Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/GTTt-KxlhX37rMPGkQSn0dcvmFw.roa
File: GTTt-KxlhX37rMPGkQSn0dcvmFw.roa (raw, json)
Hash identifier: gsO2Iuzl6xnxVAPKdkBSkw6ET3OA5JMyUpyR3PHlsrk=
Subject key identifier: 19:34:ED:F8:AC:65:85:7D:FB:AC:C3:C6:91:04:A7:D1:D7:2F:98:5C
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 0194258F8B248715ED37C3526336A78CF304
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/GTTt-KxlhX37rMPGkQSn0dcvmFw.roa
Signing time: Thu 02 Jan 2025 05:49:11 +0000
ROA not before: Thu 02 Jan 2025 05:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 31.131.12.0/22 maxlen: 22
31.133.192.0/24 maxlen: 24
31.133.193.0/24 maxlen: 24
31.133.194.0/24 maxlen: 24
31.133.195.0/24 maxlen: 24
31.133.196.0/23 maxlen: 23
31.133.198.0/24 maxlen: 24
31.133.199.0/24 maxlen: 24
31.135.1.0/24 maxlen: 24
31.135.7.0/24 maxlen: 24
37.97.122.0/23 maxlen: 23
64.43.66.0/23 maxlen: 23
64.43.68.0/22 maxlen: 22
64.43.80.0/21 maxlen: 21
64.43.88.0/22 maxlen: 22
77.36.8.0/21 maxlen: 21
77.36.28.0/23 maxlen: 23
77.36.30.0/24 maxlen: 24
77.36.32.0/22 maxlen: 22
77.36.36.0/23 maxlen: 23
77.36.38.0/23 maxlen: 23
77.36.40.0/21 maxlen: 21
77.36.48.0/22 maxlen: 22
77.36.52.0/23 maxlen: 23
77.36.80.0/21 maxlen: 21
77.36.88.0/24 maxlen: 24
77.36.89.0/24 maxlen: 24
77.36.90.0/23 maxlen: 23
77.36.92.0/22 maxlen: 22
77.36.96.0/20 maxlen: 20
77.232.192.0/23 maxlen: 24
77.232.194.0/23 maxlen: 23
77.232.196.0/22 maxlen: 22
77.232.200.0/22 maxlen: 22
77.232.204.0/22 maxlen: 22
77.232.208.0/21 maxlen: 21
77.232.220.0/22 maxlen: 22
81.161.12.0/22 maxlen: 22
85.204.196.0/23 maxlen: 24
86.104.132.0/23 maxlen: 24
89.34.74.0/23 maxlen: 24
89.42.232.0/23 maxlen: 24
89.44.100.0/23 maxlen: 24
89.45.92.0/23 maxlen: 24
89.46.112.0/23 maxlen: 24
91.225.34.0/24 maxlen: 24
91.225.35.0/24 maxlen: 24
91.229.16.0/23 maxlen: 23
91.229.31.0/24 maxlen: 24
91.229.156.0/23 maxlen: 23
91.229.158.0/24 maxlen: 24
91.229.159.0/24 maxlen: 24
91.231.223.0/24 maxlen: 24
91.231.224.0/23 maxlen: 23
91.231.226.0/24 maxlen: 24
91.232.16.0/23 maxlen: 23
91.233.2.0/23 maxlen: 23
91.233.202.0/23 maxlen: 23
91.234.150.0/23 maxlen: 23
91.234.220.0/23 maxlen: 23
91.234.222.0/23 maxlen: 23
91.239.0.0/22 maxlen: 22
91.239.178.0/24 maxlen: 24
91.240.156.0/22 maxlen: 22
91.245.176.0/21 maxlen: 21
91.246.188.0/22 maxlen: 22
91.246.196.0/22 maxlen: 22
93.120.8.0/24 maxlen: 24
93.120.27.0/24 maxlen: 24
93.120.28.0/23 maxlen: 23
93.120.30.0/24 maxlen: 24
93.120.48.0/20 maxlen: 20
93.120.64.0/21 maxlen: 21
93.120.75.0/24 maxlen: 24
93.120.76.0/22 maxlen: 22
93.120.80.0/22 maxlen: 22
93.120.85.0/24 maxlen: 24
93.120.86.0/23 maxlen: 23
93.120.88.0/23 maxlen: 23
93.120.90.0/24 maxlen: 24
93.120.92.0/23 maxlen: 23
93.120.94.0/23 maxlen: 23
93.120.112.0/21 maxlen: 21
93.120.124.0/22 maxlen: 22
171.25.223.0/24 maxlen: 24
176.96.56.0/21 maxlen: 21
176.96.176.0/22 maxlen: 22
176.96.180.0/22 maxlen: 22
176.97.144.0/22 maxlen: 22
176.97.148.0/22 maxlen: 22
176.98.56.0/22 maxlen: 22
176.98.60.0/22 maxlen: 22
176.107.64.0/20 maxlen: 24
176.110.106.0/24 maxlen: 24
176.110.114.0/23 maxlen: 23
176.111.0.0/22 maxlen: 22
176.111.4.0/22 maxlen: 22
176.112.84.0/22 maxlen: 22
176.116.40.0/21 maxlen: 21
176.118.88.0/22 maxlen: 22
176.118.92.0/22 maxlen: 22
176.121.96.0/21 maxlen: 21
176.124.176.0/22 maxlen: 22
176.124.180.0/22 maxlen: 22
178.159.148.0/22 maxlen: 22
178.159.152.0/21 maxlen: 21
185.9.236.0/22 maxlen: 22
185.9.240.0/22 maxlen: 22
185.104.196.0/22 maxlen: 24
188.191.248.0/22 maxlen: 22
188.213.233.0/24 maxlen: 24
193.0.190.0/24 maxlen: 24
193.36.192.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:8b:24:87:15:ed:37:c3:52:63:36:a7:8c:f3:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jan 2 05:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1934edf8ac65857dfbacc3c69104a7d1d72f985c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0c:36:b3:2f:18:3c:ca:19:cc:b5:f3:f4:73:
24:6e:db:6e:d3:b7:39:25:ca:c5:18:0c:42:e9:c6:
80:b4:e5:bb:b4:50:8d:82:57:70:74:86:4d:f7:55:
78:93:04:59:f0:b5:9e:6e:17:72:77:31:c0:d8:08:
12:a6:ef:2f:97:5c:61:bb:fc:c9:3b:5c:76:d6:ee:
ef:58:7e:8c:4c:cb:3f:5b:f3:3c:d0:e4:64:d0:21:
12:de:41:71:da:d7:d9:fe:87:28:89:ad:8f:1b:d4:
52:0f:6a:47:d6:00:d8:7b:04:6f:32:c3:ff:37:a1:
ac:3f:9b:ea:48:f4:8a:fb:20:5f:01:eb:a6:79:6f:
32:04:8d:b7:04:4d:27:d4:1b:07:a8:e1:6b:d3:ed:
6e:ed:b3:13:86:6b:1d:39:a4:77:42:f1:46:39:ec:
60:01:a9:95:78:60:89:38:77:f8:d3:49:21:36:51:
35:86:9e:0b:c0:bc:f0:e5:2b:70:58:2e:f3:c7:ee:
6e:37:c6:b6:ce:68:f6:a6:82:32:9a:01:38:51:0c:
0c:dd:8f:99:ca:35:43:ea:cf:4a:e7:49:9b:af:b6:
b5:c0:07:9b:ce:ca:c9:c1:9c:cb:67:08:9c:e1:b0:
9b:29:4f:1e:27:92:19:eb:f9:65:64:81:48:77:3f:
9c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:34:ED:F8:AC:65:85:7D:FB:AC:C3:C6:91:04:A7:D1:D7:2F:98:5C
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/GTTt-KxlhX37rMPGkQSn0dcvmFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.131.12.0/22
31.133.192.0/21
31.135.1.0/24
31.135.7.0/24
37.97.122.0/23
64.43.66.0-64.43.71.255
64.43.80.0-64.43.91.255
77.36.8.0/21
77.36.28.0-77.36.30.255
77.36.32.0-77.36.53.255
77.36.80.0-77.36.111.255
77.232.192.0-77.232.215.255
77.232.220.0/22
81.161.12.0/22
85.204.196.0/23
86.104.132.0/23
89.34.74.0/23
89.42.232.0/23
89.44.100.0/23
89.45.92.0/23
89.46.112.0/23
91.225.34.0/23
91.229.16.0/23
91.229.31.0/24
91.229.156.0/22
91.231.223.0-91.231.226.255
91.232.16.0/23
91.233.2.0/23
91.233.202.0/23
91.234.150.0/23
91.234.220.0/22
91.239.0.0/22
91.239.178.0/24
91.240.156.0/22
91.245.176.0/21
91.246.188.0/22
91.246.196.0/22
93.120.8.0/24
93.120.27.0-93.120.30.255
93.120.48.0-93.120.71.255
93.120.75.0-93.120.83.255
93.120.85.0-93.120.90.255
93.120.92.0/22
93.120.112.0/21
93.120.124.0/22
171.25.223.0/24
176.96.56.0/21
176.96.176.0/21
176.97.144.0/21
176.98.56.0/21
176.107.64.0/20
176.110.106.0/24
176.110.114.0/23
176.111.0.0/21
176.112.84.0/22
176.116.40.0/21
176.118.88.0/21
176.121.96.0/21
176.124.176.0/21
178.159.148.0-178.159.159.255
185.9.236.0-185.9.243.255
185.104.196.0/22
188.191.248.0/22
188.213.233.0/24
193.0.190.0/24
193.36.192.0/21
Signature Algorithm: sha256WithRSAEncryption
03:44:55:43:c6:e8:54:03:f1:6f:c5:2a:aa:f0:35:de:1d:52:
b8:ff:9f:25:a3:be:93:e4:f0:9b:1e:39:9e:d2:4f:1d:ba:b4:
3e:fd:b6:01:c8:85:99:bf:83:bc:f2:bf:eb:07:3d:82:60:dd:
b5:65:91:4b:7d:c3:7e:93:9f:94:29:3f:e4:a6:9a:b6:72:64:
24:2c:c5:72:e2:c3:d8:60:08:60:ae:e8:46:d3:87:f7:a7:c3:
fe:89:c6:db:93:99:3d:46:db:2b:42:4f:6f:80:c6:14:cd:43:
4f:9b:3b:38:e2:d8:7a:15:95:0e:5f:43:f1:a0:94:e2:13:54:
bd:de:f2:09:90:65:c8:d0:24:79:b1:07:14:fc:d1:f3:d7:b3:
c6:71:59:3e:35:ce:e2:68:dc:89:fd:bd:3e:a2:66:70:42:34:
d8:57:e6:c1:e2:5b:33:02:c5:b1:62:76:a9:2d:07:97:4d:91:
5c:1b:9f:82:b7:f4:85:d3:13:cd:6e:02:70:e3:ec:ec:ab:0c:
6a:55:a9:ae:43:73:11:57:24:24:56:dd:3d:7e:73:5d:95:91:
4e:4e:6f:86:2f:41:0a:79:20:ef:d2:22:0c:ec:16:54:56:33:
6d:73:16:ad:ae:b4:16:51:a4:13:04:47:85:f2:69:f5:0b:a6:
e7:c4:be:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:10:41 2025 by rpki-client