Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/TI3I5VpWH1ZEUOk9E_NhAnNpETA.roa
File: TI3I5VpWH1ZEUOk9E_NhAnNpETA.roa (raw, json)
Hash identifier: MXQhNijbzhspCgR42Wngga8omp/b/5du+Fb82j+6IJU=
Subject key identifier: 4C:8D:C8:E5:5A:56:1F:56:44:50:E9:3D:13:F3:61:02:73:69:11:30
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184096EA63D6C3E1A6040ED470A85664BF9
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/TI3I5VpWH1ZEUOk9E_NhAnNpETA.roa
Signing time: Mon 24 Oct 2022 09:59:17 +0000
ROA not before: Mon 24 Oct 2022 09:59:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29648
IP address blocks: 109.188.0.0/16 maxlen: 24
46.29.192.0/21 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
79.171.8.0/21 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
93.153.128.0/17 maxlen: 24
94.25.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
37.29.0.0/17 maxlen: 24
37.28.160.0/19 maxlen: 24
31.173.119.0/24 maxlen: 24
78.25.64.0/18 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
77.233.160.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
81.24.128.0/20 maxlen: 24
195.78.116.0/23 maxlen: 24
78.41.100.0/22 maxlen: 24
31.173.104.0/24 maxlen: 24
31.173.105.0/24 maxlen: 24
31.173.112.0/24 maxlen: 24
31.173.108.0/24 maxlen: 24
31.173.109.0/24 maxlen: 24
31.173.110.0/24 maxlen: 24
31.173.106.0/24 maxlen: 24
31.173.111.0/24 maxlen: 24
31.173.107.0/24 maxlen: 24
31.173.116.0/24 maxlen: 24
31.173.113.0/24 maxlen: 24
31.173.117.0/24 maxlen: 24
31.173.114.0/24 maxlen: 24
31.173.118.0/24 maxlen: 24
31.173.115.0/24 maxlen: 24
83.169.192.0/18 maxlen: 24
188.94.168.0/21 maxlen: 24
109.74.112.0/20 maxlen: 24
188.162.0.0/16 maxlen: 24
46.232.200.0/21 maxlen: 24
62.64.0.0/19 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
212.44.64.0/19 maxlen: 24
46.229.128.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:09:6e:a6:3d:6c:3e:1a:60:40:ed:47:0a:85:66:4b:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Oct 24 09:59:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4c8dc8e55a561f564450e93d13f3610273691130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:41:de:e8:19:fc:c6:7a:c5:1e:cb:62:e5:66:
13:55:2a:07:84:99:2e:17:1a:6c:d9:5e:ba:7c:35:
9f:04:1d:e6:a6:de:51:61:bd:55:3f:03:b2:d1:26:
97:fc:dd:37:40:b7:12:6e:25:bc:4d:d4:ca:84:d2:
15:9e:be:77:22:0c:20:f5:39:9f:5c:81:7c:ad:ea:
79:e0:9b:96:83:45:a1:80:cd:5d:6b:e1:fa:b4:90:
5e:38:6c:dc:3d:35:82:e6:b7:23:90:16:8e:f2:f9:
5c:d4:24:76:2f:68:10:26:fd:97:03:88:53:88:cb:
6c:3c:53:7c:5b:3d:63:17:bb:66:9f:d6:e2:0c:76:
85:db:6a:9f:9f:88:3d:06:82:9a:28:f1:e6:29:9c:
7b:fa:33:e1:14:83:be:5e:1c:21:dc:5c:6a:81:8e:
fc:6a:b2:95:5f:b2:31:b8:82:53:df:26:96:c7:53:
6b:6a:37:a7:28:91:f4:96:ee:f8:50:1b:61:51:9d:
7e:81:ec:fe:f5:bc:f0:cc:55:d5:39:ba:a6:82:d6:
09:6d:4f:1e:06:87:c2:e3:66:03:d0:34:7b:00:13:
fa:af:d9:b3:0c:dc:d3:15:38:6a:84:66:98:32:ad:
95:1e:9a:2b:89:33:6a:70:64:da:5c:96:73:9c:8f:
59:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:8D:C8:E5:5A:56:1F:56:44:50:E9:3D:13:F3:61:02:73:69:11:30
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/TI3I5VpWH1ZEUOk9E_NhAnNpETA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.104.0-31.173.119.255
37.28.160.0/19
37.29.0.0/17
46.29.192.0/21
46.229.128.0/20
46.232.200.0/21
62.64.0.0/19
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
04:09:24:e3:84:f3:ed:b3:62:2d:c5:87:6b:d4:11:a1:ad:f6:
6c:42:ab:72:de:07:a0:48:c9:73:fd:82:f3:7c:fc:2c:fb:46:
d5:45:b2:81:23:35:11:60:74:ff:b6:a9:03:27:3a:b0:f1:3f:
ba:a7:7a:b3:33:f0:4d:4d:a2:81:30:20:17:9c:cc:57:47:b4:
6d:e3:d0:c0:49:64:41:78:ce:06:aa:f1:4b:bd:3c:be:12:d0:
cb:aa:5b:c2:68:dc:74:3b:45:f9:80:3c:26:37:20:19:f5:25:
c3:87:87:03:de:a5:bf:96:54:4c:c2:a3:18:26:39:8a:ff:92:
71:17:60:96:eb:64:61:a6:fb:ad:5d:ce:3e:76:5c:0b:77:df:
71:93:83:f0:32:05:b8:11:d2:bc:f2:9b:e3:1a:1f:22:1b:d9:
fe:06:34:68:d3:b4:66:45:1b:9f:97:67:d9:75:d9:16:61:9c:
6f:f9:6a:05:94:b3:48:96:c2:b1:01:97:4c:e9:d9:02:4d:be:
d9:8b:59:bf:4c:3c:50:a6:83:be:36:db:34:65:ea:c2:30:2b:
fa:a4:8f:25:76:1e:d7:67:8f:a4:78:50:e8:9d:64:f4:c1:74:
4b:9f:aa:f8:a6:04:d2:9b:04:ff:57:01:0f:5a:1d:08:c1:80:
1a:3e:ad:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:25:49 2025 by rpki-client