Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/VUSkFT4WzPHePWjDqi8eG3FaTkw.roa
File: VUSkFT4WzPHePWjDqi8eG3FaTkw.roa (raw, json)
Hash identifier: nO3uFXaXsfgz3oFuoeHrPzgU/XcjYyZXVKPa7Z9FKQs=
Subject key identifier: 55:44:A4:15:3E:16:CC:F1:DE:3D:68:C3:AA:2F:1E:1B:71:5A:4E:4C
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184C7D3E1E016BF27F6401B782D3CB7D448
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/VUSkFT4WzPHePWjDqi8eG3FaTkw.roa
Signing time: Wed 30 Nov 2022 09:17:42 +0000
ROA not before: Wed 30 Nov 2022 09:17:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29648
IP address blocks: 109.188.0.0/16 maxlen: 24
85.26.128.0/17 maxlen: 24
193.201.228.0/22 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
93.153.128.0/17 maxlen: 24
94.25.128.0/17 maxlen: 24
78.25.64.0/18 maxlen: 24
31.173.119.0/24 maxlen: 24
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
195.5.128.0/19 maxlen: 24
77.233.160.0/19 maxlen: 19
77.233.160.0/24 maxlen: 24
77.233.166.0/24 maxlen: 24
77.233.161.0/24 maxlen: 24
77.233.164.0/24 maxlen: 24
77.233.162.0/24 maxlen: 24
77.233.167.0/24 maxlen: 24
77.233.170.0/24 maxlen: 24
81.24.128.0/20 maxlen: 24
195.78.116.0/23 maxlen: 24
31.173.104.0/24 maxlen: 24
31.173.105.0/24 maxlen: 24
31.173.112.0/24 maxlen: 24
31.173.109.0/24 maxlen: 24
31.173.110.0/24 maxlen: 24
31.173.107.0/24 maxlen: 24
31.173.108.0/24 maxlen: 24
31.173.106.0/24 maxlen: 24
31.173.111.0/24 maxlen: 24
31.173.117.0/24 maxlen: 24
31.173.118.0/24 maxlen: 24
31.173.115.0/24 maxlen: 24
31.173.116.0/24 maxlen: 24
31.173.113.0/24 maxlen: 24
31.173.114.0/24 maxlen: 24
77.233.173.0/24 maxlen: 24
77.233.178.0/24 maxlen: 24
77.233.181.0/24 maxlen: 24
77.233.182.0/24 maxlen: 24
77.233.185.0/24 maxlen: 24
77.233.180.0/24 maxlen: 24
77.233.186.0/24 maxlen: 24
77.233.190.0/24 maxlen: 24
77.233.188.0/24 maxlen: 24
77.233.191.0/24 maxlen: 24
212.44.64.0/19 maxlen: 24
195.16.96.0/19 maxlen: 24
79.171.8.0/21 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
185.3.32.0/22 maxlen: 24
86.109.192.0/19 maxlen: 24
188.170.98.0/24 maxlen: 24
188.170.97.0/24 maxlen: 24
188.170.96.0/24 maxlen: 24
188.170.103.0/24 maxlen: 24
188.170.100.0/24 maxlen: 24
188.170.105.0/24 maxlen: 24
188.170.102.0/24 maxlen: 24
188.170.99.0/24 maxlen: 24
188.170.104.0/24 maxlen: 24
188.170.101.0/24 maxlen: 24
188.170.106.0/24 maxlen: 24
188.170.111.0/24 maxlen: 24
188.170.108.0/24 maxlen: 24
188.170.110.0/24 maxlen: 24
188.170.107.0/24 maxlen: 24
212.69.96.0/19 maxlen: 24
188.170.109.0/24 maxlen: 24
188.170.112.0/24 maxlen: 24
188.170.114.0/24 maxlen: 24
188.170.113.0/24 maxlen: 24
188.170.116.0/24 maxlen: 24
188.170.115.0/24 maxlen: 24
188.170.118.0/24 maxlen: 24
188.170.117.0/24 maxlen: 24
188.170.119.0/24 maxlen: 24
188.170.122.0/24 maxlen: 24
188.170.121.0/24 maxlen: 24
188.170.124.0/24 maxlen: 24
188.170.123.0/24 maxlen: 24
188.170.125.0/24 maxlen: 24
188.170.120.0/24 maxlen: 24
188.170.127.0/24 maxlen: 24
188.170.126.0/24 maxlen: 24
78.109.120.0/24 maxlen: 24
78.109.121.0/24 maxlen: 24
185.210.140.0/22 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
178.176.96.0/24 maxlen: 24
178.176.98.0/24 maxlen: 24
178.176.97.0/24 maxlen: 24
178.176.102.0/24 maxlen: 24
178.176.99.0/24 maxlen: 24
178.176.101.0/24 maxlen: 24
178.176.103.0/24 maxlen: 24
178.176.100.0/24 maxlen: 24
78.41.100.0/22 maxlen: 24
178.176.118.0/24 maxlen: 24
178.176.115.0/24 maxlen: 24
178.176.117.0/24 maxlen: 24
178.176.114.0/24 maxlen: 24
178.176.116.0/24 maxlen: 24
178.176.123.0/24 maxlen: 24
178.176.120.0/24 maxlen: 24
178.176.125.0/24 maxlen: 24
178.176.122.0/24 maxlen: 24
178.176.119.0/24 maxlen: 24
178.176.124.0/24 maxlen: 24
178.176.121.0/24 maxlen: 24
178.176.126.0/24 maxlen: 24
178.176.127.0/24 maxlen: 24
83.169.192.0/18 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
109.74.112.0/20 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c7:d3:e1:e0:16:bf:27:f6:40:1b:78:2d:3c:b7:d4:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Nov 30 09:17:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5544a4153e16ccf1de3d68c3aa2f1e1b715a4e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a3:5f:36:46:9e:06:33:d6:05:37:23:22:12:
d2:10:5a:e0:85:9b:dc:be:f4:e0:1f:08:fd:51:5a:
22:7d:ed:3c:5e:ea:85:5e:61:21:9d:54:8e:e3:04:
5b:00:29:c0:79:ec:f5:97:54:c0:41:d0:dc:39:ca:
b6:4d:95:c3:ac:98:e7:1e:9e:c2:18:5e:5f:aa:c5:
45:06:7a:cf:eb:06:33:76:1b:c8:45:c9:d0:ee:5e:
98:95:f4:28:78:9f:5f:5e:23:93:ee:f2:23:84:f9:
24:bb:94:d2:26:9b:d2:39:ea:4b:ae:d3:48:b7:58:
8e:9e:2d:b1:42:ee:53:c6:c3:00:65:2c:0a:bb:d4:
79:a5:12:dc:44:48:f6:fd:9b:9e:1d:86:d8:20:7d:
b1:6d:20:9d:d9:da:c8:48:05:51:d9:b1:52:fe:bb:
c9:d2:9d:07:a6:ec:78:62:f9:fb:0f:06:76:62:6d:
b8:41:31:98:d3:2e:4c:f1:11:3a:3a:5e:90:89:d0:
cb:9d:d5:7d:b5:64:74:48:bb:39:86:1e:8d:e4:70:
02:1c:e7:5c:60:b6:9b:26:3c:22:4d:67:c1:f9:f2:
1a:4a:3e:cd:ab:29:b5:54:7b:3f:69:19:30:d5:ff:
cd:38:aa:16:6d:d3:e2:16:32:c2:58:30:53:99:c5:
0c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:44:A4:15:3E:16:CC:F1:DE:3D:68:C3:AA:2F:1E:1B:71:5A:4E:4C
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/VUSkFT4WzPHePWjDqi8eG3FaTkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.104.0-31.173.119.255
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
78.109.120.0/23
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.96.0/21
178.176.114.0-178.176.127.255
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
188.170.96.0/19
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
81:cb:ba:db:16:53:d1:3d:2a:7c:13:dc:79:2b:3a:88:57:99:
d8:10:3d:20:44:ed:75:00:cb:bb:8c:bd:99:95:19:7d:9f:75:
bd:9f:2f:b3:a4:24:3c:73:11:14:e0:e0:69:c3:0f:12:78:b1:
ca:65:17:b7:2f:1a:bf:ba:ff:84:4f:00:a9:06:f0:49:ab:65:
c8:70:d1:d6:bb:bc:d9:c4:00:27:a3:9f:6a:bb:8e:eb:d3:c3:
4d:71:a8:c3:93:f4:e3:90:ff:87:3a:19:a3:24:83:28:5a:0f:
05:51:ba:d7:80:77:7e:37:11:d7:75:09:96:a9:2e:db:4f:1a:
12:1e:f7:d8:34:73:91:27:3d:41:f9:e3:32:d5:d8:d4:1b:29:
9e:c2:c2:80:5a:13:0a:02:a5:8f:c5:89:ac:c6:3d:a6:2a:e8:
4f:e4:b0:ec:5f:18:fd:ba:5f:4a:76:06:12:fd:1e:92:9b:41:
db:42:0e:cf:04:9a:cc:aa:ed:6e:c6:ef:73:28:9f:be:a4:6f:
55:6f:65:78:61:84:94:b0:22:ad:cb:0a:32:2c:05:67:4a:13:
f8:29:ea:3a:66:20:19:3d:14:76:36:ab:4e:2b:1b:35:4c:0f:
7b:fe:42:fa:4e:ce:b7:a5:2d:4a:5e:54:a4:05:4e:b4:22:2d:
d4:6f:bd:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:33:51 2025 by rpki-client