Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/MMsoFYMlf3lz5X0pDWa1k7q5u5Q.roa
File: MMsoFYMlf3lz5X0pDWa1k7q5u5Q.roa (raw, json)
Hash identifier: 2cRjKiLLq409oV3H3w03WuAOBjBM+sqVFpy4OKfY030=
Subject key identifier: 30:CB:28:15:83:25:7F:79:73:E5:7D:29:0D:66:B5:93:BA:B9:BB:94
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 01948E409D89D6F794EED70A6CF4164742F6
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/MMsoFYMlf3lz5X0pDWa1k7q5u5Q.roa
Signing time: Wed 22 Jan 2025 13:43:06 +0000
ROA not before: Wed 22 Jan 2025 13:43:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 31.131.12.0/22 maxlen: 22
31.133.192.0/24 maxlen: 24
31.133.193.0/24 maxlen: 24
31.133.194.0/24 maxlen: 24
31.133.195.0/24 maxlen: 24
31.133.196.0/23 maxlen: 23
31.133.198.0/24 maxlen: 24
31.133.199.0/24 maxlen: 24
31.135.1.0/24 maxlen: 24
31.135.7.0/24 maxlen: 24
37.97.122.0/23 maxlen: 23
64.43.66.0/23 maxlen: 23
64.43.68.0/22 maxlen: 22
64.43.80.0/21 maxlen: 21
64.43.88.0/22 maxlen: 22
77.36.8.0/21 maxlen: 21
77.36.28.0/23 maxlen: 23
77.36.30.0/24 maxlen: 24
77.36.32.0/22 maxlen: 22
77.36.36.0/23 maxlen: 23
77.36.38.0/23 maxlen: 23
77.36.40.0/21 maxlen: 21
77.36.48.0/22 maxlen: 22
77.36.52.0/23 maxlen: 23
77.36.80.0/21 maxlen: 21
77.36.89.0/24 maxlen: 24
77.36.90.0/23 maxlen: 23
77.36.92.0/22 maxlen: 22
77.36.96.0/20 maxlen: 20
77.232.192.0/23 maxlen: 24
77.232.194.0/23 maxlen: 23
77.232.196.0/22 maxlen: 22
77.232.200.0/22 maxlen: 22
77.232.204.0/22 maxlen: 22
77.232.208.0/21 maxlen: 21
77.232.220.0/22 maxlen: 22
81.161.12.0/22 maxlen: 22
85.204.196.0/23 maxlen: 24
86.104.132.0/23 maxlen: 24
89.34.74.0/23 maxlen: 24
89.42.232.0/23 maxlen: 24
89.44.100.0/23 maxlen: 24
89.45.92.0/23 maxlen: 24
89.46.112.0/23 maxlen: 24
91.225.34.0/24 maxlen: 24
91.225.35.0/24 maxlen: 24
91.229.16.0/23 maxlen: 23
91.229.31.0/24 maxlen: 24
91.229.156.0/23 maxlen: 23
91.229.158.0/24 maxlen: 24
91.229.159.0/24 maxlen: 24
91.231.223.0/24 maxlen: 24
91.231.224.0/23 maxlen: 23
91.231.226.0/24 maxlen: 24
91.232.16.0/23 maxlen: 23
91.233.2.0/23 maxlen: 23
91.233.202.0/23 maxlen: 23
91.234.150.0/23 maxlen: 23
91.234.220.0/23 maxlen: 23
91.234.222.0/23 maxlen: 23
91.239.0.0/22 maxlen: 22
91.239.178.0/24 maxlen: 24
91.240.156.0/22 maxlen: 22
91.245.176.0/21 maxlen: 21
91.246.188.0/22 maxlen: 22
91.246.196.0/22 maxlen: 22
93.120.8.0/24 maxlen: 24
93.120.27.0/24 maxlen: 24
93.120.28.0/23 maxlen: 23
93.120.30.0/24 maxlen: 24
93.120.48.0/20 maxlen: 20
93.120.64.0/21 maxlen: 21
93.120.75.0/24 maxlen: 24
93.120.76.0/22 maxlen: 22
93.120.80.0/22 maxlen: 22
93.120.85.0/24 maxlen: 24
93.120.86.0/23 maxlen: 23
93.120.88.0/23 maxlen: 23
93.120.90.0/24 maxlen: 24
93.120.92.0/23 maxlen: 23
93.120.94.0/23 maxlen: 23
93.120.112.0/21 maxlen: 21
93.120.124.0/22 maxlen: 22
109.207.140.0/23 maxlen: 23
171.25.223.0/24 maxlen: 24
176.96.56.0/21 maxlen: 21
176.96.176.0/22 maxlen: 22
176.96.180.0/22 maxlen: 22
176.97.144.0/22 maxlen: 22
176.97.148.0/22 maxlen: 22
176.98.56.0/22 maxlen: 22
176.98.60.0/22 maxlen: 22
176.107.64.0/20 maxlen: 24
176.110.106.0/24 maxlen: 24
176.110.114.0/23 maxlen: 23
176.111.0.0/22 maxlen: 22
176.111.4.0/22 maxlen: 22
176.112.84.0/22 maxlen: 22
176.116.40.0/21 maxlen: 21
176.118.88.0/22 maxlen: 22
176.118.92.0/22 maxlen: 22
176.121.96.0/21 maxlen: 21
176.124.176.0/22 maxlen: 22
176.124.180.0/22 maxlen: 22
178.159.148.0/22 maxlen: 22
178.159.152.0/21 maxlen: 21
185.9.236.0/22 maxlen: 22
185.9.240.0/22 maxlen: 22
185.104.196.0/22 maxlen: 24
188.191.248.0/22 maxlen: 22
188.213.233.0/24 maxlen: 24
193.0.190.0/24 maxlen: 24
193.36.192.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8e:40:9d:89:d6:f7:94:ee:d7:0a:6c:f4:16:47:42:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jan 22 13:43:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=30cb281583257f7973e57d290d66b593bab9bb94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:14:7a:2f:16:06:d8:34:2c:d2:bb:bb:2d:6f:
9a:02:91:44:e0:72:85:c2:f5:38:9f:20:29:b1:39:
2f:a0:bf:57:1f:f4:a5:66:27:db:7d:85:3a:41:d9:
b1:b6:fb:65:d1:31:97:b7:2b:3a:2b:10:c9:84:22:
d6:82:78:54:a5:24:23:c8:75:53:e3:25:96:93:ec:
76:50:49:20:0d:32:78:b8:01:73:6a:17:87:9e:f1:
45:39:cc:06:93:87:11:ac:57:3d:7f:6b:d0:3f:0a:
12:0d:5f:be:a9:a3:e8:2a:57:b6:ff:b0:00:7c:92:
81:22:6d:07:54:c9:2d:15:1c:3b:77:7e:2d:e6:6e:
e6:1a:a8:7b:99:1e:d0:79:bc:97:97:e0:c1:0a:ac:
de:b7:ce:af:11:8d:b4:85:ad:91:2d:6a:a5:22:fe:
15:e2:30:3b:25:38:57:30:76:a1:10:7b:73:21:3d:
64:06:fc:60:67:c7:9d:54:ec:3c:9e:53:0a:e3:ad:
9f:d1:d0:09:fd:11:fc:00:e0:8c:f8:b0:e6:f3:66:
77:eb:2a:ee:cb:5a:a7:2d:df:d6:d2:05:51:24:a8:
31:e0:7c:85:60:53:3c:26:32:9a:36:b2:44:17:4d:
ed:cb:ba:e3:45:c0:60:55:99:83:af:8a:d2:2c:98:
73:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:CB:28:15:83:25:7F:79:73:E5:7D:29:0D:66:B5:93:BA:B9:BB:94
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/MMsoFYMlf3lz5X0pDWa1k7q5u5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.131.12.0/22
31.133.192.0/21
31.135.1.0/24
31.135.7.0/24
37.97.122.0/23
64.43.66.0-64.43.71.255
64.43.80.0-64.43.91.255
77.36.8.0/21
77.36.28.0-77.36.30.255
77.36.32.0-77.36.53.255
77.36.80.0/21
77.36.89.0-77.36.111.255
77.232.192.0-77.232.215.255
77.232.220.0/22
81.161.12.0/22
85.204.196.0/23
86.104.132.0/23
89.34.74.0/23
89.42.232.0/23
89.44.100.0/23
89.45.92.0/23
89.46.112.0/23
91.225.34.0/23
91.229.16.0/23
91.229.31.0/24
91.229.156.0/22
91.231.223.0-91.231.226.255
91.232.16.0/23
91.233.2.0/23
91.233.202.0/23
91.234.150.0/23
91.234.220.0/22
91.239.0.0/22
91.239.178.0/24
91.240.156.0/22
91.245.176.0/21
91.246.188.0/22
91.246.196.0/22
93.120.8.0/24
93.120.27.0-93.120.30.255
93.120.48.0-93.120.71.255
93.120.75.0-93.120.83.255
93.120.85.0-93.120.90.255
93.120.92.0/22
93.120.112.0/21
93.120.124.0/22
109.207.140.0/23
171.25.223.0/24
176.96.56.0/21
176.96.176.0/21
176.97.144.0/21
176.98.56.0/21
176.107.64.0/20
176.110.106.0/24
176.110.114.0/23
176.111.0.0/21
176.112.84.0/22
176.116.40.0/21
176.118.88.0/21
176.121.96.0/21
176.124.176.0/21
178.159.148.0-178.159.159.255
185.9.236.0-185.9.243.255
185.104.196.0/22
188.191.248.0/22
188.213.233.0/24
193.0.190.0/24
193.36.192.0/21
Signature Algorithm: sha256WithRSAEncryption
5e:a5:19:3b:1d:76:bb:73:3e:e8:59:e2:25:66:3f:d8:07:ee:
cb:e4:b5:b5:5e:3b:75:8a:30:07:52:da:5c:0d:53:03:53:61:
61:82:4b:95:84:52:a5:7c:23:2e:ac:7b:a9:8c:c2:8d:57:23:
8d:b1:5c:10:5b:10:03:57:3d:18:f4:86:cd:f9:f8:71:d4:c4:
95:b5:5f:21:aa:fe:d7:2a:b6:78:bb:3f:d5:93:d4:66:45:59:
1e:45:27:2f:af:9b:f9:b3:2b:35:66:38:5b:b8:50:34:86:e0:
5c:f1:62:d5:27:d3:6d:6d:28:91:70:71:ee:9b:95:af:e0:62:
ef:c4:2e:a3:0b:aa:51:35:57:2f:38:0f:73:b9:06:31:02:55:
34:4d:5e:d9:4c:1c:0a:76:d8:4e:64:a7:c8:2b:11:85:c0:7b:
90:0d:a3:f3:b2:34:fa:18:da:ea:8a:73:52:8c:36:23:c4:78:
8f:1f:0b:f4:bd:9e:8c:ac:b3:c4:aa:5d:9b:d9:68:1d:29:7b:
1a:6e:1d:cf:a9:5b:6d:a1:6f:e7:5c:65:9b:c0:ca:a1:88:cc:
ea:f5:28:3d:18:cf:2a:1e:2f:ff:1d:e6:e7:4d:ab:73:63:de:
e6:d7:23:20:0c:a9:d4:18:a1:80:fd:26:d2:fe:b3:4d:f6:10:
2b:13:0f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:56:04 2025 by rpki-client