Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/FoiFx2nlh7J-lZG0SuWEamFdrxM.roa
File: FoiFx2nlh7J-lZG0SuWEamFdrxM.roa (raw, json)
Hash identifier: d+2EPPkVC3bYB8/JoqjvMr/oqF03jl1K2XJhLCdB7ho=
Subject key identifier: 16:88:85:C7:69:E5:87:B2:7E:95:91:B4:4A:E5:84:6A:61:5D:AF:13
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018505E1281A4D0D6EF04CBF393DD1179ED8
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/FoiFx2nlh7J-lZG0SuWEamFdrxM.roa
Signing time: Mon 12 Dec 2022 10:28:40 +0000
ROA not before: Mon 12 Dec 2022 10:28:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31195
IP address blocks: 85.26.240.0/22 maxlen: 22
178.178.64.0/24 maxlen: 24
178.178.71.0/24 maxlen: 24
178.178.67.0/24 maxlen: 24
178.178.70.0/24 maxlen: 24
178.178.66.0/24 maxlen: 24
178.178.65.0/24 maxlen: 24
178.178.68.0/24 maxlen: 24
178.178.73.0/24 maxlen: 24
178.178.72.0/24 maxlen: 24
78.25.124.0/22 maxlen: 22
78.25.127.0/24 maxlen: 24
31.173.225.0/24 maxlen: 24
31.173.226.0/24 maxlen: 24
31.173.132.0/23 maxlen: 23
31.173.134.0/23 maxlen: 23
31.173.135.0/24 maxlen: 24
178.176.233.0/24 maxlen: 24
178.176.235.0/24 maxlen: 24
178.176.234.0/24 maxlen: 24
31.173.143.0/24 maxlen: 24
37.28.190.0/24 maxlen: 24
37.28.188.0/22 maxlen: 22
37.28.191.0/24 maxlen: 24
37.29.91.0/24 maxlen: 24
37.29.88.0/22 maxlen: 22
37.29.89.0/24 maxlen: 24
37.29.95.0/24 maxlen: 24
37.29.94.0/24 maxlen: 24
37.29.92.0/22 maxlen: 22
188.170.232.0/24 maxlen: 24
188.170.233.0/24 maxlen: 24
188.170.230.0/24 maxlen: 24
188.170.231.0/24 maxlen: 24
188.170.228.0/23 maxlen: 23
188.170.236.0/24 maxlen: 24
188.170.237.0/24 maxlen: 24
188.170.234.0/24 maxlen: 24
188.170.239.0/24 maxlen: 24
188.170.235.0/24 maxlen: 24
31.173.230.0/24 maxlen: 24
31.173.231.0/24 maxlen: 24
31.173.228.0/23 maxlen: 23
31.173.232.0/23 maxlen: 23
31.173.228.0/24 maxlen: 24
31.173.229.0/24 maxlen: 24
31.173.238.0/24 maxlen: 24
31.173.235.0/24 maxlen: 24
31.173.239.0/24 maxlen: 24
31.173.236.0/23 maxlen: 23
37.29.43.0/24 maxlen: 24
83.149.52.0/22 maxlen: 22
83.169.230.0/24 maxlen: 24
83.169.228.0/23 maxlen: 23
83.169.227.0/24 maxlen: 24
83.169.226.0/24 maxlen: 24
83.169.224.0/23 maxlen: 23
188.162.0.0/16 maxlen: 24
85.26.244.0/22 maxlen: 22
85.26.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:e1:28:1a:4d:0d:6e:f0:4c:bf:39:3d:d1:17:9e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 12 10:28:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=168885c769e587b27e9591b44ae5846a615daf13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:93:b7:fa:7a:d3:98:29:22:fc:f3:85:dd:98:
d1:49:07:03:e7:e4:01:ef:f9:7c:d8:1f:f1:5a:38:
7a:e4:df:bc:02:3f:53:74:ff:ed:09:53:c4:4e:41:
1c:2c:2e:e5:d2:9b:53:23:2c:ee:20:52:af:42:16:
a1:74:4c:3c:09:86:c2:ee:ea:0b:ac:47:d4:5b:0c:
ba:4e:a6:3a:b1:66:e7:46:1b:95:98:98:0b:8b:99:
8b:8f:21:c3:e9:03:cb:ff:8a:52:9c:0c:f4:77:bd:
69:5c:91:c9:c3:70:5a:ff:1d:d9:f4:06:32:4b:06:
8c:81:97:cc:00:73:cd:50:1b:5a:af:0d:d5:cc:cf:
69:98:c4:ab:5e:2e:d1:e0:8c:4c:50:7e:35:4d:ca:
ba:a1:e8:de:1b:95:ff:54:40:26:91:b2:4c:19:fb:
4e:75:8b:19:c5:63:1e:87:4c:af:c9:9e:b5:31:8c:
62:69:f5:3f:03:bc:d9:7f:91:c0:c3:eb:4b:71:30:
e9:48:7c:55:31:00:90:27:d8:8b:dd:8f:97:1e:8a:
c1:f6:fc:a6:b1:88:43:be:58:be:e0:9e:9c:65:fb:
e5:14:59:7f:fb:0d:86:41:76:f8:f1:b5:2d:9d:50:
74:9a:b5:16:2e:fe:c2:b0:db:60:dd:86:e7:b4:2c:
46:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:88:85:C7:69:E5:87:B2:7E:95:91:B4:4A:E5:84:6A:61:5D:AF:13
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/FoiFx2nlh7J-lZG0SuWEamFdrxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.132.0/22
31.173.143.0/24
31.173.225.0-31.173.226.255
31.173.228.0-31.173.233.255
31.173.235.0-31.173.239.255
37.28.188.0/22
37.29.43.0/24
37.29.88.0/21
78.25.124.0/22
83.149.52.0/22
83.169.224.0-83.169.230.255
85.26.240.0/21
178.176.233.0-178.176.235.255
178.178.64.0-178.178.68.255
178.178.70.0-178.178.73.255
188.162.0.0/16
188.170.228.0-188.170.237.255
188.170.239.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:f8:16:f6:99:2a:dc:2f:29:23:ad:3e:bb:a1:87:69:38:dd:
f6:1e:80:b6:de:2f:6a:45:92:2a:22:e1:97:d0:d3:ca:3b:7a:
ae:1c:b5:bc:ef:49:8b:5c:e1:7f:7f:d1:75:9b:df:8a:03:8a:
da:11:c2:a2:c3:4f:fc:28:3a:e8:d2:4d:6e:23:bc:e6:cc:a7:
41:1f:1a:ee:27:d8:dd:6a:da:64:2a:03:f6:4c:b9:e0:a8:86:
32:53:f0:f1:24:3f:11:1c:0c:67:0d:f1:a3:9b:6d:e0:d5:2b:
ab:67:6d:49:d3:4f:4b:cf:65:b2:48:37:36:0c:09:f9:ca:a4:
4f:2a:bc:3d:82:b3:dc:77:b7:9b:a2:33:0b:56:59:db:d6:85:
72:00:47:52:7d:76:93:e9:40:82:c6:08:cf:fe:de:de:a8:57:
40:76:da:ec:6c:41:35:7e:1b:9e:73:02:54:63:76:6d:7a:5b:
12:83:0e:56:3f:9c:35:ab:f8:73:e5:95:51:53:c1:5d:15:ef:
3d:66:7b:21:2d:7c:80:4a:5f:25:f9:c4:5a:86:67:5f:96:1f:
15:86:f6:0c:9a:4c:a0:4d:db:b6:79:7b:78:a3:c7:f6:68:1c:
3d:43:c8:62:1a:d4:c6:09:93:f5:61:2a:87:fe:91:b6:b1:d9:
52:c3:6b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:33:46 2025 by rpki-client