Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/VRJ2wK3hCpgl6FTWROEB2NShrek.roa
File: VRJ2wK3hCpgl6FTWROEB2NShrek.roa (raw, json)
Hash identifier: jA1Ghr97jycPhLu9VjzWTKq+uq8+71Z/BF8Zf8vBvq4=
Subject key identifier: 55:12:76:C0:AD:E1:0A:98:25:E8:54:D6:44:E1:01:D8:D4:A1:AD:E9
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018505AE3AD0E638EF973E74DD911139430B
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/VRJ2wK3hCpgl6FTWROEB2NShrek.roa
Signing time: Mon 12 Dec 2022 09:33:02 +0000
ROA not before: Mon 12 Dec 2022 09:33:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31195
IP address blocks: 195.16.96.0/19 maxlen: 24
193.201.228.0/22 maxlen: 24
85.26.240.0/22 maxlen: 22
178.178.64.0/24 maxlen: 24
178.178.71.0/24 maxlen: 24
178.178.67.0/24 maxlen: 24
178.178.70.0/24 maxlen: 24
178.178.66.0/24 maxlen: 24
178.178.65.0/24 maxlen: 24
178.178.68.0/24 maxlen: 24
178.178.73.0/24 maxlen: 24
178.178.72.0/24 maxlen: 24
78.25.124.0/22 maxlen: 22
78.25.127.0/24 maxlen: 24
31.173.225.0/24 maxlen: 24
31.173.226.0/24 maxlen: 24
31.173.132.0/23 maxlen: 23
31.173.134.0/23 maxlen: 23
31.173.135.0/24 maxlen: 24
178.176.233.0/24 maxlen: 24
178.176.235.0/24 maxlen: 24
178.176.234.0/24 maxlen: 24
31.173.143.0/24 maxlen: 24
37.28.190.0/24 maxlen: 24
37.28.188.0/22 maxlen: 22
37.28.191.0/24 maxlen: 24
37.29.91.0/24 maxlen: 24
37.29.88.0/22 maxlen: 22
37.29.89.0/24 maxlen: 24
37.29.95.0/24 maxlen: 24
37.29.94.0/24 maxlen: 24
37.29.92.0/22 maxlen: 22
188.170.232.0/24 maxlen: 24
188.170.233.0/24 maxlen: 24
188.170.230.0/24 maxlen: 24
188.170.231.0/24 maxlen: 24
188.170.228.0/23 maxlen: 23
188.170.236.0/24 maxlen: 24
188.170.237.0/24 maxlen: 24
188.170.234.0/24 maxlen: 24
188.170.239.0/24 maxlen: 24
188.170.235.0/24 maxlen: 24
31.173.230.0/24 maxlen: 24
31.173.231.0/24 maxlen: 24
31.173.228.0/23 maxlen: 23
31.173.232.0/23 maxlen: 23
31.173.228.0/24 maxlen: 24
31.173.229.0/24 maxlen: 24
31.173.238.0/24 maxlen: 24
31.173.235.0/24 maxlen: 24
31.173.239.0/24 maxlen: 24
31.173.236.0/23 maxlen: 23
195.5.128.0/19 maxlen: 24
37.29.43.0/24 maxlen: 24
83.149.52.0/22 maxlen: 22
83.169.230.0/24 maxlen: 24
83.169.228.0/23 maxlen: 23
83.169.227.0/24 maxlen: 24
83.169.226.0/24 maxlen: 24
83.169.224.0/23 maxlen: 23
188.162.0.0/16 maxlen: 24
85.26.244.0/22 maxlen: 22
85.26.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:ae:3a:d0:e6:38:ef:97:3e:74:dd:91:11:39:43:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 12 09:33:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=551276c0ade10a9825e854d644e101d8d4a1ade9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:88:85:0b:84:10:5f:1a:08:a7:7d:e3:2c:71:
a7:34:86:86:4e:cb:e5:a8:c0:fe:2a:c8:db:17:af:
65:88:f0:8d:b5:aa:90:9d:a5:db:c5:4b:65:c6:f9:
12:31:96:0a:57:76:9a:8b:0a:33:71:88:b9:2a:8c:
80:9e:a0:6b:c9:23:a6:03:85:ae:05:65:20:4f:6a:
b3:c7:78:44:e8:ff:22:03:21:b2:bd:79:0a:b5:a3:
9d:56:60:4a:b5:df:04:23:cc:a5:7f:e6:ca:b3:75:
03:f5:b3:17:d3:8b:89:6f:09:6a:23:fa:84:32:ca:
82:35:37:31:8b:4e:1d:5f:34:58:99:e4:82:17:23:
1d:e6:e1:fe:dc:8f:af:75:44:2b:64:df:3f:7a:1b:
5a:13:da:19:80:cd:ea:e1:c0:dc:49:6a:d6:4b:da:
c2:56:12:3f:d7:5c:72:32:99:21:2d:07:bd:7e:63:
7a:e1:f0:3d:2b:1f:5c:95:49:cf:a1:d0:5f:e0:d5:
4d:29:ff:55:09:84:f9:29:9f:10:db:e2:8b:17:81:
45:3a:56:08:14:a1:68:49:1c:77:31:f2:8c:a4:f1:
09:45:a8:5c:60:3c:61:9d:84:e6:0b:5f:c8:45:8e:
e8:db:3b:01:33:0e:12:f3:77:e0:ef:a7:32:18:5f:
1a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:12:76:C0:AD:E1:0A:98:25:E8:54:D6:44:E1:01:D8:D4:A1:AD:E9
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/VRJ2wK3hCpgl6FTWROEB2NShrek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.132.0/22
31.173.143.0/24
31.173.225.0-31.173.226.255
31.173.228.0-31.173.233.255
31.173.235.0-31.173.239.255
37.28.188.0/22
37.29.43.0/24
37.29.88.0/21
78.25.124.0/22
83.149.52.0/22
83.169.224.0-83.169.230.255
85.26.240.0/21
178.176.233.0-178.176.235.255
178.178.64.0-178.178.68.255
178.178.70.0-178.178.73.255
188.162.0.0/16
188.170.228.0-188.170.237.255
188.170.239.0/24
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
Signature Algorithm: sha256WithRSAEncryption
1b:96:d8:2a:73:6d:8d:0a:fa:f9:ef:04:15:b7:aa:3b:fe:ad:
ec:98:77:a3:27:67:06:8a:90:84:0c:61:df:ed:97:68:15:65:
23:f3:16:b0:5c:44:4c:30:44:38:41:10:a0:f5:21:ec:5e:37:
05:22:ac:0b:3c:60:45:21:c7:d9:5a:e4:5d:8d:d6:a2:61:8c:
2e:a8:4a:11:8c:45:34:51:c6:99:25:5c:fc:a5:48:c1:8b:03:
ae:78:4f:7f:1a:18:1a:f9:fb:f8:57:88:09:76:1c:c6:42:fa:
61:3c:9a:59:f2:cc:e1:05:02:6f:45:52:2e:6d:66:e1:ba:2a:
c0:40:46:ab:72:30:00:40:f5:93:ba:be:5a:66:91:57:9d:c6:
88:ad:f3:d7:07:e5:9c:aa:55:75:95:72:55:cb:b5:89:d0:78:
aa:bb:c8:de:39:e8:13:2a:22:0c:1e:cb:91:4a:17:6f:2b:54:
96:4e:8a:b6:5d:0a:1d:e0:1d:7c:70:5b:d5:74:66:b1:cb:a1:
a9:3b:55:cb:7b:ee:90:48:8b:fc:19:14:51:bb:b1:99:34:81:
d3:95:0e:cd:bd:30:fa:ab:11:3c:f0:21:31:9b:ae:58:ff:6d:
df:fb:42:a6:48:56:62:1b:bf:4a:f5:e2:5c:35:a4:14:a3:5d:
da:8f:b6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:25:49 2025 by rpki-client