Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/9j3QaGS-rolyjMbNGSwbLsKK6ro.roa
File: 9j3QaGS-rolyjMbNGSwbLsKK6ro.roa (raw, json)
Hash identifier: Ll5zsDqL8QlRWC5iEoqxjCt8hI+5NcJRamMDmRGnwOM=
Subject key identifier: F6:3D:D0:68:64:BE:AE:89:72:8C:C6:CD:19:2C:1B:2E:C2:8A:EA:BA
Certificate issuer: /CN=e9e5b014e569186fb84a2024954cccc9c91b1e3f
Certificate serial: 0192F75B7FE78C4662319F81A2126819FD4B
Authority key identifier: E9:E5:B0:14:E5:69:18:6F:B8:4A:20:24:95:4C:CC:C9:C9:1B:1E:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6eWwFOVpGG-4SiAklUzMyckbHj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/9j3QaGS-rolyjMbNGSwbLsKK6ro.roa
Signing time: Mon 04 Nov 2024 13:27:01 +0000
ROA not before: Mon 04 Nov 2024 13:27:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9146
IP address blocks: 31.176.128.0/17 maxlen: 21
31.176.128.0/19 maxlen: 19
31.176.128.0/20 maxlen: 20
31.176.144.0/20 maxlen: 20
31.176.160.0/19 maxlen: 19
31.176.160.0/20 maxlen: 20
31.176.176.0/20 maxlen: 20
31.176.192.0/20 maxlen: 20
31.176.208.0/21 maxlen: 21
31.176.216.0/22 maxlen: 22
31.176.220.0/22 maxlen: 22
31.176.224.0/20 maxlen: 20
31.176.240.0/20 maxlen: 20
37.203.64.0/18 maxlen: 21
37.203.64.0/20 maxlen: 20
37.203.80.0/20 maxlen: 20
37.203.96.0/20 maxlen: 20
37.203.112.0/22 maxlen: 22
37.203.120.0/22 maxlen: 22
37.203.124.0/22 maxlen: 22
80.65.64.0/19 maxlen: 21
80.65.64.0/20 maxlen: 20
80.65.64.0/21 maxlen: 21
80.65.64.0/22 maxlen: 22
80.65.68.0/22 maxlen: 22
80.65.72.0/21 maxlen: 21
80.65.72.0/22 maxlen: 22
80.65.76.0/22 maxlen: 22
80.65.80.0/20 maxlen: 20
80.65.80.0/21 maxlen: 21
80.65.80.0/22 maxlen: 22
80.65.84.0/22 maxlen: 22
80.65.88.0/21 maxlen: 21
80.65.88.0/22 maxlen: 22
80.65.92.0/22 maxlen: 22
85.92.224.0/19 maxlen: 21
85.92.226.0/24 maxlen: 24
85.92.227.0/24 maxlen: 24
85.92.228.0/23 maxlen: 23
85.92.230.0/24 maxlen: 24
85.92.232.0/21 maxlen: 21
85.92.240.0/21 maxlen: 21
89.146.128.0/18 maxlen: 21
89.146.128.0/20 maxlen: 20
89.146.144.0/20 maxlen: 20
89.146.160.0/20 maxlen: 20
89.146.176.0/20 maxlen: 20
92.36.128.0/17 maxlen: 21
92.36.128.0/19 maxlen: 19
92.36.128.0/21 maxlen: 21
92.36.136.0/21 maxlen: 21
92.36.144.0/20 maxlen: 20
92.36.160.0/19 maxlen: 19
92.36.160.0/20 maxlen: 20
92.36.176.0/20 maxlen: 20
92.36.192.0/19 maxlen: 19
92.36.192.0/20 maxlen: 20
92.36.192.0/21 maxlen: 21
92.36.208.0/20 maxlen: 20
92.36.224.0/19 maxlen: 19
92.36.224.0/20 maxlen: 20
92.36.232.0/22 maxlen: 22
92.36.236.0/22 maxlen: 22
92.36.240.0/21 maxlen: 21
109.163.128.0/18 maxlen: 18
109.163.128.0/19 maxlen: 19
109.163.128.0/22 maxlen: 22
109.163.132.0/22 maxlen: 22
109.163.136.0/21 maxlen: 21
109.163.144.0/23 maxlen: 23
109.163.146.0/24 maxlen: 24
109.163.147.0/24 maxlen: 24
109.163.148.0/22 maxlen: 22
109.163.152.0/21 maxlen: 21
109.163.160.0/20 maxlen: 20
109.163.160.0/21 maxlen: 21
109.163.168.0/21 maxlen: 23
109.163.168.0/23 maxlen: 23
109.163.170.0/24 maxlen: 24
109.163.171.0/24 maxlen: 24
109.163.172.0/22 maxlen: 22
109.163.176.0/20 maxlen: 21
109.163.176.0/21 maxlen: 21
109.163.184.0/21 maxlen: 21
109.163.184.0/22 maxlen: 22
109.163.188.0/23 maxlen: 23
109.163.190.0/23 maxlen: 23
109.175.0.0/17 maxlen: 21
109.175.0.0/19 maxlen: 19
109.175.4.0/23 maxlen: 23
109.175.6.0/23 maxlen: 23
109.175.8.0/24 maxlen: 24
109.175.12.0/23 maxlen: 23
109.175.14.0/23 maxlen: 23
109.175.15.0/24 maxlen: 24
109.175.16.0/22 maxlen: 22
109.175.20.0/23 maxlen: 23
109.175.22.0/23 maxlen: 23
109.175.24.0/24 maxlen: 24
109.175.26.0/24 maxlen: 24
109.175.28.0/23 maxlen: 23
109.175.30.0/24 maxlen: 24
109.175.32.0/19 maxlen: 19
109.175.32.0/21 maxlen: 21
109.175.38.0/23 maxlen: 23
109.175.40.0/22 maxlen: 22
109.175.44.0/23 maxlen: 23
109.175.46.0/23 maxlen: 23
109.175.48.0/20 maxlen: 20
109.175.64.0/20 maxlen: 20
109.175.96.0/19 maxlen: 19
109.175.96.0/22 maxlen: 22
109.175.96.0/23 maxlen: 23
109.175.98.0/23 maxlen: 23
109.175.100.0/22 maxlen: 22
109.175.100.0/23 maxlen: 23
109.175.102.0/23 maxlen: 23
109.175.104.0/22 maxlen: 22
109.175.104.0/23 maxlen: 23
109.175.106.0/23 maxlen: 23
109.175.108.0/22 maxlen: 22
109.175.112.0/22 maxlen: 22
109.175.116.0/22 maxlen: 22
109.175.120.0/22 maxlen: 22
109.175.124.0/22 maxlen: 22
185.12.76.0/24 maxlen: 24
185.12.78.0/23 maxlen: 23
195.222.32.0/19 maxlen: 21
195.222.32.0/20 maxlen: 20
195.222.32.0/21 maxlen: 21
195.222.40.0/21 maxlen: 21
195.222.48.0/20 maxlen: 20
195.222.48.0/21 maxlen: 21
195.222.49.0/24 maxlen: 24
195.222.56.0/21 maxlen: 21
2a02:27b0::/32 maxlen: 32
2a02:27b0:4100::/40 maxlen: 40
2a02:27b0:4200::/40 maxlen: 40
2a02:27b0:4300::/40 maxlen: 40
2a02:27b0:4400::/40 maxlen: 40
2a02:27b0:4500::/40 maxlen: 40
2a02:27b0:4800::/40 maxlen: 40
2a02:27b0:4900::/40 maxlen: 40
2a02:27b0:4a00::/40 maxlen: 40
2a02:27b0:4b00::/40 maxlen: 40
2a02:27b0:4c00::/40 maxlen: 40
2a02:27b0:4d00::/40 maxlen: 40
2a02:27b0:5300::/40 maxlen: 40
2a02:27b0:5500::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f7:5b:7f:e7:8c:46:62:31:9f:81:a2:12:68:19:fd:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9e5b014e569186fb84a2024954cccc9c91b1e3f
Validity
Not Before: Nov 4 13:27:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f63dd06864beae89728cc6cd192c1b2ec28aeaba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a7:16:76:a0:f8:75:4a:9a:1c:11:da:e7:53:
9d:e1:0f:8c:e8:09:e6:ef:ba:13:39:6e:79:22:ae:
64:1c:99:3f:41:8f:c4:76:ae:2f:b0:55:03:86:42:
c1:7e:be:68:29:e9:51:a9:2f:1d:89:8f:64:8d:54:
d8:e8:0d:9a:84:57:d2:0f:f9:51:81:6f:73:e0:b9:
92:6d:fe:76:8e:9a:e8:61:b5:33:63:36:13:fa:52:
bc:2d:c7:38:72:3e:df:33:f8:ed:93:58:73:af:7b:
4d:8e:bd:e7:07:41:c2:63:7f:75:37:43:f2:79:72:
d4:ec:02:b3:d9:bc:a1:bc:95:ad:86:07:5a:5c:e0:
56:95:ca:d7:a8:52:d9:48:23:bb:b6:7c:eb:04:fe:
69:76:51:e9:a9:d4:74:64:97:fb:e1:22:5a:ce:10:
5a:e9:02:be:04:8d:50:e3:67:1c:c6:9e:02:21:c8:
d9:7e:96:af:8e:5e:66:80:7b:c7:42:c7:09:05:6d:
b7:a0:fc:b9:f4:bf:fb:b5:ae:35:90:c1:39:44:be:
31:6b:ce:5b:92:4c:70:bf:a8:9a:68:91:4a:4f:96:
7e:84:a9:5f:0f:39:ea:af:b3:c2:1b:f7:06:45:97:
9c:89:60:bf:ac:30:ba:3e:f3:23:ec:8d:28:93:e1:
83:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:3D:D0:68:64:BE:AE:89:72:8C:C6:CD:19:2C:1B:2E:C2:8A:EA:BA
X509v3 Authority Key Identifier:
keyid:E9:E5:B0:14:E5:69:18:6F:B8:4A:20:24:95:4C:CC:C9:C9:1B:1E:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6eWwFOVpGG-4SiAklUzMyckbHj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/9j3QaGS-rolyjMbNGSwbLsKK6ro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d7367d-7bbf-4697-96cd-2bb1efc57a86/1/6eWwFOVpGG-4SiAklUzMyckbHj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.176.128.0/17
37.203.64.0/18
80.65.64.0/19
85.92.224.0/19
89.146.128.0/18
92.36.128.0/17
109.163.128.0/18
109.175.0.0/17
185.12.76.0/24
185.12.78.0/23
195.222.32.0/19
IPv6:
2a02:27b0::/32
Signature Algorithm: sha256WithRSAEncryption
44:19:3a:ec:0b:18:0a:32:96:16:26:71:99:57:75:3e:fe:73:
05:76:18:16:b9:82:af:dc:4c:2d:b6:61:fe:e8:c9:48:86:9b:
ca:75:32:08:09:52:cf:32:42:04:19:08:0d:53:bd:ee:3d:82:
c7:fd:d9:5d:05:f2:4b:4c:99:85:26:59:d3:4c:24:aa:83:6c:
d1:eb:12:47:85:c0:b5:e0:80:c1:ce:a7:87:d2:06:37:07:e3:
0f:7d:a9:87:20:f0:f8:58:a6:fb:cd:92:e3:c1:8f:05:ba:7c:
38:f4:a8:6a:6e:2a:13:ea:b8:d4:b8:20:a1:60:f6:4e:53:e4:
09:24:18:9d:54:39:23:ba:00:a8:44:20:a0:24:03:15:f0:33:
83:04:04:30:42:c3:93:b9:7c:8e:b8:f9:c7:2d:a3:76:f7:fa:
29:3c:6d:99:d3:b1:f9:31:a1:aa:37:fb:1a:b5:ba:9c:4b:3a:
ee:97:d7:26:e1:1b:72:a8:80:e9:59:85:22:93:cc:05:50:07:
0b:80:53:32:9f:de:f9:c5:79:df:12:02:7d:fa:2f:96:5f:4a:
5b:3b:6a:87:5a:f6:b6:53:41:9a:6c:c5:85:99:18:dd:6b:b8:
05:87:54:6c:26:78:46:8c:40:64:40:b7:55:bd:fc:04:9a:57:
ba:76:77:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:31 2025 by rpki-client