Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/9-8OufnpRgxyY_Xn65p8UAoXqh4.roa
File: 9-8OufnpRgxyY_Xn65p8UAoXqh4.roa (raw, json)
Hash identifier: zl+oXfbZQ0PHWXQcFsUlSJQ12oyB+I+l1fabJf5PuPc=
Subject key identifier: F7:EF:0E:B9:F9:E9:46:0C:72:63:F5:E7:EB:9A:7C:50:0A:17:AA:1E
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018E0D573230C3150C30737F3A46D9682D66
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/9-8OufnpRgxyY_Xn65p8UAoXqh4.roa
Signing time: Tue 05 Mar 2024 06:40:02 +0000
ROA not before: Tue 05 Mar 2024 06:40:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31213
IP address blocks: 37.28.160.0/21 maxlen: 21
37.28.168.0/21 maxlen: 21
37.29.48.0/21 maxlen: 21
37.29.56.0/21 maxlen: 21
37.29.64.0/22 maxlen: 22
37.29.68.0/23 maxlen: 23
37.29.70.0/24 maxlen: 24
37.29.71.0/24 maxlen: 24
78.25.96.0/21 maxlen: 21
78.25.104.0/22 maxlen: 22
78.25.108.0/22 maxlen: 22
78.25.120.0/22 maxlen: 22
83.149.0.0/21 maxlen: 21
85.26.128.0/20 maxlen: 20
85.26.208.0/22 maxlen: 22
85.26.212.0/22 maxlen: 22
85.26.216.0/22 maxlen: 22
85.26.220.0/22 maxlen: 22
85.26.248.0/22 maxlen: 22
85.26.252.0/22 maxlen: 22
94.25.208.0/22 maxlen: 22
94.25.216.0/21 maxlen: 21
94.25.224.0/21 maxlen: 21
94.25.228.0/23 maxlen: 23
94.25.232.0/21 maxlen: 21
109.188.128.0/17 maxlen: 17
128.204.74.0/24 maxlen: 24
128.204.75.0/24 maxlen: 24
176.106.130.0/24 maxlen: 24
176.106.131.0/24 maxlen: 24
178.178.224.0/24 maxlen: 24
178.178.225.0/24 maxlen: 24
178.178.226.0/24 maxlen: 24
178.178.227.0/24 maxlen: 24
188.162.64.0/23 maxlen: 23
188.170.65.0/24 maxlen: 24
188.170.66.0/24 maxlen: 24
188.170.67.0/24 maxlen: 24
188.170.68.0/24 maxlen: 24
188.170.72.0/21 maxlen: 21
188.170.80.0/21 maxlen: 21
188.170.92.0/22 maxlen: 22
2a03:d000::/40 maxlen: 40
2a03:d000:100::/40 maxlen: 40
2a03:d000:301::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:0d:57:32:30:c3:15:0c:30:73:7f:3a:46:d9:68:2d:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Mar 5 06:40:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7ef0eb9f9e9460c7263f5e7eb9a7c500a17aa1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:61:a8:4b:69:be:97:c9:a9:b9:78:ee:ca:d8:
15:0e:44:ea:7f:d3:0a:9a:87:64:34:96:33:84:85:
0c:c2:53:6d:de:8c:2c:51:9f:57:6d:c3:8b:17:8e:
d6:4f:66:36:1c:e0:fe:9e:83:e1:cd:0b:86:8a:24:
f8:c2:9a:4d:78:17:89:e2:36:c6:bc:1c:4c:37:26:
4d:9b:03:ff:6e:6b:72:9b:7b:b5:37:e3:f8:ee:6e:
99:30:17:81:6e:3a:01:27:66:b9:94:06:30:6e:fb:
89:0b:1d:18:87:f1:a8:7f:a1:d3:36:aa:13:c7:69:
0e:76:58:f2:a1:f7:69:c2:52:1a:dd:0c:2a:1c:5f:
c4:0c:69:57:ce:ab:ee:45:b8:3e:fd:1b:3d:c1:47:
89:ba:b2:23:71:32:cb:00:3e:8b:f6:f3:35:1b:21:
01:a9:11:32:3b:b7:18:6d:d6:4d:d9:82:fc:33:01:
3b:6b:bf:25:67:3e:8b:df:ff:d6:d2:bb:8f:ea:6f:
73:30:aa:59:94:b5:91:55:51:3c:9b:ac:1e:9c:97:
d5:1d:e0:b4:db:07:97:e4:03:dc:b7:71:d8:d4:43:
c4:f6:f3:60:d7:3f:57:c2:e0:6f:15:64:bc:93:43:
da:d0:30:39:29:5f:f7:c3:20:b6:47:d7:99:4e:79:
01:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:EF:0E:B9:F9:E9:46:0C:72:63:F5:E7:EB:9A:7C:50:0A:17:AA:1E
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/9-8OufnpRgxyY_Xn65p8UAoXqh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.28.160.0/20
37.29.48.0-37.29.71.255
78.25.96.0/20
78.25.120.0/22
83.149.0.0/21
85.26.128.0/20
85.26.208.0/20
85.26.248.0/21
94.25.208.0/22
94.25.216.0-94.25.239.255
109.188.128.0/17
128.204.74.0/23
176.106.130.0/23
178.178.224.0/22
188.162.64.0/23
188.170.65.0-188.170.68.255
188.170.72.0-188.170.87.255
188.170.92.0/22
IPv6:
2a03:d000::/39
2a03:d000:301::/48
Signature Algorithm: sha256WithRSAEncryption
02:c2:dd:81:f1:c4:cc:ea:8a:02:44:2f:66:5b:41:4f:05:29:
9f:a0:fa:d8:9b:4d:f2:22:09:84:5e:28:54:1b:20:8d:65:20:
52:dd:51:97:0c:c9:72:3b:26:51:c2:f3:79:5a:5a:46:ac:e0:
de:c8:f2:b3:c4:c3:83:52:02:b9:30:d7:d6:6d:e0:10:cd:c4:
63:78:04:87:d5:1f:f3:f0:68:51:af:4e:c1:08:7a:bc:d9:fb:
99:f2:7d:7b:77:d1:22:1d:08:4f:44:e3:02:81:b5:4d:ac:5f:
35:02:6f:a8:2f:93:bc:82:1b:1c:b0:93:ce:5d:9b:7a:47:1f:
82:ad:af:0d:76:d3:85:ce:7f:a8:0a:91:50:be:99:2d:c1:68:
d5:93:7a:23:7f:fa:7f:f1:67:83:dc:13:af:25:40:e8:9e:1b:
a6:1d:42:05:0d:9e:a4:84:55:a4:0d:cb:61:34:02:7a:28:8c:
77:4d:c1:24:04:94:52:3a:e9:13:45:1d:be:6c:ba:a1:4a:2c:
d9:5d:e7:81:b0:84:a5:64:3a:27:34:54:26:19:60:c4:e7:5c:
4f:7a:10:8a:c9:a6:b3:29:60:28:c1:6d:4b:bd:35:e7:08:ef:
5d:16:53:b4:62:56:92:89:9b:3e:82:47:5d:5c:ea:da:6a:61:
20:e8:c6:6e
-----BEGIN CERTIFICATE-----
MIIFoTCCBImgAwIBAgISAY4NVzIwwxUMMHN/OkbZaC1mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjQwMzA1MDY0MDAyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmN2VmMGViOWY5ZTk0NjBjNzI2M2Y1ZTdlYjlhN2M1MDBhMTdhYTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGGoS2m+l8mpuXjuytgVDkTqf9MK
modkNJYzhIUMwlNt3owsUZ9XbcOLF47WT2Y2HOD+noPhzQuGiiT4wppNeBeJ4jbG
vBxMNyZNmwP/bmtym3u1N+P47m6ZMBeBbjoBJ2a5lAYwbvuJCx0Yh/Gof6HTNqoT
x2kOdljyofdpwlIa3QwqHF/EDGlXzqvuRbg+/Rs9wUeJurIjcTLLAD6L9vM1GyEB
qREyO7cYbdZN2YL8MwE7a78lZz6L3//W0ruP6m9zMKpZlLWRVVE8m6wenJfVHeC0
2weX5APct3HY1EPE9vNg1z9XwuBvFWS8k0Pa0DA5KV/3wyC2R9eZTnkB/QIDAQAB
o4ICrTCCAqkwHQYDVR0OBBYEFPfvDrn56UYMcmP15+uafFAKF6oeMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvOS04T3VmbnBSZ3h5WV9YbjY1cDhVQW9YcWg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHCBggrBgEFBQcBBwEB/wSBsjCBrzCBkwQCAAEwgYwDBAQl
HKAwDAMEBCUdMAMEAyUdQAMEBE4ZYAMEAk4ZeAMEA1OVAAMEBFUagAMEBFUa0AME
A1Ua+AMEAl4Z0DAMAwQDXhnYAwQEXhngAwQHbbyAAwQBgMxKAwQBsGqCAwQCsrLg
AwQBvKJAMAwDBAC8qkEDBAC8qkQwDAMEA7yqSAMEA7yqUAMEAryqXDAXBAIAAjAR
AwYBKgPQAAADBwAqA9AAAwEwDQYJKoZIhvcNAQELBQADggEBAALC3YHxxMzqigJE
L2ZbQU8FKZ+g+tibTfIiCYReKFQbII1lIFLdUZcMyXI7JlHC83laWkas4N7I8rPE
w4NSArkw19Zt4BDNxGN4BIfVH/PwaFGvTsEIerzZ+5nyfXt30SIdCE9E4wKBtU2s
XzUCb6gvk7yCGxywk85dm3pHH4Ktrw1204XOf6gKkVC+mS3BaNWTeiN/+n/xZ4Pc
E68lQOieG6YdQgUNnqSEVaQNy2E0AnoojHdNwSQElFI66RNFHb5suqFKLNld54Gw
hKVkOic0VCYZYMTnXE96EIrJprMpYCjBbUu9NecI710WU7RiVpKJmz6CR11c6tpq
YSDoxm4=
-----END CERTIFICATE-----
Generated at Tue Apr 8 05:02:44 2025 by rpki-client