Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/BxyJPOvXiVxCsv-QfqZl9LvDGIM.roa
File: BxyJPOvXiVxCsv-QfqZl9LvDGIM.roa (raw, json)
Hash identifier: bvXSonqXQg51THy0+u6WiYNOH8FebCWERkIJ/wsoCrc=
Subject key identifier: 07:1C:89:3C:EB:D7:89:5C:42:B2:FF:90:7E:A6:65:F4:BB:C3:18:83
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184D30EA7D0C4208B9440804ABAB21E2F2D
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/BxyJPOvXiVxCsv-QfqZl9LvDGIM.roa
Signing time: Fri 02 Dec 2022 13:37:43 +0000
ROA not before: Fri 02 Dec 2022 13:37:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29648
IP address blocks: 109.188.0.0/16 maxlen: 24
85.26.128.0/17 maxlen: 24
193.201.228.0/22 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
93.153.128.0/17 maxlen: 24
94.25.128.0/17 maxlen: 24
31.173.119.0/24 maxlen: 24
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
195.5.128.0/19 maxlen: 24
77.233.160.0/19 maxlen: 19
77.233.160.0/24 maxlen: 24
77.233.166.0/24 maxlen: 24
77.233.161.0/24 maxlen: 24
77.233.164.0/24 maxlen: 24
77.233.162.0/24 maxlen: 24
77.233.167.0/24 maxlen: 24
77.233.170.0/24 maxlen: 24
81.24.128.0/20 maxlen: 24
195.78.116.0/23 maxlen: 24
31.173.104.0/24 maxlen: 24
31.173.105.0/24 maxlen: 24
31.173.112.0/24 maxlen: 24
31.173.109.0/24 maxlen: 24
31.173.110.0/24 maxlen: 24
31.173.107.0/24 maxlen: 24
31.173.108.0/24 maxlen: 24
31.173.106.0/24 maxlen: 24
31.173.111.0/24 maxlen: 24
31.173.117.0/24 maxlen: 24
31.173.118.0/24 maxlen: 24
31.173.115.0/24 maxlen: 24
31.173.116.0/24 maxlen: 24
31.173.113.0/24 maxlen: 24
31.173.114.0/24 maxlen: 24
77.233.173.0/24 maxlen: 24
77.233.178.0/24 maxlen: 24
77.233.181.0/24 maxlen: 24
77.233.182.0/24 maxlen: 24
77.233.185.0/24 maxlen: 24
77.233.180.0/24 maxlen: 24
77.233.186.0/24 maxlen: 24
77.233.190.0/24 maxlen: 24
77.233.188.0/24 maxlen: 24
77.233.191.0/24 maxlen: 24
212.44.64.0/19 maxlen: 24
195.16.96.0/19 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
185.3.32.0/22 maxlen: 24
86.109.192.0/19 maxlen: 24
188.170.98.0/24 maxlen: 24
188.170.97.0/24 maxlen: 24
188.170.96.0/24 maxlen: 24
188.170.103.0/24 maxlen: 24
188.170.100.0/24 maxlen: 24
188.170.105.0/24 maxlen: 24
188.170.102.0/24 maxlen: 24
188.170.99.0/24 maxlen: 24
188.170.104.0/24 maxlen: 24
188.170.101.0/24 maxlen: 24
188.170.106.0/24 maxlen: 24
188.170.111.0/24 maxlen: 24
188.170.108.0/24 maxlen: 24
188.170.110.0/24 maxlen: 24
188.170.107.0/24 maxlen: 24
212.69.96.0/19 maxlen: 24
188.170.109.0/24 maxlen: 24
188.170.112.0/24 maxlen: 24
188.170.114.0/24 maxlen: 24
188.170.113.0/24 maxlen: 24
188.170.116.0/24 maxlen: 24
188.170.115.0/24 maxlen: 24
188.170.118.0/24 maxlen: 24
188.170.117.0/24 maxlen: 24
188.170.119.0/24 maxlen: 24
188.170.122.0/24 maxlen: 24
188.170.121.0/24 maxlen: 24
188.170.124.0/24 maxlen: 24
188.170.123.0/24 maxlen: 24
188.170.125.0/24 maxlen: 24
188.170.120.0/24 maxlen: 24
188.170.127.0/24 maxlen: 24
188.170.126.0/24 maxlen: 24
78.109.120.0/24 maxlen: 24
78.109.121.0/24 maxlen: 24
185.210.140.0/22 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
178.176.96.0/24 maxlen: 24
178.176.98.0/24 maxlen: 24
178.176.97.0/24 maxlen: 24
178.176.102.0/24 maxlen: 24
178.176.99.0/24 maxlen: 24
178.176.101.0/24 maxlen: 24
178.176.103.0/24 maxlen: 24
178.176.100.0/24 maxlen: 24
178.176.118.0/24 maxlen: 24
178.176.115.0/24 maxlen: 24
178.176.117.0/24 maxlen: 24
178.176.114.0/24 maxlen: 24
178.176.116.0/24 maxlen: 24
178.176.123.0/24 maxlen: 24
178.176.120.0/24 maxlen: 24
178.176.125.0/24 maxlen: 24
178.176.122.0/24 maxlen: 24
178.176.119.0/24 maxlen: 24
178.176.124.0/24 maxlen: 24
178.176.121.0/24 maxlen: 24
178.176.126.0/24 maxlen: 24
178.176.127.0/24 maxlen: 24
83.169.192.0/18 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
109.74.112.0/20 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d3:0e:a7:d0:c4:20:8b:94:40:80:4a:ba:b2:1e:2f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 2 13:37:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=071c893cebd7895c42b2ff907ea665f4bbc31883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:74:e1:de:80:1a:db:6d:f6:8c:c1:65:76:c7:
4a:41:a6:15:7a:4e:e8:e2:d1:35:81:19:01:8c:8d:
3a:70:a9:05:58:ed:59:f6:ab:73:22:92:9c:81:04:
f2:b0:61:9a:e8:b7:49:a3:87:9b:c4:a9:ed:72:61:
9e:1c:c4:c8:58:c0:21:f0:4e:ac:22:f6:64:f9:4d:
f3:ca:09:35:f3:6c:37:b4:0f:b2:67:2b:9b:5c:f4:
b6:da:3d:18:06:a8:51:d9:c3:8a:05:3e:37:92:01:
c9:95:5b:f8:c0:75:42:a0:2a:71:f8:fa:d3:c4:bd:
6a:85:69:23:7c:1e:10:c2:1b:1c:7a:30:3e:5e:bd:
86:ad:b7:8c:46:27:22:5a:38:9c:3d:d9:f0:42:af:
85:1e:bc:59:45:79:1a:17:d2:eb:62:48:23:3a:73:
bf:18:b9:d1:51:d9:d4:79:5f:e1:06:95:e2:89:2f:
b3:47:2a:a1:0b:45:e0:e5:81:39:fe:84:d9:6a:07:
3f:eb:b5:36:99:27:86:0e:bb:c2:f8:05:bd:da:2a:
9b:15:c8:d2:33:93:9c:a7:fd:78:99:fc:4e:4e:25:
ad:3a:cf:a8:ba:85:58:92:9b:00:4f:c6:3d:f9:1a:
16:c8:54:fa:68:18:be:00:af:0d:33:3e:07:8d:3c:
8c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:1C:89:3C:EB:D7:89:5C:42:B2:FF:90:7E:A6:65:F4:BB:C3:18:83
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/BxyJPOvXiVxCsv-QfqZl9LvDGIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.104.0-31.173.119.255
77.233.160.0/19
78.109.120.0/23
80.247.176.0/20
81.24.128.0/20
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.96.0/21
178.176.114.0-178.176.127.255
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
188.170.96.0/19
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
7a:cb:e4:09:07:c5:e3:a4:f1:10:5b:77:7a:52:64:b0:eb:cc:
06:55:d1:ee:a6:db:49:9d:83:dc:2b:65:e9:34:51:43:84:70:
31:aa:fb:0f:52:eb:a4:2d:1f:03:de:05:35:e7:74:ce:3e:9b:
92:86:a7:22:a9:89:c3:14:93:66:38:8b:67:ca:5f:9b:a2:5e:
f5:cf:9a:aa:2b:c7:e3:ea:e2:34:59:ec:7f:f7:cb:48:5b:cd:
72:3a:ca:b6:e4:40:ce:9c:c9:c4:5c:38:bd:af:3c:1a:16:15:
cd:eb:90:00:ee:95:77:18:99:13:e5:a4:5e:03:52:c8:8a:5b:
cc:8b:ec:0e:d8:7f:f9:7f:e9:d0:73:1b:2f:40:2a:60:7c:cc:
a6:b3:19:78:53:66:f2:3d:60:6f:84:dc:36:65:4e:bc:85:fa:
84:82:8f:db:e0:29:0d:39:8f:4d:b0:1a:93:0d:b2:62:76:e6:
a4:9c:3d:9e:5f:f0:b8:58:f2:e2:d3:d8:74:f6:ae:62:d6:38:
0a:11:d7:75:00:73:37:de:31:a5:21:9a:64:66:7d:41:6c:a6:
79:39:4a:d5:4b:ea:59:f9:91:1d:95:0a:26:89:fe:f2:ee:fe:
b9:d4:ba:cf:d4:a9:b4:8f:11:78:e6:12:32:d9:14:90:35:fc:
11:d3:3b:3d
-----BEGIN CERTIFICATE-----
MIIF/jCCBOagAwIBAgISAYTTDqfQxCCLlECASrqyHi8tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjIxMjAyMTMzNzQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzFjODkzY2ViZDc4OTVjNDJiMmZmOTA3ZWE2NjVmNGJiYzMxODgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXTh3oAa2232jMFldsdKQaYVek7o
4tE1gRkBjI06cKkFWO1Z9qtzIpKcgQTysGGa6LdJo4ebxKntcmGeHMTIWMAh8E6s
IvZk+U3zygk182w3tA+yZyubXPS22j0YBqhR2cOKBT43kgHJlVv4wHVCoCpx+PrT
xL1qhWkjfB4QwhscejA+Xr2GrbeMRiciWjicPdnwQq+FHrxZRXkaF9LrYkgjOnO/
GLnRUdnUeV/hBpXiiS+zRyqhC0Xg5YE5/oTZagc/67U2mSeGDrvC+AW92iqbFcjS
M5Ocp/14mfxOTiWtOs+ouoVYkpsAT8Y9+RoWyFT6aBi+AK8NMz4HjTyMaQIDAQAB
o4IDCjCCAwYwHQYDVR0OBBYEFAcciTzr14lcQrL/kH6mZfS7wxiDMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvQnh5SlBPdlhpVnhDc3YtUWZxWmw5THZER0lNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBHgYIKwYBBQUHAQcBAf8EggENMIIBCTCCAQUEAgABMIH+
MAwDBAMfrWgDBAMfrXADBAVN6aADBAFObXgDBARQ97ADBARRGIADBAZTqcADBAVT
3sADBAdT5YADBAdVGoADBAVWbcADBAJbwdQDBAddmYADBAdeGYADBAdfiQADBARt
SnADBAZtfEADAwBtvAMEBoDMQAMEA7IXkAMEA7KwYDAMAwQBsrByAwQHsrAAAwQC
uQMgAwQCudKMAwQDvF6oAwMAvKIDBAW8qmADBALByeQDBAXDBYADBAXDEGADBAHD
TnQDBADDlW8DBAXD5kADBAXUDqADBAXULEADBAXURWADBAXUd6ADBAXVmqADBAXV
qCADBAbV80ADBATZc1AwDQYJKoZIhvcNAQELBQADggEBAHrL5AkHxeOk8RBbd3pS
ZLDrzAZV0e6m20mdg9wrZek0UUOEcDGq+w9S66QtHwPeBTXndM4+m5KGpyKpicMU
k2Y4i2fKX5uiXvXPmqorx+Pq4jRZ7H/3y0hbzXI6yrbkQM6cycRcOL2vPBoWFc3r
kADulXcYmRPlpF4DUsiKW8yL7A7Yf/l/6dBzGy9AKmB8zKazGXhTZvI9YG+E3DZl
TryF+oSCj9vgKQ05j02wGpMNsmJ25qScPZ5f8LhY8uLT2HT2rmLWOAoR13UAczfe
MaUhmmRmfUFspnk5StVL6ln5kR2VCiaJ/vLu/rnUus/UqbSPEXjmEjLZFJA1/BHT
Oz0=
-----END CERTIFICATE-----
Generated at Tue Apr 8 04:38:28 2025 by rpki-client