Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/A6SzIcDBYz80CrZVFaEzPofqb_Y.roa
File: A6SzIcDBYz80CrZVFaEzPofqb_Y.roa (raw, json)
Hash identifier: mHm34mP8XDoh/MrUDi/IFveMoYF3AIWkfgW/tnp86mk=
Subject key identifier: 03:A4:B3:21:C0:C1:63:3F:34:0A:B6:55:15:A1:33:3E:87:EA:6F:F6
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184F14BB8016B8765FF95F145BC1EECB94B
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/A6SzIcDBYz80CrZVFaEzPofqb_Y.roa
Signing time: Thu 08 Dec 2022 10:33:02 +0000
ROA not before: Thu 08 Dec 2022 10:33:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29648
IP address blocks: 109.188.0.0/16 maxlen: 24
193.201.228.0/22 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
31.173.119.0/24 maxlen: 24
212.119.160.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
77.233.160.0/19 maxlen: 19
77.233.161.0/24 maxlen: 24
77.233.164.0/24 maxlen: 24
77.233.160.0/24 maxlen: 24
77.233.162.0/24 maxlen: 24
77.233.166.0/24 maxlen: 24
77.233.167.0/24 maxlen: 24
77.233.170.0/24 maxlen: 24
195.78.116.0/23 maxlen: 24
31.173.104.0/24 maxlen: 24
31.173.105.0/24 maxlen: 24
31.173.112.0/24 maxlen: 24
31.173.108.0/24 maxlen: 24
31.173.109.0/24 maxlen: 24
31.173.110.0/24 maxlen: 24
31.173.106.0/24 maxlen: 24
31.173.111.0/24 maxlen: 24
31.173.107.0/24 maxlen: 24
31.173.116.0/24 maxlen: 24
31.173.113.0/24 maxlen: 24
31.173.117.0/24 maxlen: 24
31.173.114.0/24 maxlen: 24
31.173.118.0/24 maxlen: 24
31.173.115.0/24 maxlen: 24
77.233.173.0/24 maxlen: 24
77.233.178.0/24 maxlen: 24
77.233.185.0/24 maxlen: 24
77.233.181.0/24 maxlen: 24
77.233.180.0/24 maxlen: 24
77.233.186.0/24 maxlen: 24
77.233.182.0/24 maxlen: 24
77.233.188.0/24 maxlen: 24
77.233.191.0/24 maxlen: 24
77.233.190.0/24 maxlen: 24
212.44.64.0/19 maxlen: 24
195.16.96.0/19 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
185.3.32.0/22 maxlen: 24
188.170.98.0/24 maxlen: 24
86.109.192.0/19 maxlen: 19
86.109.192.0/20 maxlen: 20
188.170.96.0/24 maxlen: 24
188.170.97.0/24 maxlen: 24
188.170.102.0/24 maxlen: 24
86.109.193.0/24 maxlen: 24
188.170.103.0/24 maxlen: 24
188.170.99.0/24 maxlen: 24
188.170.100.0/24 maxlen: 24
188.170.104.0/24 maxlen: 24
86.109.195.0/24 maxlen: 24
188.170.101.0/24 maxlen: 24
188.170.105.0/24 maxlen: 24
188.170.110.0/24 maxlen: 24
188.170.106.0/24 maxlen: 24
188.170.111.0/24 maxlen: 24
188.170.107.0/24 maxlen: 24
86.109.200.0/23 maxlen: 23
188.170.108.0/24 maxlen: 24
212.69.96.0/19 maxlen: 24
188.170.109.0/24 maxlen: 24
188.170.112.0/24 maxlen: 24
188.170.114.0/24 maxlen: 24
86.109.213.0/24 maxlen: 24
188.170.115.0/24 maxlen: 24
188.170.116.0/24 maxlen: 24
86.109.212.0/24 maxlen: 24
86.109.208.0/24 maxlen: 24
188.170.118.0/24 maxlen: 24
188.170.117.0/24 maxlen: 24
188.170.113.0/24 maxlen: 24
86.109.210.0/24 maxlen: 24
188.170.119.0/24 maxlen: 24
188.170.123.0/24 maxlen: 24
86.109.216.0/24 maxlen: 24
188.170.122.0/24 maxlen: 24
86.109.215.0/24 maxlen: 24
86.109.218.0/23 maxlen: 23
188.170.125.0/24 maxlen: 24
188.170.121.0/24 maxlen: 24
188.170.120.0/24 maxlen: 24
86.109.214.0/24 maxlen: 24
188.170.124.0/24 maxlen: 24
188.170.127.0/24 maxlen: 24
86.109.220.0/24 maxlen: 24
188.170.126.0/24 maxlen: 24
86.109.223.0/24 maxlen: 24
86.109.222.0/24 maxlen: 24
78.109.120.0/24 maxlen: 24
78.109.121.0/24 maxlen: 24
185.210.140.0/22 maxlen: 24
128.204.64.0/18 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
178.176.98.0/24 maxlen: 24
195.149.111.0/24 maxlen: 24
178.176.96.0/24 maxlen: 24
178.176.97.0/24 maxlen: 24
178.176.102.0/24 maxlen: 24
178.176.103.0/24 maxlen: 24
178.176.99.0/24 maxlen: 24
178.176.100.0/24 maxlen: 24
178.176.101.0/24 maxlen: 24
178.176.118.0/24 maxlen: 24
178.176.114.0/24 maxlen: 24
178.176.115.0/24 maxlen: 24
178.176.116.0/24 maxlen: 24
178.176.117.0/24 maxlen: 24
178.176.122.0/24 maxlen: 24
178.176.123.0/24 maxlen: 24
178.176.119.0/24 maxlen: 24
178.176.124.0/24 maxlen: 24
178.176.120.0/24 maxlen: 24
178.176.125.0/24 maxlen: 24
178.176.121.0/24 maxlen: 24
178.176.126.0/24 maxlen: 24
178.176.127.0/24 maxlen: 24
83.169.217.0/24 maxlen: 24
83.169.218.0/24 maxlen: 24
83.169.219.0/24 maxlen: 24
83.169.220.0/24 maxlen: 24
83.169.221.0/24 maxlen: 24
83.169.222.0/24 maxlen: 24
83.169.223.0/24 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f1:4b:b8:01:6b:87:65:ff:95:f1:45:bc:1e:ec:b9:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 8 10:33:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=03a4b321c0c1633f340ab65515a1333e87ea6ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fb:af:09:9c:1b:0b:58:96:5b:b8:a5:45:09:
82:92:f3:10:5c:59:32:95:64:6b:47:a9:ad:5c:91:
35:ae:08:dc:93:56:da:5c:c3:96:25:16:c8:83:c9:
c9:34:1e:79:32:1f:2f:bd:38:26:7e:9b:00:77:e3:
ea:60:9b:3c:cb:bf:d1:8a:b4:43:42:ec:b7:93:ff:
f2:a4:25:9d:95:ae:2e:5e:6e:ca:05:4c:97:c4:b8:
e6:70:d8:f7:2d:e4:7b:7a:37:2d:96:57:61:80:c8:
12:09:a4:1f:b5:6e:ab:c6:af:25:1b:1a:12:2e:86:
8f:44:98:79:0e:85:25:26:6f:76:98:7e:2c:15:85:
de:15:7a:c2:00:fe:57:46:75:15:7b:86:e6:e3:2a:
8b:2d:c3:1c:34:c6:fe:e5:7d:41:90:56:3e:f1:72:
09:62:ef:56:de:d9:e4:fb:43:62:e1:33:8b:66:2b:
db:47:ea:d4:c0:da:6c:c3:f1:72:78:78:54:37:5c:
b7:9c:96:92:5b:ba:de:8d:a0:86:f7:76:34:f1:ef:
9e:81:2f:21:08:3c:08:88:cc:e2:f8:5d:57:2e:28:
d1:cd:b5:ae:1b:b2:de:e2:bf:5f:ef:cd:99:7b:24:
c4:b1:05:12:76:2b:bf:c3:93:2a:6a:52:83:61:96:
86:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A4:B3:21:C0:C1:63:3F:34:0A:B6:55:15:A1:33:3E:87:EA:6F:F6
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/A6SzIcDBYz80CrZVFaEzPofqb_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.104.0-31.173.119.255
77.233.160.0/19
78.109.120.0/23
83.169.217.0-83.169.223.255
86.109.192.0/19
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.96.0/21
178.176.114.0-178.176.127.255
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
188.170.96.0/19
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
01:99:5d:73:54:08:8a:00:c3:bc:16:5d:11:f2:28:55:4d:8c:
30:75:e0:07:1d:4a:29:67:e6:73:01:6d:a3:c4:5b:93:7e:5f:
1b:d3:68:ea:3d:3e:6e:59:1f:03:cb:89:de:7e:5a:a6:a9:d1:
ec:4e:98:49:28:e3:d7:c4:f6:c0:17:a0:c5:fc:e4:ba:fa:02:
7c:31:30:bb:15:b2:4f:3d:fb:62:1d:58:f1:48:f2:b4:35:58:
50:46:81:de:72:3c:48:8d:b4:9c:a2:41:ee:0b:05:bb:e4:d8:
0b:09:50:86:1d:c7:ea:23:61:0c:80:30:99:f5:fd:d4:d4:6d:
ff:7c:80:52:51:6e:83:a4:46:43:ef:7e:02:d5:de:9f:8e:df:
98:52:7f:40:e6:85:a4:06:a9:5d:cf:f9:83:9a:36:b6:a7:f2:
0a:b0:2a:15:09:99:eb:09:02:21:12:3a:2e:8d:3b:06:d5:ee:
f9:88:3b:f6:33:4a:b3:b1:ee:b2:6e:d1:4b:5d:ac:3a:3f:ae:
27:d9:5e:36:74:61:e0:c1:d5:1f:58:3d:c6:9f:0e:fd:6b:dd:
b4:8b:d7:fd:8b:c2:48:42:0d:e5:c3:e3:c1:1b:96:f9:6e:d0:
c3:14:dc:57:b2:e0:5d:a2:c6:6f:80:42:4a:ab:fa:41:29:bc:
d1:d6:11:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:40:53 2025 by rpki-client