Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/0Juh101nKNocdIvurfBMW8fc-5E.roa
File: 0Juh101nKNocdIvurfBMW8fc-5E.roa (raw, json)
Hash identifier: TdiWkQbAbxxH6USw3v7QF68+ikvg8p+GhYu1xheuzw0=
Subject key identifier: D0:9B:A1:D7:4D:67:28:DA:1C:74:8B:EE:AD:F0:4C:5B:C7:DC:FB:91
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184F1F51574DA5BA276C24E169754883C7D
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/0Juh101nKNocdIvurfBMW8fc-5E.roa
Signing time: Thu 08 Dec 2022 13:38:01 +0000
ROA not before: Thu 08 Dec 2022 13:38:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29648
IP address blocks: 193.201.228.0/22 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
31.173.119.0/24 maxlen: 24
212.119.160.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
77.233.160.0/19 maxlen: 19
77.233.161.0/24 maxlen: 24
77.233.164.0/24 maxlen: 24
77.233.160.0/24 maxlen: 24
77.233.162.0/24 maxlen: 24
77.233.166.0/24 maxlen: 24
77.233.167.0/24 maxlen: 24
77.233.170.0/24 maxlen: 24
195.78.116.0/23 maxlen: 24
31.173.104.0/24 maxlen: 24
31.173.105.0/24 maxlen: 24
31.173.112.0/24 maxlen: 24
31.173.108.0/24 maxlen: 24
31.173.109.0/24 maxlen: 24
31.173.110.0/24 maxlen: 24
31.173.106.0/24 maxlen: 24
31.173.111.0/24 maxlen: 24
31.173.107.0/24 maxlen: 24
31.173.116.0/24 maxlen: 24
31.173.113.0/24 maxlen: 24
31.173.117.0/24 maxlen: 24
31.173.114.0/24 maxlen: 24
31.173.118.0/24 maxlen: 24
31.173.115.0/24 maxlen: 24
77.233.173.0/24 maxlen: 24
77.233.178.0/24 maxlen: 24
77.233.185.0/24 maxlen: 24
77.233.181.0/24 maxlen: 24
77.233.180.0/24 maxlen: 24
77.233.186.0/24 maxlen: 24
77.233.182.0/24 maxlen: 24
77.233.188.0/24 maxlen: 24
77.233.191.0/24 maxlen: 24
77.233.190.0/24 maxlen: 24
212.44.64.0/19 maxlen: 24
195.16.96.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
188.170.98.0/24 maxlen: 24
86.109.192.0/19 maxlen: 19
86.109.192.0/20 maxlen: 20
188.170.96.0/24 maxlen: 24
188.170.97.0/24 maxlen: 24
188.170.102.0/24 maxlen: 24
86.109.193.0/24 maxlen: 24
188.170.103.0/24 maxlen: 24
188.170.99.0/24 maxlen: 24
188.170.100.0/24 maxlen: 24
188.170.104.0/24 maxlen: 24
86.109.195.0/24 maxlen: 24
188.170.101.0/24 maxlen: 24
188.170.105.0/24 maxlen: 24
188.170.110.0/24 maxlen: 24
188.170.106.0/24 maxlen: 24
188.170.111.0/24 maxlen: 24
188.170.107.0/24 maxlen: 24
86.109.200.0/23 maxlen: 23
188.170.108.0/24 maxlen: 24
212.69.96.0/19 maxlen: 24
188.170.109.0/24 maxlen: 24
188.170.112.0/24 maxlen: 24
188.170.114.0/24 maxlen: 24
86.109.213.0/24 maxlen: 24
188.170.115.0/24 maxlen: 24
188.170.116.0/24 maxlen: 24
86.109.212.0/24 maxlen: 24
86.109.208.0/24 maxlen: 24
188.170.118.0/24 maxlen: 24
188.170.117.0/24 maxlen: 24
188.170.113.0/24 maxlen: 24
86.109.210.0/24 maxlen: 24
188.170.119.0/24 maxlen: 24
188.170.123.0/24 maxlen: 24
86.109.216.0/24 maxlen: 24
188.170.122.0/24 maxlen: 24
86.109.215.0/24 maxlen: 24
86.109.218.0/23 maxlen: 23
188.170.125.0/24 maxlen: 24
188.170.121.0/24 maxlen: 24
188.170.120.0/24 maxlen: 24
86.109.214.0/24 maxlen: 24
188.170.124.0/24 maxlen: 24
188.170.127.0/24 maxlen: 24
86.109.220.0/24 maxlen: 24
188.170.126.0/24 maxlen: 24
86.109.223.0/24 maxlen: 24
86.109.222.0/24 maxlen: 24
78.109.120.0/24 maxlen: 24
78.109.121.0/24 maxlen: 24
185.210.140.0/22 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
178.176.98.0/24 maxlen: 24
195.149.111.0/24 maxlen: 24
178.176.96.0/24 maxlen: 24
178.176.97.0/24 maxlen: 24
178.176.102.0/24 maxlen: 24
178.176.103.0/24 maxlen: 24
178.176.99.0/24 maxlen: 24
178.176.100.0/24 maxlen: 24
178.176.101.0/24 maxlen: 24
178.176.118.0/24 maxlen: 24
178.176.114.0/24 maxlen: 24
178.176.115.0/24 maxlen: 24
178.176.116.0/24 maxlen: 24
178.176.117.0/24 maxlen: 24
178.176.122.0/24 maxlen: 24
178.176.123.0/24 maxlen: 24
178.176.119.0/24 maxlen: 24
178.176.124.0/24 maxlen: 24
178.176.120.0/24 maxlen: 24
178.176.125.0/24 maxlen: 24
178.176.121.0/24 maxlen: 24
178.176.126.0/24 maxlen: 24
178.176.127.0/24 maxlen: 24
83.169.217.0/24 maxlen: 24
83.169.218.0/24 maxlen: 24
83.169.219.0/24 maxlen: 24
83.169.220.0/24 maxlen: 24
83.169.221.0/24 maxlen: 24
83.169.222.0/24 maxlen: 24
83.169.223.0/24 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f1:f5:15:74:da:5b:a2:76:c2:4e:16:97:54:88:3c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 8 13:38:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d09ba1d74d6728da1c748beeadf04c5bc7dcfb91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e3:ff:e1:01:de:73:85:fc:be:60:bc:2b:7e:
06:37:4f:a5:ee:94:56:cb:5d:b9:9c:bc:b3:e1:f1:
35:c9:64:7a:e2:65:d9:fd:7a:a9:25:28:6d:00:42:
b6:5b:ba:59:1e:8a:2e:81:d2:57:99:87:cb:54:8b:
da:f4:b8:81:2b:85:29:ec:62:01:30:02:64:e5:8a:
3d:77:60:54:fb:cc:ca:0d:8f:6e:65:2f:48:10:b0:
50:52:b5:e9:bb:c5:31:18:2e:7b:b9:b5:df:8b:7e:
80:b2:c2:bd:18:c3:32:ec:57:e6:7e:2e:3c:11:21:
3a:a5:09:eb:4b:6c:67:a7:f0:2a:f6:5b:bb:e7:66:
c8:de:cf:f8:06:b4:c0:fa:78:d7:fe:47:17:3a:c0:
f1:03:2e:a8:25:ac:bd:f2:b1:96:08:9a:27:18:15:
fd:c7:5e:8f:88:31:e1:ab:95:b4:2d:35:17:ed:ea:
fc:05:33:1d:34:77:2a:62:fd:c6:37:81:cf:43:93:
f2:bb:7f:af:68:a8:8f:e5:dc:ae:80:2b:32:7e:3a:
c1:0a:fb:09:15:15:d1:97:7a:95:19:19:9c:1a:ff:
3d:0e:e0:4e:ca:00:72:0d:ae:63:00:0b:20:d6:80:
38:c4:e4:45:ca:12:1d:36:54:f1:d0:4c:85:49:1d:
ed:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:9B:A1:D7:4D:67:28:DA:1C:74:8B:EE:AD:F0:4C:5B:C7:DC:FB:91
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/0Juh101nKNocdIvurfBMW8fc-5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.104.0-31.173.119.255
77.233.160.0/19
78.109.120.0/23
83.169.217.0-83.169.223.255
86.109.192.0/19
178.176.96.0/21
178.176.114.0-178.176.127.255
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
188.170.96.0/19
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
ab:79:30:24:1a:ff:76:da:91:3a:19:68:89:af:db:e6:62:ea:
3b:71:d4:b6:82:d5:16:1c:6f:a6:3f:08:80:2e:96:61:76:fc:
10:34:be:53:f7:d7:4a:97:38:f4:76:f3:e2:b9:f9:f7:56:b0:
9a:19:85:d3:93:d2:2f:e0:46:73:a8:f3:44:2a:49:5c:78:80:
d4:37:97:db:86:95:5b:bc:69:6d:00:87:4d:45:96:1c:1b:9f:
5f:a8:60:20:81:9b:f3:29:f7:fc:a2:39:40:71:5b:03:57:96:
a8:7b:81:ca:0f:da:ea:bd:7c:42:b0:e7:1b:77:73:2a:97:9c:
1a:e9:53:7a:ad:73:e0:7f:52:38:05:6e:6f:80:4f:61:c9:19:
ac:91:56:0a:a2:99:3b:12:c2:99:fe:c3:0f:da:31:c0:e3:a0:
fe:65:c8:05:60:3a:9e:af:80:f4:c2:68:1e:d3:62:c4:52:fe:
f1:91:03:c7:9d:e1:3c:9e:55:93:51:b7:be:a0:29:82:73:a8:
38:4e:45:f7:0b:ba:2d:fe:a2:91:4c:63:82:cd:8a:fe:9e:67:
2a:91:02:86:54:ef:c8:18:97:1b:44:b8:ac:dd:f2:99:db:d2:
1c:56:19:15:b5:d7:09:e2:5e:bf:8a:d8:14:20:a4:d1:f0:61:
17:f8:22:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:26:03 2025 by rpki-client