Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/_PQB5TpxmURkUQ6dvIz-mWAnnD8.roa
File: _PQB5TpxmURkUQ6dvIz-mWAnnD8.roa (raw, json)
Hash identifier: LHozj8lj5UOFivnL6gMoZCNq8rZQfBGSzligrUUh0F0=
Subject key identifier: FC:F4:01:E5:3A:71:99:44:64:51:0E:9D:BC:8C:FE:99:60:27:9C:3F
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184E23BF685A0BFF0698D5987B6F6D38824
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/_PQB5TpxmURkUQ6dvIz-mWAnnD8.roa
Signing time: Mon 05 Dec 2022 12:21:31 +0000
ROA not before: Mon 05 Dec 2022 12:21:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31213
IP address blocks: 109.188.0.0/16 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
78.25.120.0/22 maxlen: 22
188.170.80.0/21 maxlen: 21
94.25.128.0/17 maxlen: 24
93.153.128.0/17 maxlen: 24
188.170.92.0/22 maxlen: 22
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
37.28.160.0/21 maxlen: 21
37.28.168.0/21 maxlen: 21
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
78.25.96.0/21 maxlen: 21
91.193.212.0/22 maxlen: 24
78.25.104.0/22 maxlen: 22
188.170.66.0/24 maxlen: 24
188.170.68.0/24 maxlen: 24
188.170.65.0/24 maxlen: 24
188.170.67.0/24 maxlen: 24
78.25.108.0/22 maxlen: 22
188.170.72.0/21 maxlen: 21
37.29.71.0/24 maxlen: 24
37.29.68.0/23 maxlen: 23
37.29.70.0/24 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
37.29.48.0/21 maxlen: 21
95.137.0.0/17 maxlen: 24
37.29.56.0/21 maxlen: 21
37.29.64.0/22 maxlen: 22
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.78.116.0/23 maxlen: 24
83.169.192.0/18 maxlen: 24
109.74.112.0/20 maxlen: 24
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.149.0.0/21 maxlen: 21
83.222.192.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
212.44.64.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e2:3b:f6:85:a0:bf:f0:69:8d:59:87:b6:f6:d3:88:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 5 12:21:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fcf401e53a71994464510e9dbc8cfe9960279c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fb:7f:05:3d:ea:5e:a7:27:3c:cb:79:76:be:
be:75:f5:65:2a:2f:56:45:fc:7e:c6:ed:a6:c8:db:
d1:1d:7a:4e:24:0f:84:70:7c:d4:a7:b3:b0:f8:3b:
7d:21:c4:2c:25:16:ed:27:f5:ac:25:7b:94:d5:f5:
51:11:f7:34:a1:c5:5b:ae:17:5c:34:78:c0:41:92:
15:f4:d1:9e:c2:6e:7e:bd:3f:ac:c4:79:45:ca:4d:
9b:bc:2c:ce:f4:f6:48:7c:93:91:06:5d:a7:19:4e:
b2:90:6a:09:6a:ad:2d:85:c9:4b:68:0e:5e:b5:33:
3f:25:34:21:e0:67:2a:03:ae:18:35:aa:97:1e:78:
42:83:48:41:16:ae:89:4f:77:d3:02:16:0d:ac:e6:
35:10:83:13:b3:9a:74:b5:3c:0c:1d:bf:af:d9:22:
78:0b:69:2f:c8:a1:c4:cd:92:a1:5d:d1:a7:d0:12:
0f:28:22:fa:d3:0c:c9:10:b4:eb:be:56:47:a2:aa:
83:58:d0:ad:14:76:f7:4c:cd:66:58:d0:6d:59:9a:
8e:75:fc:1f:01:5a:36:9d:9c:14:6b:45:a7:63:fd:
7c:99:c7:81:53:49:a7:cd:e0:a3:1b:1a:21:a0:2d:
8a:c7:5a:c1:98:47:96:a0:fb:79:18:80:5a:98:8e:
c4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F4:01:E5:3A:71:99:44:64:51:0E:9D:BC:8C:FE:99:60:27:9C:3F
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/_PQB5TpxmURkUQ6dvIz-mWAnnD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.28.160.0/20
37.29.48.0-37.29.71.255
78.25.96.0/20
78.25.120.0/22
83.149.0.0/21
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
188.170.65.0-188.170.68.255
188.170.72.0-188.170.87.255
188.170.92.0/22
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
30:90:b0:be:59:48:15:ee:1d:fb:fd:81:e2:f1:dd:33:c4:b9:
97:74:63:df:d8:0d:fc:b8:de:ad:25:7e:3c:f7:5a:65:26:20:
68:2f:5c:d7:c5:02:35:5a:de:67:f5:a2:e9:8d:a8:10:6f:51:
e3:f2:e2:38:fe:0e:64:95:70:3b:b6:64:d3:fe:dd:58:d3:ff:
be:bc:a9:4e:4f:75:fb:94:4c:b0:cd:87:97:69:93:b7:94:d0:
66:14:03:8b:5a:eb:d9:a9:2e:64:f1:1e:79:91:86:84:ee:39:
bd:95:a8:ed:67:89:0d:13:e3:5f:74:01:54:79:70:36:56:19:
ef:f2:c4:1c:7e:b6:1c:6c:ff:70:b4:fe:5b:fb:74:58:21:ce:
2b:53:66:9c:f2:a4:53:7b:ba:a9:45:30:bc:90:3d:c5:4b:55:
ba:e0:b4:b5:37:dc:40:c3:17:61:9a:c0:ee:e1:09:ae:44:dc:
58:4f:7c:38:3e:18:83:0e:8c:15:e5:4f:ff:58:0b:d4:9e:b5:
16:01:42:e6:68:34:03:55:b3:84:5a:d9:58:42:a8:f1:5f:0f:
3e:ff:9a:03:9d:d7:eb:4e:09:2c:2e:36:ae:39:77:bb:26:b3:
a7:25:dc:b2:8e:f4:f2:54:83:b7:45:6e:8a:96:10:ca:b4:32:
2b:e4:e0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:46:01 2025 by rpki-client