Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/CyeCVxArALPAezyTdAXZ0JIo9Ek.roa
File: CyeCVxArALPAezyTdAXZ0JIo9Ek.roa (raw, json)
Hash identifier: 7ZzK13+fn1Jj4Lul1tvCMvOq4MKKrFSr69hSe0KDkCM=
Subject key identifier: 0B:27:82:57:10:2B:00:B3:C0:7B:3C:93:74:05:D9:D0:92:28:F4:49
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01842D24B90BC8BD958FD8BA77996A82AA80
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/CyeCVxArALPAezyTdAXZ0JIo9Ek.roa
Signing time: Mon 31 Oct 2022 08:24:52 +0000
ROA not before: Mon 31 Oct 2022 08:24:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31208
IP address blocks: 109.188.0.0/16 maxlen: 24
46.29.192.0/21 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
79.171.8.0/21 maxlen: 24
178.178.84.0/22 maxlen: 22
178.178.82.0/24 maxlen: 24
178.178.80.0/23 maxlen: 23
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
93.153.128.0/17 maxlen: 24
94.25.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
37.29.0.0/17 maxlen: 24
37.28.160.0/19 maxlen: 24
78.25.64.0/18 maxlen: 24
185.210.140.0/22 maxlen: 24
178.176.230.0/23 maxlen: 23
212.119.160.0/19 maxlen: 24
188.170.50.0/24 maxlen: 24
188.170.48.0/24 maxlen: 24
188.170.49.0/24 maxlen: 24
188.170.54.0/24 maxlen: 24
188.170.55.0/24 maxlen: 24
80.247.176.0/20 maxlen: 24
188.170.56.0/24 maxlen: 24
188.170.52.0/24 maxlen: 24
188.170.57.0/24 maxlen: 24
188.170.53.0/24 maxlen: 24
188.170.62.0/24 maxlen: 24
91.193.212.0/22 maxlen: 24
188.170.63.0/24 maxlen: 24
188.170.59.0/24 maxlen: 24
188.170.60.0/24 maxlen: 24
188.170.61.0/24 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
178.176.58.0/24 maxlen: 24
178.176.56.0/24 maxlen: 24
178.176.57.0/24 maxlen: 24
178.176.62.0/24 maxlen: 24
178.176.63.0/24 maxlen: 24
178.176.59.0/24 maxlen: 24
178.176.60.0/24 maxlen: 24
178.176.61.0/24 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
77.233.160.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
81.24.128.0/20 maxlen: 24
83.149.41.0/24 maxlen: 24
83.149.44.0/23 maxlen: 23
83.149.40.0/24 maxlen: 24
83.149.42.0/23 maxlen: 23
195.78.116.0/23 maxlen: 24
78.41.100.0/22 maxlen: 24
83.149.46.0/23 maxlen: 23
83.169.192.0/18 maxlen: 24
188.94.168.0/21 maxlen: 24
109.74.112.0/20 maxlen: 24
188.162.0.0/16 maxlen: 24
46.232.200.0/21 maxlen: 24
62.64.0.0/19 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
212.44.64.0/19 maxlen: 24
46.229.128.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:2d:24:b9:0b:c8:bd:95:8f:d8:ba:77:99:6a:82:aa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Oct 31 08:24:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b278257102b00b3c07b3c937405d9d09228f449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:63:35:7e:4e:80:b2:85:8c:dd:e9:c0:5a:eb:
c7:94:8f:95:00:5e:c1:a3:92:1d:6b:13:f4:e4:f3:
12:29:6f:d6:7c:a3:28:25:c3:50:58:83:ac:bb:f4:
ba:4d:d7:0c:67:f2:ac:3d:41:36:c7:83:d0:05:3b:
9c:68:32:6c:a6:8f:27:f4:36:1f:b8:ee:32:8b:1d:
03:9d:87:cb:46:25:d2:2d:30:9e:7e:0a:1c:52:9c:
7e:a0:44:9f:6c:c4:46:04:ce:1d:f0:a7:d8:4c:47:
bb:be:eb:32:f4:cd:ce:42:d8:2a:93:cd:82:c3:fb:
f9:6b:c5:cf:56:14:ab:1a:bc:f7:35:7a:93:66:23:
a7:32:3e:a2:a0:c5:99:58:07:e0:3f:67:b4:ef:f7:
85:f7:97:0e:0b:28:24:19:ce:b6:c1:dd:0c:f4:48:
26:23:8e:8e:8e:8c:f9:c2:36:bf:8c:0a:21:8c:89:
3b:d9:cd:57:a7:b1:61:32:0d:42:3f:23:c6:6a:12:
40:6c:84:17:9d:62:82:9a:13:e9:46:7b:1d:6b:ec:
a5:b8:11:8e:12:fd:a5:61:ae:dc:71:8e:cc:33:e6:
cb:d7:5f:30:88:91:f1:7a:bb:b7:28:ec:ff:43:31:
60:8c:d6:d0:dd:36:e8:aa:26:10:76:fb:96:c6:bc:
5c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:27:82:57:10:2B:00:B3:C0:7B:3C:93:74:05:D9:D0:92:28:F4:49
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/CyeCVxArALPAezyTdAXZ0JIo9Ek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.28.160.0/19
37.29.0.0/17
46.29.192.0/21
46.229.128.0/20
46.232.200.0/21
62.64.0.0/19
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.149.40.0/21
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.56.0/21
178.176.230.0/23
178.178.80.0-178.178.82.255
178.178.84.0/22
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
188.170.48.0-188.170.50.255
188.170.52.0-188.170.57.255
188.170.59.0-188.170.63.255
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
2e:6d:75:08:79:67:f2:61:8b:a1:7b:fb:31:e7:94:12:3f:77:
27:00:31:23:2b:12:4a:0e:2d:84:b0:32:2b:86:2f:0f:94:30:
62:30:99:40:09:e8:7e:0a:e6:ed:03:80:49:86:45:fa:28:1b:
39:4f:3d:6b:dd:9c:3b:2b:8b:13:45:2a:42:12:7c:ee:92:13:
cd:85:69:3e:22:c4:2a:46:00:84:7d:4d:58:75:de:cd:7f:da:
f7:11:79:d6:ea:b4:fb:a0:d5:fd:fe:5a:18:06:d2:70:58:8b:
0b:34:f0:30:79:79:ac:84:ef:62:31:53:bf:bf:39:37:79:87:
46:e3:c3:4b:69:6b:d8:7d:d7:4e:22:d0:ca:0d:18:99:66:f0:
0f:a9:69:4e:2b:c6:96:28:4e:3d:c3:fe:4f:5a:a8:f0:f1:b1:
82:e7:51:2d:56:3a:1a:88:6c:2c:f8:21:1f:b4:29:47:17:3f:
1c:1b:c6:32:6d:e2:6a:eb:da:2b:cd:1c:43:5a:d8:8d:bd:82:
37:83:ee:49:89:5e:ee:f2:8c:d5:5b:8f:01:d8:cd:33:5e:e1:
d5:09:e4:09:1e:3b:75:a3:ee:88:bd:96:d3:ce:3c:94:1f:59:
05:80:eb:f8:43:5f:5c:ad:c9:98:ae:49:0b:0a:39:30:90:4d:
8e:c8:2c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:25:55 2025 by rpki-client