Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/1-SIPiAV58j-4vvhicVAufwUI-1Q.roa
File: 1-SIPiAV58j-4vvhicVAufwUI-1Q.roa (raw, json)
Hash identifier: f27SC9hTRXhCA9yj0JMRZrMHGM5WV62K2IOARtQoJZo=
Subject key identifier: F9:22:0F:88:05:79:F2:3F:B8:BE:F8:62:71:50:2E:7F:05:08:FB:54
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184F14BBA5824F450BB65EE29A13D2F6D36
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/1-SIPiAV58j-4vvhicVAufwUI-1Q.roa
Signing time: Thu 08 Dec 2022 10:33:02 +0000
ROA not before: Thu 08 Dec 2022 10:33:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31195
IP address blocks: 109.188.0.0/16 maxlen: 24
195.16.96.0/19 maxlen: 24
193.201.228.0/22 maxlen: 24
85.26.240.0/22 maxlen: 22
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
178.178.64.0/24 maxlen: 24
178.178.71.0/24 maxlen: 24
178.178.67.0/24 maxlen: 24
178.178.70.0/24 maxlen: 24
178.178.66.0/24 maxlen: 24
178.178.65.0/24 maxlen: 24
178.178.68.0/24 maxlen: 24
185.3.32.0/22 maxlen: 24
178.178.73.0/24 maxlen: 24
178.178.72.0/24 maxlen: 24
78.25.124.0/22 maxlen: 22
78.25.127.0/24 maxlen: 24
212.69.96.0/19 maxlen: 24
31.173.225.0/24 maxlen: 24
31.173.226.0/24 maxlen: 24
185.210.140.0/22 maxlen: 24
31.173.132.0/23 maxlen: 23
31.173.134.0/23 maxlen: 23
31.173.135.0/24 maxlen: 24
178.176.233.0/24 maxlen: 24
212.119.160.0/19 maxlen: 24
178.176.235.0/24 maxlen: 24
178.176.234.0/24 maxlen: 24
31.173.143.0/24 maxlen: 24
37.28.190.0/24 maxlen: 24
37.28.188.0/22 maxlen: 22
37.28.191.0/24 maxlen: 24
37.29.91.0/24 maxlen: 24
37.29.88.0/22 maxlen: 22
37.29.89.0/24 maxlen: 24
37.29.95.0/24 maxlen: 24
37.29.94.0/24 maxlen: 24
37.29.92.0/22 maxlen: 22
188.170.232.0/24 maxlen: 24
188.170.233.0/24 maxlen: 24
188.170.230.0/24 maxlen: 24
188.170.231.0/24 maxlen: 24
188.170.228.0/23 maxlen: 23
188.170.236.0/24 maxlen: 24
188.170.237.0/24 maxlen: 24
188.170.234.0/24 maxlen: 24
188.170.239.0/24 maxlen: 24
188.170.235.0/24 maxlen: 24
31.173.230.0/24 maxlen: 24
31.173.231.0/24 maxlen: 24
31.173.228.0/23 maxlen: 23
31.173.232.0/23 maxlen: 23
31.173.228.0/24 maxlen: 24
31.173.229.0/24 maxlen: 24
31.173.238.0/24 maxlen: 24
31.173.235.0/24 maxlen: 24
31.173.239.0/24 maxlen: 24
31.173.236.0/23 maxlen: 23
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
37.29.43.0/24 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.78.116.0/23 maxlen: 24
83.149.52.0/22 maxlen: 22
83.169.230.0/24 maxlen: 24
83.169.228.0/23 maxlen: 23
83.169.227.0/24 maxlen: 24
83.169.226.0/24 maxlen: 24
83.169.224.0/23 maxlen: 23
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
85.26.244.0/22 maxlen: 22
85.26.247.0/24 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
212.44.64.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f1:4b:ba:58:24:f4:50:bb:65:ee:29:a1:3d:2f:6d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 8 10:33:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f9220f880579f23fb8bef86271502e7f0508fb54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:dd:1f:c4:31:25:d4:70:2e:b9:46:dd:98:ed:
4f:68:d0:f9:58:11:bd:b0:8d:fa:f7:5e:c4:8e:8c:
61:62:74:40:83:45:ad:01:78:46:3d:c9:ff:46:a7:
b5:3d:23:e9:2d:5b:4a:23:96:2d:0c:c9:f2:80:46:
ff:ce:c6:14:d9:75:c6:e0:08:56:26:98:c0:80:64:
ac:5c:02:b1:83:68:40:dd:2c:29:17:33:60:c3:e3:
60:7a:09:a2:fc:b7:42:89:c9:2e:87:15:aa:72:11:
ca:07:1c:a4:ca:e6:75:db:21:8d:3e:69:9a:ed:1e:
b8:46:21:74:2a:d6:2b:a5:dc:d5:0d:87:f6:c9:f2:
0b:43:a0:5b:1f:d1:f8:d7:b6:74:05:6f:39:29:87:
87:1c:b3:9e:b2:63:20:22:07:0e:0a:22:e4:0e:8f:
0a:0a:0b:cc:9b:b1:ff:0d:8f:70:74:de:4f:86:b3:
ae:ea:da:2b:98:55:43:dc:53:b7:a0:9a:1b:95:10:
5d:2d:ea:96:76:f3:8f:f4:f4:e2:9e:3c:fb:09:bb:
77:88:76:71:72:0d:1a:74:f9:78:92:03:08:1b:d9:
17:ec:69:4e:d2:b0:a1:88:f1:0b:e3:36:b2:12:16:
21:d5:6e:56:48:ab:31:15:56:8f:3f:27:9f:67:63:
8f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:22:0F:88:05:79:F2:3F:B8:BE:F8:62:71:50:2E:7F:05:08:FB:54
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/1-SIPiAV58j-4vvhicVAufwUI-1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.132.0/22
31.173.143.0/24
31.173.225.0-31.173.226.255
31.173.228.0-31.173.233.255
31.173.235.0-31.173.239.255
37.28.188.0/22
37.29.43.0/24
37.29.88.0/21
78.25.124.0/22
83.149.52.0/22
83.169.224.0-83.169.230.255
85.26.240.0/21
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.233.0-178.176.235.255
178.178.64.0-178.178.68.255
178.178.70.0-178.178.73.255
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
188.170.228.0-188.170.237.255
188.170.239.0/24
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
99:3a:a0:44:0b:c7:cd:06:7b:14:c5:f8:e8:7f:12:a2:21:03:
17:a8:9c:d2:f7:be:92:38:c9:d2:a7:73:9f:20:39:fc:63:87:
fb:dd:92:e7:12:f0:40:13:54:3c:95:8f:9b:75:fc:e1:98:31:
20:b0:52:80:fd:49:12:6a:0b:9e:b4:34:ca:bf:34:54:87:01:
76:0a:2b:34:67:7d:37:8f:ac:ac:fb:1b:3c:70:b5:8b:c0:60:
ff:32:9b:69:d5:87:ff:24:f5:ba:b9:f4:8f:8d:f1:e2:09:34:
14:5e:8c:be:7d:9c:1d:3b:30:c2:be:77:a8:fa:4a:24:12:2e:
c3:8c:9f:4a:6d:cc:fe:2f:92:22:09:92:d0:57:3a:19:73:75:
13:0b:42:2c:4f:a1:04:8a:44:60:a6:be:ca:2d:45:59:a3:c5:
a0:f9:50:fb:41:b3:df:02:c1:6c:3d:c8:fe:9f:4b:49:5c:51:
48:b0:9a:a8:2f:42:41:d6:9e:a0:66:db:cb:07:ae:2e:b6:02:
9e:c9:dc:f1:59:a7:4e:d8:7a:22:08:2f:09:03:c5:2b:63:74:
7c:61:99:94:79:42:a7:52:13:29:44:ba:58:7d:91:16:eb:90:
22:97:b3:ba:13:9b:f5:0a:cf:71:f1:86:90:6d:75:54:1f:2a:
4f:79:cf:d9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Apr 8 04:23:30 2025 by rpki-client