Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/6ceqA5E5sgtoFhEAo-RLY0Cdm8g.roa
File: 6ceqA5E5sgtoFhEAo-RLY0Cdm8g.roa (raw, json)
Hash identifier: aw7/NZZIl3iWvJbgc2JkJhp8tar1tBsRMnOxHQ2NVJE=
Subject key identifier: E9:C7:AA:03:91:39:B2:0B:68:16:11:00:A3:E4:4B:63:40:9D:9B:C8
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184F1463D504AD6FBE900A046884C97BBD6
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/6ceqA5E5sgtoFhEAo-RLY0Cdm8g.roa
Signing time: Thu 08 Dec 2022 10:27:02 +0000
ROA not before: Thu 08 Dec 2022 10:27:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31205
IP address blocks: 109.188.0.0/16 maxlen: 24
195.16.96.0/19 maxlen: 24
188.170.247.0/24 maxlen: 24
193.201.228.0/22 maxlen: 24
85.26.226.0/24 maxlen: 24
85.26.224.0/24 maxlen: 24
85.26.230.0/24 maxlen: 24
85.26.229.0/24 maxlen: 24
85.26.228.0/24 maxlen: 24
85.26.231.0/24 maxlen: 24
85.26.227.0/24 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
212.69.96.0/19 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
178.176.240.0/22 maxlen: 22
178.176.244.0/22 maxlen: 22
78.25.92.0/23 maxlen: 23
78.25.94.0/23 maxlen: 23
37.29.86.0/23 maxlen: 23
188.170.240.0/22 maxlen: 22
31.173.240.0/23 maxlen: 23
195.5.128.0/19 maxlen: 24
31.173.242.0/23 maxlen: 23
128.204.64.0/18 maxlen: 24
31.173.244.0/22 maxlen: 22
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
83.149.50.0/24 maxlen: 24
195.78.116.0/23 maxlen: 24
83.149.49.0/24 maxlen: 24
83.149.48.0/24 maxlen: 24
83.149.51.0/24 maxlen: 24
178.176.48.0/24 maxlen: 24
83.169.252.0/22 maxlen: 22
83.169.248.0/22 maxlen: 22
188.162.0.0/16 maxlen: 24
109.74.112.0/20 maxlen: 24
188.94.168.0/21 maxlen: 24
46.232.202.0/23 maxlen: 23
46.232.200.0/23 maxlen: 23
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
212.44.64.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f1:46:3d:50:4a:d6:fb:e9:00:a0:46:88:4c:97:bb:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 8 10:27:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e9c7aa039139b20b68161100a3e44b63409d9bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f0:0b:58:6d:55:e6:40:74:19:91:23:8e:6b:
a7:da:dd:2e:65:02:57:5c:63:e1:a3:45:14:48:36:
74:31:0c:fd:4c:9c:50:0f:0e:98:d5:33:af:90:ae:
c8:8f:5d:85:08:52:51:89:a3:2e:41:3b:28:83:e5:
c0:d6:22:7a:46:cd:a8:ad:83:80:4b:1e:e9:7b:8e:
60:f0:7e:d3:bb:64:6e:29:1c:69:c9:22:d2:53:b4:
b3:69:ee:12:1d:51:90:af:7b:20:71:97:ed:74:ab:
e2:f2:92:3d:1a:f3:68:44:33:d9:eb:be:22:5f:8b:
e0:55:86:43:9f:34:45:31:58:87:3b:20:45:15:69:
8e:a1:1e:97:65:03:50:0b:58:35:10:b0:44:87:85:
0e:3a:d6:64:a4:62:f8:02:32:53:1d:f1:7e:38:b7:
d7:10:9c:05:62:b2:65:88:2a:b0:c3:57:19:60:47:
ba:0d:1b:c1:75:41:7c:9c:77:5f:ed:ca:d5:a2:10:
a4:15:eb:ed:be:70:06:5c:ed:3d:dd:85:a4:f1:55:
23:4c:95:07:6c:c8:5d:02:64:a9:63:50:10:67:fa:
a5:90:9b:e3:2f:1b:98:44:c3:db:24:ac:ca:c3:2e:
59:0f:70:8e:b2:99:f2:2a:8d:63:1a:10:38:13:84:
8e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C7:AA:03:91:39:B2:0B:68:16:11:00:A3:E4:4B:63:40:9D:9B:C8
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/6ceqA5E5sgtoFhEAo-RLY0Cdm8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.240.0/21
37.29.86.0/23
46.232.200.0/22
78.25.92.0/22
83.149.48.0/22
83.169.248.0/21
85.26.224.0/24
85.26.226.0-85.26.231.255
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.48.0/24
178.176.240.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
188.170.240.0/22
188.170.247.0/24
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
4d:4e:47:ef:87:5b:25:2f:d7:fe:3c:79:39:cc:75:6d:34:03:
ca:64:8f:3b:a2:63:f8:b3:d2:c0:a8:a8:df:a6:50:56:3e:9e:
f2:b8:25:c3:92:74:8b:75:5d:72:81:4b:df:07:93:ba:a7:c7:
b5:05:3d:b6:23:23:15:fb:b6:cd:9e:fa:d5:a4:0a:1e:ec:9b:
5b:d3:8b:48:c1:7f:3f:85:4b:5e:10:de:ff:07:13:7b:da:df:
0b:0b:19:df:dc:fc:01:c7:f9:85:2f:fb:91:1b:bd:0b:6b:35:
1f:8c:26:da:31:38:d1:3d:f6:b2:e3:df:68:80:26:d8:6e:e5:
5a:23:29:1d:e5:f4:4c:7d:2c:11:9f:5f:e1:1a:62:24:95:c2:
b3:75:47:74:12:f2:ce:71:0f:42:c5:1c:57:54:bc:f3:4d:7c:
21:bb:6c:47:71:4f:22:6c:af:ff:b1:32:87:93:14:8a:a4:7a:
cd:78:c3:d6:3f:93:bd:b4:d7:1b:ee:30:e7:c1:3e:03:b7:5b:
1b:ef:89:2c:27:66:5b:ad:94:86:0d:1e:b4:1e:aa:0c:43:9d:
c3:31:98:73:be:92:a2:c4:77:32:40:e1:af:d0:10:0c:b3:66:
87:5d:ce:96:29:16:95:8f:0b:e3:ee:37:0b:65:28:34:79:86:
eb:bc:51:5d
-----BEGIN CERTIFICATE-----
MIIF1DCCBLygAwIBAgISAYTxRj1QStb76QCgRohMl7vWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjIxMjA4MTAyNzAyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOWM3YWEwMzkxMzliMjBiNjgxNjExMDBhM2U0NGI2MzQwOWQ5YmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/ALWG1V5kB0GZEjjmun2t0uZQJX
XGPho0UUSDZ0MQz9TJxQDw6Y1TOvkK7Ij12FCFJRiaMuQTsog+XA1iJ6Rs2orYOA
Sx7pe45g8H7Tu2RuKRxpySLSU7Szae4SHVGQr3sgcZftdKvi8pI9GvNoRDPZ674i
X4vgVYZDnzRFMViHOyBFFWmOoR6XZQNQC1g1ELBEh4UOOtZkpGL4AjJTHfF+OLfX
EJwFYrJliCqww1cZYEe6DRvBdUF8nHdf7crVohCkFevtvnAGXO093YWk8VUjTJUH
bMhdAmSpY1AQZ/qlkJvjLxuYRMPbJKzKwy5ZD3COspnyKo1jGhA4E4SOxQIDAQAB
o4IC4DCCAtwwHQYDVR0OBBYEFOnHqgORObILaBYRAKPkS2NAnZvIMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvNmNlcUE1RTVzZ3RvRmhFQW8tUkxZMENkbThnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIH1BggrBgEFBQcBBwEB/wSB5TCB4jCB3wQCAAEwgdgDBAMf
rfADBAElHVYDBAIu6MgDBAJOGVwDBAJTlTADBANTqfgDBABVGuAwDAMEAVUa4gME
A1Ua4AMEBG1KcAMEBm18QAMDAG28AwQGgMxAAwQDsheQAwQAsrAwAwQDsrDwAwQC
uQMgAwQCudKMAwQDvF6oAwMAvKIDBAK8qvADBAC8qvcDBALByeQDBAXDBYADBAXD
EGADBAHDTnQDBADDlW8DBAXD5kADBAXUDqADBAXULEADBAXURWADBAXUd6ADBAXV
mqADBAXVqCADBAbV80ADBATZc1AwDQYJKoZIhvcNAQELBQADggEBAE1OR++HWyUv
1/48eTnMdW00A8pkjzuiY/iz0sCoqN+mUFY+nvK4JcOSdIt1XXKBS98Hk7qnx7UF
PbYjIxX7ts2e+tWkCh7sm1vTi0jBfz+FS14Q3v8HE3va3wsLGd/c/AHH+YUv+5Eb
vQtrNR+MJtoxONE99rLj32iAJthu5VojKR3l9Ex9LBGfX+EaYiSVwrN1R3QS8s5x
D0LFHFdUvPNNfCG7bEdxTyJsr/+xMoeTFIqkes14w9Y/k7201xvuMOfBPgO3Wxvv
iSwnZlutlIYNHrQeqgxDncMxmHO+kqLEdzJA4a/QEAyzZoddzpYpFpWPC+PuNwtl
KDR5huu8UV0=
-----END CERTIFICATE-----
Generated at Tue Apr 8 04:38:36 2025 by rpki-client