37.205.76.0/25 maxlen: 25
109.171.103.0/24 maxlen: 24
109.171.105.0/24 maxlen: 24
109.171.107.0/24 maxlen: 24
109.171.124.128/25 maxlen: 25
109.171.124.0/25 maxlen: 25
37.205.48.128/25 maxlen: 25
37.205.54.128/25 maxlen: 25
37.205.54.0/25 maxlen: 25
46.241.18.0/24 maxlen: 24
46.241.20.128/25 maxlen: 25
46.241.20.0/25 maxlen: 25
46.241.19.0/24 maxlen: 24
46.241.44.0/24 maxlen: 24
46.241.125.128/25 maxlen: 25
46.241.125.0/25 maxlen: 25
46.241.123.128/25 maxlen: 25
46.241.126.0/24 maxlen: 24
188.44.116.192/26 maxlen: 26
188.44.116.128/26 maxlen: 26
46.241.68.0/23 maxlen: 23
109.197.130.0/24 maxlen: 24
109.197.128.0/23 maxlen: 23
46.241.78.0/24 maxlen: 24
46.241.84.0/24 maxlen: 24
109.197.135.0/24 maxlen: 24
46.241.85.0/24 maxlen: 24
46.241.79.0/24 maxlen: 24
46.241.88.128/25 maxlen: 25
46.241.89.0/24 maxlen: 24
46.241.88.0/25 maxlen: 25
46.241.98.0/24 maxlen: 24
46.241.100.0/23 maxlen: 23
46.241.99.0/24 maxlen: 24
46.241.103.0/24 maxlen: 24
46.241.102.0/24 maxlen: 24
46.241.106.0/24 maxlen: 24
91.105.129.0/24 maxlen: 24
91.105.128.0/25 maxlen: 25
91.105.130.0/24 maxlen: 24
91.105.137.0/25 maxlen: 25
91.105.142.0/24 maxlen: 24
91.105.140.128/25 maxlen: 25
91.105.151.0/24 maxlen: 24
91.105.175.0/24 maxlen: 24
91.105.180.0/22 maxlen: 22
37.205.48.64/26 maxlen: 26
37.205.48.0/26 maxlen: 26
46.50.207.0/24 maxlen: 24
46.50.160.128/25 maxlen: 25
46.50.160.0/25 maxlen: 25
46.50.162.0/24 maxlen: 24
188.44.116.0/25 maxlen: 25
188.44.114.0/23 maxlen: 23
46.50.254.0/24 maxlen: 24
188.44.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:74:1c:aa:2e:f7:81:15:c1:6b:24:4f:26:82:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96a8d72552e5ba942ad9d94bdbf102895ea96ee4
Validity
Not Before: Jan 2 05:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92d09c190517081bf9205acd8d6458de8a526a07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:12:cd:27:f1:31:5f:1e:24:1c:28:3c:c2:cc:
de:fa:a1:43:df:45:25:bd:93:f7:02:bf:9d:de:5e:
d8:95:12:65:cf:dc:04:2e:8f:69:3f:92:4f:80:b3:
f1:87:be:f8:aa:f0:f7:0f:b1:59:80:36:8d:4e:9b:
7f:d8:ae:1c:0c:81:a5:fc:62:3a:e7:05:00:ca:06:
6a:b3:f1:df:28:f8:62:c9:ba:34:1d:7a:ab:45:91:
9f:ab:37:d9:5c:13:f3:72:37:5a:e9:c5:9b:4c:0a:
fb:31:f4:6a:20:45:a2:0b:90:37:a3:62:8c:e7:c8:
e4:7e:f1:ab:34:5a:8c:19:d5:e9:31:6a:ab:a4:ef:
00:b0:cf:e6:20:8a:62:a5:07:36:dc:78:0e:05:f3:
2e:87:b7:f9:ed:0e:39:52:1e:73:c1:7b:08:27:71:
c3:7b:47:8c:ee:9a:01:f9:f1:a9:a6:12:d1:db:3a:
df:72:cd:69:06:eb:67:0e:8e:f4:e7:23:c9:22:55:
6b:b3:ec:ae:d5:57:77:10:07:53:ee:d4:1d:ad:c4:
59:fa:ad:b3:e8:50:63:17:1a:5d:45:a2:5f:de:8c:
37:09:13:3f:c9:b0:b6:ba:1e:d4:3c:20:da:a5:1f:
8c:9d:c9:b6:e2:9b:9b:d9:4d:80:68:99:1d:d1:2e:
3c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D0:9C:19:05:17:08:1B:F9:20:5A:CD:8D:64:58:DE:8A:52:6A:07
X509v3 Authority Key Identifier:
keyid:96:A8:D7:25:52:E5:BA:94:2A:D9:D9:4B:DB:F1:02:89:5E:A9:6E:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqjXJVLlupQq2dlL2_ECiV6pbuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ce9779-3ada-4b03-a9ea-662b194869c0/1/ktCcGQUXCBv5IFrNjWRY3opSagc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ce9779-3ada-4b03-a9ea-662b194869c0/1/lqjXJVLlupQq2dlL2_ECiV6pbuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.196.0/24
37.49.204.0/23
37.49.207.0/24
37.205.48.0/24
37.205.54.0/24
37.205.76.0/23
46.50.160.0/24
46.50.162.0/24
46.50.207.0/24
46.50.254.0/24
46.241.18.0-46.241.20.255
46.241.44.0/24
46.241.68.0/23
46.241.78.0/23
46.241.84.0/23
46.241.88.0/23
46.241.98.0-46.241.103.255
46.241.106.0/24
46.241.123.128/25
46.241.125.0-46.241.126.255
91.105.128.0-91.105.130.255
91.105.137.0-91.105.137.191
91.105.140.128/25
91.105.142.0/24
91.105.151.0/24
91.105.175.0/24
91.105.180.0/22
109.171.0.0/23
109.171.7.0/24
109.171.29.0/24
109.171.48.0/23
109.171.52.0/24
109.171.58.0/24
109.171.65.0/24
109.171.70.0/24
109.171.76.0/24
109.171.103.0/24
109.171.105.0/24
109.171.107.0/24
109.171.124.0/24
109.197.128.0-109.197.130.255
109.197.135.0/24
188.44.99.0/24
188.44.114.0-188.44.116.255
195.238.101.0/24
Signature Algorithm: sha256WithRSAEncryption
16:d5:8a:ec:03:43:31:51:ae:51:9f:01:73:12:81:6f:c4:2f:
fa:fa:e7:47:34:a8:26:d4:36:b2:21:04:f1:82:92:99:2c:11:
01:9c:9b:de:77:f1:97:89:f8:74:c4:92:ae:94:d6:3b:b6:7c:
dd:ea:a7:ee:71:94:b2:b5:79:87:ce:0d:ce:f9:25:43:a4:c0:
82:7d:d7:80:d8:4a:eb:7a:bf:91:e8:70:5d:df:16:fc:7d:1a:
78:3f:f1:df:77:70:49:9a:f5:9e:63:47:d7:7f:17:75:45:b9:
f6:dc:8f:1a:a8:0f:69:3d:61:fe:65:05:e7:82:95:91:1e:cb:
ac:32:cf:25:07:64:eb:28:e5:41:ae:cc:13:54:92:c3:0f:d1:
46:99:4a:c8:54:33:47:94:02:73:43:14:73:ed:09:eb:d2:fa:
08:4a:f9:34:b2:1e:08:ed:a6:db:11:ff:92:a3:2e:2d:2d:ea:
64:6d:7b:c3:a7:57:93:1e:4a:81:36:35:8a:ff:1b:2c:2d:93:
53:ed:a7:9e:f6:c7:56:a0:eb:0c:af:69:5b:a5:6e:36:b1:50:
73:2a:47:e9:d9:ec:46:c5:87:a9:4b:62:74:16:75:59:87:ad:
5a:bd:de:d5:41:73:0e:63:16:4d:3f:5f:f1:3b:ac:43:04:05:
9a:cc:a7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:13 2024 by rpki-client on console-fra.rpki-client.org