Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Se347fDo-NDg5PVatoXoIn-wh74.roa
File: Se347fDo-NDg5PVatoXoIn-wh74.roa (raw, json)
Hash identifier: XTlCVBPM+W30t8xIyVCyQLI2Im32U/lzPDlF1DKiE4A=
Subject key identifier: 49:ED:F8:ED:F0:E8:F8:D0:E0:E4:F5:5A:B6:85:E8:22:7F:B0:87:BE
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184765900530B3FCDB58078225A9FFC2E50
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Se347fDo-NDg5PVatoXoIn-wh74.roa
Signing time: Mon 14 Nov 2022 13:34:15 +0000
ROA not before: Mon 14 Nov 2022 13:34:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25159
IP address blocks: 109.188.0.0/16 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
79.171.8.0/21 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
94.25.128.0/17 maxlen: 24
93.153.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
78.25.64.0/18 maxlen: 24
188.170.25.0/24 maxlen: 24
185.210.140.0/22 maxlen: 24
188.170.32.0/21 maxlen: 21
188.170.40.0/21 maxlen: 21
37.28.176.0/21 maxlen: 21
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
178.177.0.0/18 maxlen: 18
178.177.3.0/24 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
37.29.32.0/21 maxlen: 21
95.137.0.0/17 maxlen: 24
178.176.52.0/22 maxlen: 22
178.176.72.0/21 maxlen: 21
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
77.233.160.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
31.173.0.0/21 maxlen: 21
31.173.8.0/21 maxlen: 21
178.176.0.0/19 maxlen: 19
81.24.128.0/20 maxlen: 24
195.78.116.0/23 maxlen: 24
178.176.32.0/21 maxlen: 21
78.41.100.0/22 maxlen: 24
178.176.40.0/21 maxlen: 21
31.173.72.0/21 maxlen: 21
31.173.80.0/21 maxlen: 21
31.173.88.0/21 maxlen: 21
188.170.0.0/19 maxlen: 19
188.170.24.0/24 maxlen: 24
31.173.16.0/21 maxlen: 21
31.173.24.0/21 maxlen: 21
31.173.32.0/19 maxlen: 19
83.169.192.0/18 maxlen: 24
31.173.60.0/24 maxlen: 24
31.173.64.0/21 maxlen: 21
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
109.74.112.0/20 maxlen: 24
46.232.200.0/21 maxlen: 24
62.64.0.0/19 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
46.229.128.0/22 maxlen: 22
212.44.64.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:76:59:00:53:0b:3f:cd:b5:80:78:22:5a:9f:fc:2e:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Nov 14 13:34:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=49edf8edf0e8f8d0e0e4f55ab685e8227fb087be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:05:34:21:bb:2e:96:db:59:0a:e6:ab:d4:c4:
9c:23:da:45:ff:64:b3:3c:7f:c4:c4:55:91:87:0a:
a5:0f:e1:0b:e8:3a:0b:c6:87:c6:50:5e:0a:34:77:
1e:68:7f:30:22:68:3e:eb:26:95:90:30:ca:6d:d1:
3a:e6:1b:02:83:ff:e1:61:6e:56:87:0c:54:e5:0b:
85:c5:d9:d4:9a:63:da:dd:33:cc:58:60:e8:67:eb:
b0:ab:c4:bb:4a:29:c5:c8:e8:16:2c:e9:14:91:46:
89:79:47:01:a3:f8:3d:56:ec:81:7d:32:44:a7:a1:
46:f6:f7:6a:f5:db:d3:d2:3e:11:47:a3:8b:9f:f2:
e0:d7:61:71:68:55:54:6c:2b:cd:33:e4:7b:d3:56:
39:33:3b:73:17:87:a2:54:5c:15:c3:1e:52:02:1b:
5d:f2:79:c6:6f:3e:0e:da:06:08:80:dd:4e:56:9d:
96:3d:18:35:c8:99:5d:e1:ef:76:ae:63:8a:3c:ec:
b8:49:03:6d:a2:22:54:f0:42:fe:5a:16:56:b4:de:
79:6b:b0:a9:1b:aa:ff:f3:3e:f1:1a:44:70:61:69:
06:69:c6:5c:64:f6:21:f2:46:f7:d7:c8:12:2c:e4:
90:78:53:86:cb:1e:cc:a0:4f:71:f9:e4:30:79:40:
54:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:ED:F8:ED:F0:E8:F8:D0:E0:E4:F5:5A:B6:85:E8:22:7F:B0:87:BE
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Se347fDo-NDg5PVatoXoIn-wh74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.0.0-31.173.95.255
37.28.176.0/21
37.29.32.0/21
46.229.128.0/22
46.232.200.0/21
62.64.0.0/19
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.0.0-178.176.47.255
178.176.52.0/22
178.176.72.0/21
178.177.0.0/18
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
188.170.0.0-188.170.47.255
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
6e:34:24:35:a2:be:58:0b:f2:7c:b3:ae:c8:96:53:35:08:f8:
71:9a:99:3f:10:e6:7e:79:b5:df:0a:9f:01:43:91:2b:66:0a:
8f:fc:30:2e:4f:f4:69:a7:7a:38:b8:03:9c:08:07:88:8c:90:
0a:79:02:a6:a3:d6:e7:37:9a:a3:eb:9b:ef:df:20:2b:c6:2e:
45:6b:31:ec:46:8b:a2:ab:b0:54:24:e1:b9:3e:c9:4c:73:81:
11:60:03:3e:3e:83:b6:b6:4c:c4:d3:4b:53:20:e8:ed:d2:2f:
4a:14:20:44:66:02:ca:7c:1b:e7:f9:c9:10:e6:4e:04:20:9d:
bf:e8:48:73:00:0e:bd:d6:3d:32:22:7a:b6:80:18:8d:45:0e:
59:d2:89:65:f1:79:c0:dc:c0:82:ae:44:cb:62:93:e7:6a:23:
34:ac:6d:a2:1f:07:40:9b:89:ec:cc:34:51:e5:8b:01:2e:7f:
2e:6a:10:3d:66:53:d5:a9:be:b9:fe:62:d3:86:fa:32:a9:52:
f7:66:a4:43:fc:32:91:5e:f7:6c:5b:35:b7:ef:ab:6d:cc:97:
a9:d4:ad:33:5f:8e:96:0f:53:e1:c1:b5:90:01:31:9c:3d:31:
36:ca:6e:37:75:73:ed:16:bf:91:87:e1:91:0a:fb:b8:16:c5:
ff:f5:0d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:25:54 2025 by rpki-client