Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/BAq_r1ginonyJ7rwfUwW-WD52VM.roa
File: BAq_r1ginonyJ7rwfUwW-WD52VM.roa (raw, json)
Hash identifier: yRYb3DwyyZextrP49fzO8r7aFVlBr5JOgP4i0JAIQzs=
Subject key identifier: 04:0A:BF:AF:58:22:9E:89:F2:27:BA:F0:7D:4C:16:F9:60:F9:D9:53
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184E266125BA0FE2BE3936454597428D953
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/BAq_r1ginonyJ7rwfUwW-WD52VM.roa
Signing time: Mon 05 Dec 2022 13:07:30 +0000
ROA not before: Mon 05 Dec 2022 13:07:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31205
IP address blocks: 109.188.0.0/16 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.16.96.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
85.26.128.0/17 maxlen: 24
188.170.247.0/24 maxlen: 24
83.149.50.0/24 maxlen: 24
83.149.48.0/24 maxlen: 24
83.149.51.0/24 maxlen: 24
195.78.116.0/23 maxlen: 24
83.149.49.0/24 maxlen: 24
178.176.48.0/24 maxlen: 24
193.201.228.0/22 maxlen: 24
83.169.252.0/22 maxlen: 22
83.169.248.0/22 maxlen: 22
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
94.25.128.0/17 maxlen: 24
93.153.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
109.74.112.0/20 maxlen: 24
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
46.232.202.0/23 maxlen: 23
46.232.200.0/23 maxlen: 23
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
178.176.240.0/22 maxlen: 22
78.25.92.0/23 maxlen: 23
78.25.94.0/23 maxlen: 23
178.176.244.0/22 maxlen: 22
91.193.212.0/22 maxlen: 24
37.29.86.0/23 maxlen: 23
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
188.170.240.0/22 maxlen: 22
31.173.240.0/23 maxlen: 23
195.5.128.0/19 maxlen: 24
212.44.64.0/19 maxlen: 24
31.173.242.0/23 maxlen: 23
128.204.64.0/18 maxlen: 24
31.173.244.0/22 maxlen: 22
95.137.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e2:66:12:5b:a0:fe:2b:e3:93:64:54:59:74:28:d9:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 5 13:07:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=040abfaf58229e89f227baf07d4c16f960f9d953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4e:74:59:90:55:03:e0:cf:5e:76:c3:c0:21:
41:ad:dd:f8:bb:81:11:a5:15:f8:39:0a:fc:8f:a2:
8a:2a:49:7c:76:09:c5:4a:36:ac:8a:1b:90:07:ed:
92:31:f5:88:2c:b3:32:58:05:22:4a:fc:0a:cb:3d:
2e:e9:55:d1:73:9f:bd:57:ae:45:c5:10:88:1d:a4:
d7:32:dc:88:2a:13:5a:c0:16:26:db:11:e4:3c:ea:
d6:48:16:45:0f:72:6c:47:c5:2d:d7:72:ab:92:c6:
d6:35:88:40:87:29:14:02:d0:b8:7e:38:28:c5:9d:
72:7e:8a:c6:c1:95:a7:5e:12:61:27:23:d4:18:f9:
74:0e:7f:43:b3:51:37:bc:55:a5:38:3d:64:cc:27:
51:8b:bd:fe:af:09:fe:81:ac:41:64:66:65:6a:36:
cf:35:90:e5:fb:5c:fc:36:7f:9a:fb:31:8d:88:b0:
fe:5f:5a:e6:7c:51:b8:73:21:1e:12:d2:70:6c:a4:
a3:34:27:2e:8e:80:77:7e:8c:eb:61:a5:ff:4a:33:
6b:7d:79:64:a7:54:3d:8b:96:85:e4:2d:ac:66:69:
65:4f:34:96:b8:16:08:a5:1a:d0:d8:1b:cb:00:b3:
bd:fc:ec:18:71:9d:bb:a3:40:01:18:09:0f:f5:75:
88:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:0A:BF:AF:58:22:9E:89:F2:27:BA:F0:7D:4C:16:F9:60:F9:D9:53
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/BAq_r1ginonyJ7rwfUwW-WD52VM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.240.0/21
37.29.86.0/23
46.232.200.0/22
78.25.92.0/22
83.149.48.0/22
83.169.248.0/21
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.48.0/24
178.176.240.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
188.170.240.0/22
188.170.247.0/24
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
19:0b:33:04:ae:6d:5e:f1:59:72:12:33:f7:e7:5f:4e:6b:7d:
1c:84:e3:84:55:b8:27:42:e5:ac:07:18:82:be:ff:a8:1d:72:
5c:7f:78:2b:93:35:07:7d:c9:95:19:ed:ab:39:5c:a8:39:a2:
f6:9c:61:36:4f:3b:87:90:0b:94:a5:a1:9a:48:33:62:a0:a4:
43:d4:7c:55:c4:fd:1f:f6:b2:01:44:a7:d1:c9:be:da:4a:e2:
11:89:38:e1:38:76:02:44:76:3b:c1:51:dd:87:ce:8b:24:41:
d5:68:ee:2c:6a:b8:2e:d7:a9:9d:25:db:0a:43:10:1c:82:77:
81:50:46:13:c9:ec:8b:ed:16:fd:0f:71:f3:6e:90:58:82:bf:
da:6c:0e:50:0a:d3:03:28:7a:95:10:f8:f7:d0:ae:af:eb:c7:
a7:c3:97:90:bd:2a:cf:12:47:2d:75:f8:5c:05:af:59:b8:67:
82:ee:aa:fd:e4:87:79:b2:01:89:57:30:66:a8:b0:cb:13:e1:
e9:7a:44:80:0c:1e:92:5e:91:b8:d2:ab:31:ec:58:e6:e1:81:
70:19:77:e3:37:0d:9d:df:85:ac:4b:28:3f:aa:9e:09:b7:61:
fd:6d:3b:27:db:43:5e:1f:76:80:12:0d:c5:f3:f8:4c:19:f9:
c9:97:49:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:25:56 2025 by rpki-client