Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/GaNUydCPDsHxnRS6wyTCj_Q4vJ8.roa
File: GaNUydCPDsHxnRS6wyTCj_Q4vJ8.roa (raw, json)
Hash identifier: xfivQg3NYBkwaivgMYTPZHXwHDcTbLcQ4qaKzMFsLZw=
Subject key identifier: 19:A3:54:C9:D0:8F:0E:C1:F1:9D:14:BA:C3:24:C2:8F:F4:38:BC:9F
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184E2AF513B56462DD73D0BAE3536121EF9
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/GaNUydCPDsHxnRS6wyTCj_Q4vJ8.roa
Signing time: Mon 05 Dec 2022 14:27:31 +0000
ROA not before: Mon 05 Dec 2022 14:27:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31213
IP address blocks: 109.188.0.0/16 maxlen: 24
195.16.96.0/19 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
78.25.120.0/22 maxlen: 22
188.170.80.0/21 maxlen: 21
94.25.128.0/17 maxlen: 24
93.153.128.0/17 maxlen: 24
188.170.92.0/22 maxlen: 22
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
37.28.160.0/21 maxlen: 21
37.28.168.0/21 maxlen: 21
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
78.25.96.0/21 maxlen: 21
91.193.212.0/22 maxlen: 24
78.25.104.0/22 maxlen: 22
188.170.66.0/24 maxlen: 24
188.170.68.0/24 maxlen: 24
188.170.65.0/24 maxlen: 24
188.170.67.0/24 maxlen: 24
78.25.108.0/22 maxlen: 22
188.170.72.0/21 maxlen: 21
37.29.71.0/24 maxlen: 24
37.29.68.0/23 maxlen: 23
37.29.70.0/24 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
37.29.48.0/21 maxlen: 21
95.137.0.0/17 maxlen: 24
37.29.56.0/21 maxlen: 21
37.29.64.0/22 maxlen: 22
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.78.116.0/23 maxlen: 24
109.74.112.0/20 maxlen: 24
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
85.26.248.0/22 maxlen: 22
85.26.252.0/22 maxlen: 22
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.149.0.0/21 maxlen: 21
212.44.64.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e2:af:51:3b:56:46:2d:d7:3d:0b:ae:35:36:12:1e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 5 14:27:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=19a354c9d08f0ec1f19d14bac324c28ff438bc9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:92:dc:75:6f:54:9f:bd:ef:11:f5:12:f8:9e:
f8:60:06:a6:65:f6:78:fe:7c:e1:07:0c:ee:f7:d6:
e9:ee:90:2f:67:4d:f8:07:78:cd:de:ad:08:4c:44:
9d:ed:c1:36:bc:b4:4f:4d:b0:59:86:e2:8f:6f:a6:
22:19:68:75:04:42:23:4e:b9:5b:af:fb:2a:81:35:
7c:a1:f7:d3:e1:4c:e4:85:5d:9d:18:fa:3e:68:6d:
30:cc:c1:34:c7:34:ea:43:dc:fa:d0:64:60:52:08:
36:35:5a:0b:59:d3:ce:27:47:4d:56:18:15:b7:93:
61:88:3e:d1:d0:c5:71:55:7f:07:38:c0:51:65:33:
76:9b:66:ab:f8:88:fe:cd:dd:90:fd:c9:dd:2d:c0:
7c:e2:d0:e0:e0:91:3b:52:ac:d7:58:b1:21:17:c7:
f4:eb:5d:17:8e:f7:96:b2:f0:e7:ae:fe:ca:1d:a0:
9b:78:9a:5b:da:a3:ad:c0:0f:62:d7:fd:1f:35:13:
7d:0e:f4:c5:32:0d:a9:18:a8:4a:a0:56:88:71:f4:
1a:04:73:c7:ae:ef:69:e6:c1:09:dc:16:25:c6:38:
c9:df:51:4a:af:e2:69:b6:03:32:bd:c5:0d:dc:57:
05:10:49:26:d9:1d:11:6f:97:77:f0:08:b9:09:bf:
cc:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A3:54:C9:D0:8F:0E:C1:F1:9D:14:BA:C3:24:C2:8F:F4:38:BC:9F
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/GaNUydCPDsHxnRS6wyTCj_Q4vJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.28.160.0/20
37.29.48.0-37.29.71.255
78.25.96.0/20
78.25.120.0/22
83.149.0.0/21
85.26.248.0/21
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
188.170.65.0-188.170.68.255
188.170.72.0-188.170.87.255
188.170.92.0/22
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
1d:ee:d1:34:11:f2:28:42:c1:21:06:9a:9e:6a:fc:2c:7b:37:
da:05:70:22:55:21:ee:96:69:a9:40:58:bc:b9:e7:e0:d6:9c:
fe:6b:6b:02:ce:bb:c6:14:87:e4:56:15:61:0a:fe:eb:3a:1a:
6d:f1:58:10:3f:0b:2c:f0:03:d0:75:0e:34:99:8a:52:8e:57:
1a:37:19:6e:a7:4d:f3:e1:a3:1b:5d:df:f9:8b:29:1a:55:45:
1b:d4:e8:2b:1f:98:ed:40:f5:5e:36:b5:5e:d8:6a:50:a4:51:
c9:df:2f:44:1d:ee:4d:4a:3a:dc:4f:56:fc:cc:c7:77:9b:cc:
9d:ab:49:1a:bd:59:23:2d:e7:fe:5f:0d:05:5a:d7:b1:fa:cd:
80:94:f5:7a:6f:c2:45:d0:09:5b:b9:be:52:2b:91:25:de:b9:
30:d8:14:42:90:cd:7f:c8:e0:ec:c2:be:a8:2a:c3:1a:cb:a0:
0c:6b:a6:42:6a:17:c2:07:52:98:89:1e:ef:14:de:27:67:42:
13:1c:ea:d6:b4:c9:f4:5b:97:91:06:4a:22:1d:61:ee:31:8e:
0e:90:2e:f5:c0:51:28:de:ce:6d:58:fc:0c:af:62:4d:27:c5:
88:5d:28:60:61:ad:17:7e:51:09:94:1f:bb:c8:41:c9:29:1d:
94:a0:9d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:43:33 2025 by rpki-client