Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/9K8b-yqv90H6Sevl8nNs3RywhiY.roa
File: 9K8b-yqv90H6Sevl8nNs3RywhiY.roa (raw, json)
Hash identifier: gqLhu4fMOJZruP3X4WLNOwfaZj2db7x+4W1kbRGssx0=
Subject key identifier: F4:AF:1B:FB:2A:AF:F7:41:FA:49:EB:E5:F2:73:6C:DD:1C:B0:86:26
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184CCE440AA066C7A8815DDB03E1FFDFB74
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/9K8b-yqv90H6Sevl8nNs3RywhiY.roa
Signing time: Thu 01 Dec 2022 08:53:41 +0000
ROA not before: Thu 01 Dec 2022 08:53:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25159
IP address blocks: 109.188.0.0/16 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
79.171.8.0/21 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
94.25.128.0/17 maxlen: 24
93.153.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
78.25.64.0/18 maxlen: 24
188.170.25.0/24 maxlen: 24
185.210.140.0/22 maxlen: 24
188.170.32.0/21 maxlen: 21
188.170.40.0/21 maxlen: 21
37.28.176.0/21 maxlen: 21
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
178.177.0.0/18 maxlen: 18
178.177.3.0/24 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
37.29.32.0/21 maxlen: 21
95.137.0.0/17 maxlen: 24
178.176.52.0/22 maxlen: 22
178.176.72.0/21 maxlen: 21
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
31.173.0.0/21 maxlen: 21
31.173.8.0/21 maxlen: 21
178.176.0.0/19 maxlen: 19
81.24.128.0/20 maxlen: 24
195.78.116.0/23 maxlen: 24
178.176.32.0/21 maxlen: 21
78.41.100.0/22 maxlen: 24
178.176.40.0/21 maxlen: 21
31.173.72.0/21 maxlen: 21
31.173.80.0/21 maxlen: 21
31.173.88.0/21 maxlen: 21
188.170.0.0/19 maxlen: 19
188.170.24.0/24 maxlen: 24
31.173.16.0/21 maxlen: 21
31.173.24.0/21 maxlen: 21
31.173.32.0/19 maxlen: 19
83.169.192.0/18 maxlen: 24
31.173.60.0/24 maxlen: 24
31.173.64.0/21 maxlen: 21
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
109.74.112.0/20 maxlen: 24
62.64.0.0/20 maxlen: 20
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
46.229.128.0/22 maxlen: 22
212.44.64.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
2a03:d004:1000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:cc:e4:40:aa:06:6c:7a:88:15:dd:b0:3e:1f:fd:fb:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 1 08:53:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f4af1bfb2aaff741fa49ebe5f2736cdd1cb08626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cb:3c:70:49:72:64:df:5a:fb:aa:d4:ad:4b:
ec:bc:b1:27:28:40:93:3c:ef:0e:0f:29:b7:8b:4b:
8d:fa:b1:27:47:3a:8c:aa:83:45:d8:7a:30:b6:c8:
b3:f8:f7:01:e0:8e:1d:ed:9f:a6:84:59:2b:2e:c4:
b3:09:81:c8:54:a9:e4:fe:e9:26:89:ff:fe:67:90:
27:68:7f:9d:3c:83:55:5c:04:fe:3f:33:09:3a:cc:
68:44:5b:27:06:7f:50:1f:19:59:e7:fc:32:c2:02:
91:a6:06:3a:6f:8c:09:3d:c4:17:77:e1:b5:e6:da:
93:8c:d0:91:ce:29:9c:82:91:48:1b:65:fa:e5:b6:
65:6e:1d:4d:6e:bf:3b:b5:54:70:bf:1b:85:6e:07:
fe:5d:c4:12:b3:14:d5:a2:f7:bc:cf:43:1f:09:06:
ac:b0:04:24:91:6e:a0:9f:25:5b:44:ff:c1:70:a3:
62:09:b6:67:a1:f6:7f:b3:07:ad:42:98:06:bc:88:
c1:06:c8:2d:13:f7:c6:88:06:5a:b7:fc:a8:c6:14:
a7:8b:cd:c6:fe:a2:f2:5b:2d:a8:98:89:ac:e8:06:
8b:c3:dc:39:b1:44:00:c0:29:ae:57:f6:32:66:4b:
15:47:58:4f:53:71:f9:75:cf:9a:09:bb:1a:04:83:
d0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:AF:1B:FB:2A:AF:F7:41:FA:49:EB:E5:F2:73:6C:DD:1C:B0:86:26
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/9K8b-yqv90H6Sevl8nNs3RywhiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.0.0-31.173.95.255
37.28.176.0/21
37.29.32.0/21
46.229.128.0/22
62.64.0.0/20
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.0.0-178.176.47.255
178.176.52.0/22
178.176.72.0/21
178.177.0.0/18
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
188.170.0.0-188.170.47.255
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
IPv6:
2a03:d004:1000::/36
Signature Algorithm: sha256WithRSAEncryption
1c:e0:35:30:54:24:de:ba:83:fc:68:ef:62:7c:d8:30:fc:73:
a0:66:97:e8:b5:86:83:c4:b0:33:95:07:1c:44:f0:f4:7b:e2:
08:77:88:93:63:37:57:8a:eb:ec:4d:33:c4:55:98:c0:1f:53:
6c:a8:fa:f4:fd:68:db:aa:a4:4a:70:73:0d:90:88:2c:9f:0b:
33:9b:79:77:b0:40:bc:5e:06:37:bd:5d:7d:fe:2c:d3:88:bd:
6d:09:78:00:80:80:7b:b3:3a:25:b5:af:99:b3:0a:4c:d6:b6:
d9:0a:eb:9a:6a:2a:66:8e:38:27:13:7a:7d:34:cd:15:42:6d:
92:86:75:31:8e:d3:11:02:c1:fa:2e:dd:8f:9a:c3:d9:5e:53:
fe:7e:b2:7a:a2:5d:a4:12:9f:39:d3:2e:bc:a9:40:24:0f:2b:
05:35:7a:87:e7:d3:11:fe:86:ad:9b:2c:8a:55:95:39:0e:6a:
0f:27:bc:2b:66:2a:2e:d6:54:75:f1:0a:15:c0:92:ef:13:3e:
65:57:50:73:dc:44:67:e0:7a:8b:c8:09:11:fe:27:c0:2a:f8:
b8:94:d9:54:a8:dc:15:34:69:a6:97:99:6e:6b:6a:ff:ec:5f:
aa:2d:bf:93:bc:2f:f7:9b:29:9f:b0:03:99:c1:cb:ec:f0:cc:
a1:72:c1:f5
-----BEGIN CERTIFICATE-----
MIIGPjCCBSagAwIBAgISAYTM5ECqBmx6iBXdsD4f/ft0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjIxMjAxMDg1MzQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNGFmMWJmYjJhYWZmNzQxZmE0OWViZTVmMjczNmNkZDFjYjA4NjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcs8cElyZN9a+6rUrUvsvLEnKECT
PO8ODym3i0uN+rEnRzqMqoNF2Howtsiz+PcB4I4d7Z+mhFkrLsSzCYHIVKnk/ukm
if/+Z5AnaH+dPINVXAT+PzMJOsxoRFsnBn9QHxlZ5/wywgKRpgY6b4wJPcQXd+G1
5tqTjNCRzimcgpFIG2X65bZlbh1Nbr87tVRwvxuFbgf+XcQSsxTVove8z0MfCQas
sAQkkW6gnyVbRP/BcKNiCbZnofZ/swetQpgGvIjBBsgtE/fGiAZat/yoxhSni83G
/qLyWy2omIms6AaLw9w5sUQAwCmuV/YyZksVR1hPU3H5dc+aCbsaBIPQyQIDAQAB
o4IDSjCCA0YwHQYDVR0OBBYEFPSvG/sqr/dB+knr5fJzbN0csIYmMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvOUs4Yi15cXY5MEg2U2V2bDhuTnMzUnl3aGlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBXgYIKwYBBQUHAQcBAf8EggFNMIIBSTCCATUEAgABMIIB
LTALAwMAH60DBAUfrUADBAMlHLADBAMlHSADBAIu5YADBAQ+QAADBAZOGUADBAJO
KWQDBANPqwgDBARQ97ADBARRGIADBAZTqcADBAVT3sADBAdT5YADBAdVGoADBAVW
bcADBAJbwdQDBAddmYADBAdeGYADBAdfiQADBARtSnADBAZtfEADAwBtvAMEBoDM
QAMEA7IXkDALAwMEsrADBASysCADBAKysDQDBAOysEgDBAaysQADBAK5AyADBAK5
0owDBAO8XqgDAwC8ojALAwMBvKoDBAS8qiADBALByeQDBAXDBYADBAXDEGADBAHD
TnQDBADDlW8DBAXD5kADBAXUDqADBAXULEADBAXURWADBAXUd6ADBAXVmqADBAXV
qCADBAbV80ADBATZc1AwDgQCAAIwCAMGBCoD0AQQMA0GCSqGSIb3DQEBCwUAA4IB
AQAc4DUwVCTeuoP8aO9ifNgw/HOgZpfotYaDxLAzlQccRPD0e+IId4iTYzdXiuvs
TTPEVZjAH1NsqPr0/WjbqqRKcHMNkIgsnwszm3l3sEC8XgY3vV19/izTiL1tCXgA
gIB7szolta+ZswpM1rbZCuuaaipmjjgnE3p9NM0VQm2ShnUxjtMRAsH6Lt2PmsPZ
XlP+frJ6ol2kEp850y68qUAkDysFNXqH59MR/oatmyyKVZU5DmoPJ7wrZiou1lR1
8QoVwJLvEz5lV1Bz3ERn4HqLyAkR/ifAKvi4lNlUqNwVNGmml5lua2r/7F+qLb+T
vC/3mymfsAOZwcvs8MyhcsH1
-----END CERTIFICATE-----
Generated at Tue Apr 8 04:53:43 2025 by rpki-client