Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/WL7cjo9Fmx9l33k7pT14gI6m4_0.roa
File: WL7cjo9Fmx9l33k7pT14gI6m4_0.roa (raw, json)
Hash identifier: 9D4NJUUxweS0AuEjgg4bzMG4ONQvnJPBeMmL+Q/1Gcc=
Subject key identifier: 58:BE:DC:8E:8F:45:9B:1F:65:DF:79:3B:A5:3D:78:80:8E:A6:E3:FD
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01856ED4E2A02D91C0523803903AF27392A2
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/WL7cjo9Fmx9l33k7pT14gI6m4_0.roa
Signing time: Sun 01 Jan 2023 19:35:23 +0000
ROA not before: Sun 01 Jan 2023 19:35:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25159
IP address blocks: 195.16.96.0/19 maxlen: 19
193.201.228.0/22 maxlen: 22
109.188.112.0/23 maxlen: 23
109.188.114.0/24 maxlen: 24
195.16.110.0/23 maxlen: 23
195.16.114.0/23 maxlen: 23
85.26.144.0/20 maxlen: 20
109.188.64.0/19 maxlen: 19
109.188.96.0/21 maxlen: 21
78.25.119.0/24 maxlen: 24
94.25.131.0/24 maxlen: 24
94.25.144.0/20 maxlen: 20
94.25.164.0/24 maxlen: 24
94.25.160.0/24 maxlen: 24
212.69.106.0/24 maxlen: 24
94.25.172.0/22 maxlen: 22
94.25.168.0/22 maxlen: 22
212.69.113.0/24 maxlen: 24
212.69.114.0/24 maxlen: 24
188.170.25.0/24 maxlen: 24
188.170.32.0/21 maxlen: 21
188.170.40.0/21 maxlen: 21
37.28.176.0/21 maxlen: 21
178.177.0.0/18 maxlen: 18
178.177.3.0/24 maxlen: 24
78.25.112.0/22 maxlen: 22
78.25.116.0/23 maxlen: 23
78.25.118.0/24 maxlen: 24
94.25.176.0/21 maxlen: 21
212.69.125.0/24 maxlen: 24
94.25.184.0/21 maxlen: 21
128.204.78.0/23 maxlen: 23
128.204.76.0/22 maxlen: 22
37.29.32.0/21 maxlen: 21
128.204.76.0/23 maxlen: 23
178.176.52.0/22 maxlen: 22
178.176.72.0/21 maxlen: 21
31.173.0.0/21 maxlen: 21
195.230.70.0/23 maxlen: 23
31.173.8.0/21 maxlen: 21
178.176.0.0/19 maxlen: 19
213.243.109.0/24 maxlen: 24
213.243.116.0/24 maxlen: 24
83.229.254.0/24 maxlen: 24
178.176.32.0/21 maxlen: 21
178.176.40.0/21 maxlen: 21
31.173.72.0/21 maxlen: 21
31.173.80.0/21 maxlen: 21
31.173.88.0/21 maxlen: 21
188.170.0.0/19 maxlen: 19
188.170.24.0/24 maxlen: 24
31.173.16.0/21 maxlen: 21
31.173.24.0/21 maxlen: 21
195.230.91.0/24 maxlen: 24
195.230.92.0/24 maxlen: 24
31.173.32.0/19 maxlen: 19
31.173.60.0/24 maxlen: 24
31.173.64.0/21 maxlen: 21
62.64.0.0/20 maxlen: 20
83.229.211.0/24 maxlen: 24
46.229.128.0/22 maxlen: 22
83.222.212.0/22 maxlen: 22
83.222.216.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:e2:a0:2d:91:c0:52:38:03:90:3a:f2:73:92:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 19:35:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58bedc8e8f459b1f65df793ba53d78808ea6e3fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:65:fe:5b:4f:a4:bb:57:e3:35:29:22:8f:88:
0f:1d:f8:bf:d2:ff:f7:b3:ee:95:39:d2:74:22:16:
f3:35:78:10:fb:01:3c:a4:02:cd:98:aa:04:43:bb:
48:1d:45:37:fa:c9:a3:ed:fc:03:84:c5:26:57:f2:
66:2d:3f:66:fa:26:6c:9b:f4:0c:8d:15:0d:9e:77:
33:b9:39:82:0d:05:7a:a4:20:28:c0:59:2d:57:f8:
5e:dd:86:3a:8b:05:cf:f3:ff:8f:50:1f:33:2f:e0:
a4:93:2a:92:1b:ee:27:4d:56:c5:8b:f5:cf:1f:93:
83:aa:13:50:0d:e1:48:a0:15:5d:7f:72:33:cd:da:
bf:73:2a:7d:bc:ec:27:3e:dc:db:f6:68:15:98:61:
45:8b:8a:ad:9e:b8:ab:ee:2d:6c:cf:be:ed:3a:bc:
fc:a6:b0:eb:cf:eb:d9:b2:e8:13:de:31:25:fb:7e:
17:43:db:93:45:86:c8:1b:6d:1b:30:7f:11:f8:49:
d8:3c:fb:13:89:63:6a:bb:97:1c:80:c8:dc:5a:ab:
b7:8a:43:24:29:5e:97:df:fe:19:92:09:e1:89:b3:
f0:c1:b5:d8:c5:6f:14:3e:0f:7d:06:3c:e4:dc:9e:
fa:05:b2:8b:e2:cf:65:02:b2:75:20:55:e5:5a:7e:
da:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:BE:DC:8E:8F:45:9B:1F:65:DF:79:3B:A5:3D:78:80:8E:A6:E3:FD
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/WL7cjo9Fmx9l33k7pT14gI6m4_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.0.0-31.173.95.255
37.28.176.0/21
37.29.32.0/21
46.229.128.0/22
62.64.0.0/20
78.25.112.0/21
83.222.212.0-83.222.223.255
83.229.211.0/24
83.229.254.0/24
85.26.144.0/20
94.25.131.0/24
94.25.144.0-94.25.160.255
94.25.164.0/24
94.25.168.0-94.25.191.255
109.188.64.0-109.188.103.255
109.188.112.0-109.188.114.255
128.204.76.0/22
178.176.0.0-178.176.47.255
178.176.52.0/22
178.176.72.0/21
178.177.0.0/18
188.170.0.0-188.170.47.255
193.201.228.0/22
195.16.96.0/19
195.230.70.0/23
195.230.91.0-195.230.92.255
212.69.106.0/24
212.69.113.0-212.69.114.255
212.69.125.0/24
213.243.109.0/24
213.243.116.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:54:d8:06:b7:f9:bf:89:77:8a:62:92:d0:1f:cd:b9:32:be:
83:04:7f:fc:57:94:f2:10:ad:47:2c:65:a8:fe:2d:47:1a:0b:
3d:54:01:9e:0f:f3:ac:53:da:2a:37:a4:e3:e6:3a:45:b1:25:
e6:7e:f2:e6:3b:5a:cf:07:b8:62:4a:43:d9:dd:3e:03:a6:c8:
19:ec:b7:23:5c:4b:c5:1e:9d:0c:da:6e:47:f8:5a:ea:c8:9c:
fd:51:a3:b0:39:12:ec:d0:cd:bb:d9:2a:93:76:b9:a3:e7:0c:
25:f0:75:a8:8d:d9:2a:a0:2c:b6:98:d4:6f:61:5a:4f:ad:1c:
74:75:9f:90:c1:96:84:11:59:4d:4a:a5:d3:67:c1:f5:04:6c:
04:1e:86:79:a3:c1:93:a8:2c:09:7b:ed:39:b2:72:b2:99:aa:
8c:c3:94:a8:ec:37:ec:b8:d5:12:f4:ff:d2:97:be:52:38:06:
75:d5:dd:af:51:a8:5d:2a:de:ee:cd:fd:33:b6:fa:f6:12:dd:
f9:58:e1:97:80:be:d2:28:da:1c:43:9f:51:c7:43:80:15:e1:
0c:fe:c1:43:81:bd:2f:1f:d4:c7:ca:58:f5:f1:26:7d:4b:e3:
e8:0d:43:7a:bc:d9:0c:1a:03:4e:75:eb:16:72:12:77:3e:0e:
c1:f2:a9:26
-----BEGIN CERTIFICATE-----
MIIGCDCCBPCgAwIBAgISAYVu1OKgLZHAUjgDkDryc5KiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjMwMTAxMTkzNTIzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OGJlZGM4ZThmNDU5YjFmNjVkZjc5M2JhNTNkNzg4MDhlYTZlM2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WX+W0+ku1fjNSkij4gPHfi/0v/3
s+6VOdJ0IhbzNXgQ+wE8pALNmKoEQ7tIHUU3+smj7fwDhMUmV/JmLT9m+iZsm/QM
jRUNnnczuTmCDQV6pCAowFktV/he3YY6iwXP8/+PUB8zL+CkkyqSG+4nTVbFi/XP
H5ODqhNQDeFIoBVdf3Izzdq/cyp9vOwnPtzb9mgVmGFFi4qtnrir7i1sz77tOrz8
prDrz+vZsugT3jEl+34XQ9uTRYbIG20bMH8R+EnYPPsTiWNqu5ccgMjcWqu3ikMk
KV6X3/4ZkgnhibPwwbXYxW8UPg99Bjzk3J76BbKL4s9lArJ1IFXlWn7aoQIDAQAB
o4IDFDCCAxAwHQYDVR0OBBYEFFi+3I6PRZsfZd95O6U9eICOpuP9MB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvV0w3Y2pvOUZteDlsMzNrN3BUMTRnSTZtNF8wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBKAYIKwYBBQUHAQcBAf8EggEXMIIBEzCCAQ8EAgABMIIB
BzALAwMAH60DBAUfrUADBAMlHLADBAMlHSADBAIu5YADBAQ+QAADBANOGXAwDAME
AlPe1AMEBVPewAMEAFPl0wMEAFPl/gMEBFUakAMEAF4ZgzAMAwQEXhmQAwQAXhmg
AwQAXhmkMAwDBANeGagDBAZeGYAwDAMEBm28QAMEA228YDAMAwQEbbxwAwQAbbxy
AwQCgMxMMAsDAwSysAMEBLKwIAMEArKwNAMEA7KwSAMEBrKxADALAwMBvKoDBAS8
qiADBALByeQDBAXDEGADBAHD5kYwDAMEAMPmWwMEAMPmXAMEANRFajAMAwQA1EVx
AwQA1EVyAwQA1EV9AwQA1fNtAwQA1fN0MA0GCSqGSIb3DQEBCwUAA4IBAQA+VNgG
t/m/iXeKYpLQH825Mr6DBH/8V5TyEK1HLGWo/i1HGgs9VAGeD/OsU9oqN6Tj5jpF
sSXmfvLmO1rPB7hiSkPZ3T4DpsgZ7LcjXEvFHp0M2m5H+FrqyJz9UaOwORLs0M27
2SqTdrmj5wwl8HWojdkqoCy2mNRvYVpPrRx0dZ+QwZaEEVlNSqXTZ8H1BGwEHoZ5
o8GTqCwJe+05snKymaqMw5So7DfsuNUS9P/Sl75SOAZ11d2vUahdKt7uzf0ztvr2
Et35WOGXgL7SKNocQ59Rx0OAFeEM/sFDgb0vH9THylj18SZ9S+PoDUN6vNkMGgNO
desWchJ3Pg7B8qkm
-----END CERTIFICATE-----
Generated at Tue Apr 8 04:51:11 2025 by rpki-client