Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/8u4rGVwsglKYb6qSiNYEmLpWuAE.roa
File: 8u4rGVwsglKYb6qSiNYEmLpWuAE.roa (raw, json)
Hash identifier: sa9MdpAf6qJ1aW+iLplCJVUOL11lpuJZQmWo5Hd7ygA=
Subject key identifier: F2:EE:2B:19:5C:2C:82:52:98:6F:AA:92:88:D6:04:98:BA:56:B8:01
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184F1C2B9FA95528949DFD49B4425371A60
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/8u4rGVwsglKYb6qSiNYEmLpWuAE.roa
Signing time: Thu 08 Dec 2022 12:43:01 +0000
ROA not before: Thu 08 Dec 2022 12:43:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25159
IP address blocks: 195.16.96.0/19 maxlen: 24
193.201.228.0/22 maxlen: 24
109.188.112.0/23 maxlen: 23
109.188.114.0/24 maxlen: 24
178.23.144.0/21 maxlen: 24
85.26.144.0/20 maxlen: 20
109.188.64.0/19 maxlen: 19
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
109.188.96.0/21 maxlen: 21
185.3.32.0/22 maxlen: 24
78.25.119.0/24 maxlen: 24
94.25.131.0/24 maxlen: 24
94.25.144.0/20 maxlen: 20
212.69.96.0/19 maxlen: 24
94.25.164.0/24 maxlen: 24
94.25.160.0/24 maxlen: 24
94.25.172.0/22 maxlen: 22
94.25.168.0/22 maxlen: 22
188.170.25.0/24 maxlen: 24
185.210.140.0/22 maxlen: 24
188.170.32.0/21 maxlen: 21
188.170.40.0/21 maxlen: 21
37.28.176.0/21 maxlen: 21
212.119.160.0/19 maxlen: 24
178.177.0.0/18 maxlen: 18
178.177.3.0/24 maxlen: 24
78.25.112.0/22 maxlen: 22
78.25.116.0/23 maxlen: 23
78.25.118.0/24 maxlen: 24
94.25.176.0/21 maxlen: 21
94.25.184.0/21 maxlen: 21
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
37.29.32.0/21 maxlen: 21
178.176.52.0/22 maxlen: 22
178.176.72.0/21 maxlen: 21
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
31.173.0.0/21 maxlen: 21
195.149.111.0/24 maxlen: 24
31.173.8.0/21 maxlen: 21
178.176.0.0/19 maxlen: 19
83.229.254.0/24 maxlen: 24
195.78.116.0/23 maxlen: 24
178.176.32.0/21 maxlen: 21
178.176.40.0/21 maxlen: 21
31.173.72.0/21 maxlen: 21
31.173.80.0/21 maxlen: 21
31.173.88.0/21 maxlen: 21
188.170.0.0/19 maxlen: 19
188.170.24.0/24 maxlen: 24
31.173.16.0/21 maxlen: 21
31.173.24.0/21 maxlen: 21
31.173.32.0/19 maxlen: 19
31.173.60.0/24 maxlen: 24
31.173.64.0/21 maxlen: 21
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
62.64.0.0/20 maxlen: 20
213.243.64.0/18 maxlen: 24
83.229.211.0/24 maxlen: 24
217.115.80.0/20 maxlen: 24
46.229.128.0/22 maxlen: 22
212.44.64.0/19 maxlen: 24
83.222.212.0/22 maxlen: 22
83.222.216.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f1:c2:b9:fa:95:52:89:49:df:d4:9b:44:25:37:1a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 8 12:43:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f2ee2b195c2c8252986faa9288d60498ba56b801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:96:3e:96:a2:be:95:65:e0:63:16:5f:31:80:
86:f8:90:19:ad:69:0a:e6:af:1a:13:49:d5:00:6c:
f4:d5:c0:db:13:f1:5e:8a:bc:04:8b:de:07:ca:b4:
99:74:f7:b4:9a:15:9d:db:25:e0:4e:4c:f5:a8:03:
91:6f:a8:fa:25:e5:ce:df:28:c9:8f:e4:71:f1:2f:
d5:6b:ac:b1:f5:76:92:1b:a8:f2:7b:d5:f3:ea:46:
a6:0c:cb:d9:ac:1b:7c:2c:80:5c:a3:01:75:2c:ac:
09:e3:fa:07:e2:7a:80:72:3e:88:3c:fb:5f:2b:44:
49:3c:19:b4:d4:44:c6:b5:b8:93:b4:44:d9:35:fc:
5d:42:b8:23:2c:a3:dd:aa:cc:22:3a:7b:dd:17:49:
3c:07:f7:d9:af:6c:83:4b:50:6b:7d:5a:50:2e:31:
40:f1:7d:f7:8e:ea:7c:09:2b:a3:54:30:63:2b:c0:
f6:c5:0d:23:3c:17:17:8f:c1:ea:8a:b3:ad:78:ef:
dd:3f:25:c1:d9:6d:44:33:8d:a3:4d:9c:c0:f7:5f:
28:86:0d:db:03:68:8a:25:32:d6:51:90:61:83:2b:
b6:6e:a1:60:2d:c7:26:eb:45:79:82:f1:b1:6f:05:
28:4a:4c:7f:a7:4b:74:ba:72:fb:04:28:ae:f5:91:
40:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:EE:2B:19:5C:2C:82:52:98:6F:AA:92:88:D6:04:98:BA:56:B8:01
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/8u4rGVwsglKYb6qSiNYEmLpWuAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.0.0-31.173.95.255
37.28.176.0/21
37.29.32.0/21
46.229.128.0/22
62.64.0.0/20
78.25.112.0/21
83.222.212.0-83.222.223.255
83.229.211.0/24
83.229.254.0/24
85.26.144.0/20
94.25.131.0/24
94.25.144.0-94.25.160.255
94.25.164.0/24
94.25.168.0-94.25.191.255
109.188.64.0-109.188.103.255
109.188.112.0-109.188.114.255
128.204.64.0/18
178.23.144.0/21
178.176.0.0-178.176.47.255
178.176.52.0/22
178.176.72.0/21
178.177.0.0/18
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
188.170.0.0-188.170.47.255
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
9b:b0:ea:9f:8c:19:0e:23:37:ab:bb:4b:b0:42:4b:18:f2:86:
32:fc:16:76:0f:c9:3c:3c:4e:d1:fe:18:45:05:f1:b8:32:34:
8a:f7:5c:05:8d:97:ed:2a:35:e1:df:f3:7d:0a:79:32:e9:3b:
14:2f:47:83:a0:7d:98:82:0d:51:59:05:6b:e6:02:b3:ed:fb:
d5:a5:22:2f:61:04:de:25:f4:6b:8b:7c:a3:6d:40:d2:2d:de:
00:e0:38:85:b0:fd:fe:ba:ba:52:01:ce:78:12:20:84:4e:15:
f3:1f:bd:f5:39:4d:5d:eb:d5:e1:d3:a5:d7:20:4c:71:86:21:
35:04:35:61:1f:67:41:4f:7e:35:da:c1:fc:f2:0c:22:2a:e2:
3e:d9:d4:0b:39:34:7b:34:3b:61:82:83:c0:f9:38:c0:6e:b1:
ea:7c:c9:d8:b1:3c:65:16:0c:a7:61:b9:03:32:1d:a7:50:ca:
b4:63:82:d9:32:99:1e:9f:72:cc:94:10:a7:5f:08:12:81:64:
be:44:d4:fc:95:1a:66:95:f8:c3:45:9e:23:8a:ec:32:ab:e0:
89:ac:50:d7:35:9a:46:65:b1:a6:f8:36:ee:be:d6:2f:86:61:
78:05:3c:81:a1:70:d3:3c:89:6e:11:5a:0e:5e:1c:c0:56:f4:
e6:2f:7e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:53:40 2025 by rpki-client