Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/dNL5ITyXISC208doCdS1Rr11LUA.roa
File: dNL5ITyXISC208doCdS1Rr11LUA.roa (raw, json)
Hash identifier: 8N27CrmZzjpaKt3wYicSKAt/rP8QjIcuniWiG9c2O+I=
Subject key identifier: 74:D2:F9:21:3C:97:21:20:B6:D3:C7:68:09:D4:B5:46:BD:75:2D:40
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184C3EFCA1450A1281EF30E7562DBF260C5
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/dNL5ITyXISC208doCdS1Rr11LUA.roa
Signing time: Tue 29 Nov 2022 15:09:42 +0000
ROA not before: Tue 29 Nov 2022 15:09:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31133
IP address blocks: 213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
31.173.174.0/24 maxlen: 24
31.173.177.0/24 maxlen: 24
31.173.175.0/24 maxlen: 24
31.173.178.0/24 maxlen: 24
31.173.182.0/24 maxlen: 24
31.173.185.0/24 maxlen: 24
31.173.180.0/24 maxlen: 24
31.173.183.0/24 maxlen: 24
31.173.186.0/24 maxlen: 24
31.173.181.0/24 maxlen: 24
93.153.128.0/17 maxlen: 24
31.173.184.0/24 maxlen: 24
31.173.190.0/24 maxlen: 24
31.173.188.0/24 maxlen: 24
31.173.191.0/24 maxlen: 24
31.173.189.0/24 maxlen: 24
31.173.187.0/24 maxlen: 24
31.173.224.0/24 maxlen: 24
31.173.129.0/24 maxlen: 24
31.173.128.0/24 maxlen: 24
31.173.137.0/24 maxlen: 24
31.173.138.0/24 maxlen: 24
31.173.136.0/24 maxlen: 24
31.173.139.0/24 maxlen: 24
31.173.142.0/24 maxlen: 24
31.173.140.0/24 maxlen: 24
31.173.141.0/24 maxlen: 24
31.173.150.0/24 maxlen: 24
31.173.148.0/24 maxlen: 24
31.173.151.0/24 maxlen: 24
80.247.176.0/20 maxlen: 24
31.173.149.0/24 maxlen: 24
31.173.152.0/24 maxlen: 24
31.173.147.0/24 maxlen: 24
31.173.158.0/24 maxlen: 24
31.173.153.0/24 maxlen: 24
31.173.156.0/24 maxlen: 24
31.173.159.0/24 maxlen: 24
31.173.154.0/24 maxlen: 24
91.193.212.0/22 maxlen: 24
31.173.157.0/24 maxlen: 24
31.173.155.0/24 maxlen: 24
31.173.166.0/24 maxlen: 24
31.173.164.0/24 maxlen: 24
31.173.165.0/24 maxlen: 24
31.173.169.0/24 maxlen: 24
31.173.167.0/24 maxlen: 24
31.173.170.0/24 maxlen: 24
31.173.168.0/24 maxlen: 24
31.173.171.0/24 maxlen: 24
195.5.128.0/19 maxlen: 24
31.173.234.0/24 maxlen: 24
77.233.160.0/19 maxlen: 24
46.232.200.0/21 maxlen: 21
46.232.204.0/22 maxlen: 22
46.232.204.0/23 maxlen: 23
79.171.208.0/24 maxlen: 24
212.44.64.0/19 maxlen: 24
195.16.96.0/19 maxlen: 24
188.170.253.0/24 maxlen: 24
178.178.100.0/23 maxlen: 23
178.178.102.0/23 maxlen: 23
109.124.64.0/18 maxlen: 24
185.3.32.0/22 maxlen: 24
84.204.0.0/16 maxlen: 16
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
37.29.0.0/17 maxlen: 17
188.170.128.0/24 maxlen: 24
188.170.131.0/24 maxlen: 24
188.170.130.0/24 maxlen: 24
188.170.132.0/24 maxlen: 24
188.170.129.0/24 maxlen: 24
37.28.160.0/19 maxlen: 19
188.170.58.0/24 maxlen: 24
37.28.188.0/23 maxlen: 23
37.29.96.0/20 maxlen: 20
37.29.92.0/23 maxlen: 23
188.170.136.0/24 maxlen: 24
188.170.139.0/24 maxlen: 24
188.170.137.0/24 maxlen: 24
188.170.144.0/24 maxlen: 24
188.170.141.0/24 maxlen: 24
188.170.140.0/24 maxlen: 24
188.170.142.0/24 maxlen: 24
188.170.145.0/24 maxlen: 24
188.170.149.0/24 maxlen: 24
188.170.152.0/24 maxlen: 24
188.170.148.0/24 maxlen: 24
128.204.64.0/18 maxlen: 24
188.170.147.0/24 maxlen: 24
188.170.146.0/24 maxlen: 24
188.170.151.0/24 maxlen: 24
188.170.150.0/24 maxlen: 24
188.170.155.0/24 maxlen: 24
188.170.154.0/24 maxlen: 24
62.89.194.0/24 maxlen: 24
188.170.157.0/24 maxlen: 24
188.170.159.0/24 maxlen: 24
188.170.153.0/24 maxlen: 24
188.170.160.0/24 maxlen: 24
188.170.163.0/24 maxlen: 24
188.170.162.0/24 maxlen: 24
188.170.165.0/24 maxlen: 24
188.170.164.0/24 maxlen: 24
188.170.166.0/24 maxlen: 24
188.170.161.0/24 maxlen: 24
188.170.167.0/24 maxlen: 24
95.137.0.0/17 maxlen: 24
178.176.64.0/22 maxlen: 22
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
83.149.16.0/22 maxlen: 22
83.149.22.0/23 maxlen: 23
83.149.20.0/22 maxlen: 22
78.41.100.0/22 maxlen: 24
178.176.50.0/23 maxlen: 23
178.176.160.0/20 maxlen: 20
178.176.176.0/21 maxlen: 21
178.176.184.0/22 maxlen: 22
178.176.132.0/23 maxlen: 23
178.176.134.0/23 maxlen: 23
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
213.243.64.0/18 maxlen: 24
83.149.0.0/18 maxlen: 18
46.229.128.0/20 maxlen: 20
83.229.128.0/17 maxlen: 24
109.188.0.0/16 maxlen: 24
85.26.128.0/17 maxlen: 24
193.201.228.0/22 maxlen: 24
94.25.128.0/17 maxlen: 24
78.25.64.0/18 maxlen: 24
31.173.130.0/23 maxlen: 23
212.119.160.0/19 maxlen: 24
31.173.160.0/22 maxlen: 22
109.106.192.0/19 maxlen: 19
31.173.0.0/16 maxlen: 16
81.24.128.0/20 maxlen: 24
195.78.116.0/23 maxlen: 24
46.232.206.0/24 maxlen: 24
62.64.0.0/19 maxlen: 19
79.171.8.0/21 maxlen: 24
178.178.96.0/24 maxlen: 24
178.178.104.0/24 maxlen: 24
178.178.105.0/24 maxlen: 24
178.178.112.0/24 maxlen: 24
178.178.107.0/24 maxlen: 24
178.178.106.0/24 maxlen: 24
178.178.108.0/24 maxlen: 24
178.178.111.0/24 maxlen: 24
178.178.110.0/24 maxlen: 24
178.178.114.0/24 maxlen: 24
178.178.116.0/24 maxlen: 24
178.23.144.0/21 maxlen: 24
178.178.127.0/24 maxlen: 24
178.178.126.0/24 maxlen: 24
37.29.3.0/24 maxlen: 24
37.29.0.0/24 maxlen: 24
37.29.2.0/24 maxlen: 24
37.29.4.0/24 maxlen: 24
37.29.1.0/24 maxlen: 24
37.29.11.0/24 maxlen: 24
37.29.8.0/24 maxlen: 24
37.29.5.0/24 maxlen: 24
37.29.10.0/24 maxlen: 24
37.29.7.0/24 maxlen: 24
37.29.9.0/24 maxlen: 24
185.210.140.0/22 maxlen: 24
37.29.78.0/24 maxlen: 24
37.29.79.0/24 maxlen: 24
37.29.88.0/24 maxlen: 24
37.29.90.0/24 maxlen: 24
37.29.96.0/24 maxlen: 24
37.29.98.0/24 maxlen: 24
37.29.97.0/24 maxlen: 24
37.29.104.0/24 maxlen: 24
37.29.99.0/24 maxlen: 24
37.29.101.0/24 maxlen: 24
37.29.100.0/24 maxlen: 24
37.29.103.0/24 maxlen: 24
37.29.102.0/24 maxlen: 24
37.29.105.0/24 maxlen: 24
37.29.107.0/24 maxlen: 24
37.29.106.0/24 maxlen: 24
37.29.109.0/24 maxlen: 24
37.29.108.0/24 maxlen: 24
37.29.111.0/24 maxlen: 24
37.29.110.0/24 maxlen: 24
37.29.16.0/24 maxlen: 24
37.29.15.0/24 maxlen: 24
37.29.12.0/24 maxlen: 24
37.29.17.0/24 maxlen: 24
37.29.14.0/24 maxlen: 24
37.29.19.0/24 maxlen: 24
37.29.24.0/24 maxlen: 24
37.29.21.0/24 maxlen: 24
37.29.18.0/24 maxlen: 24
37.29.23.0/24 maxlen: 24
37.29.20.0/24 maxlen: 24
37.29.22.0/24 maxlen: 24
37.29.27.0/24 maxlen: 24
37.29.26.0/24 maxlen: 24
37.29.25.0/24 maxlen: 24
37.29.40.0/24 maxlen: 24
37.29.42.0/24 maxlen: 24
37.29.41.0/24 maxlen: 24
195.149.111.0/24 maxlen: 24
83.149.16.0/24 maxlen: 24
83.149.17.0/24 maxlen: 24
83.149.21.0/24 maxlen: 24
83.149.18.0/24 maxlen: 24
83.149.19.0/24 maxlen: 24
83.149.20.0/24 maxlen: 24
83.149.26.0/24 maxlen: 24
83.149.53.0/24 maxlen: 24
83.149.54.0/24 maxlen: 24
178.176.188.0/24 maxlen: 24
178.176.191.0/24 maxlen: 24
178.176.190.0/24 maxlen: 24
178.176.189.0/24 maxlen: 24
188.170.0.0/16 maxlen: 16
83.169.192.0/18 maxlen: 24
178.176.128.0/24 maxlen: 24
178.176.131.0/24 maxlen: 24
178.176.130.0/24 maxlen: 24
178.176.135.0/24 maxlen: 24
178.176.137.0/24 maxlen: 24
178.176.136.0/24 maxlen: 24
178.176.139.0/24 maxlen: 24
178.176.133.0/24 maxlen: 24
178.176.143.0/24 maxlen: 24
178.176.142.0/24 maxlen: 24
178.176.145.0/24 maxlen: 24
178.176.144.0/24 maxlen: 24
178.176.141.0/24 maxlen: 24
178.176.150.0/24 maxlen: 24
178.176.152.0/24 maxlen: 24
178.176.149.0/24 maxlen: 24
178.176.156.0/24 maxlen: 24
178.176.158.0/24 maxlen: 24
178.176.153.0/24 maxlen: 24
109.74.112.0/20 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c3:ef:ca:14:50:a1:28:1e:f3:0e:75:62:db:f2:60:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Nov 29 15:09:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=74d2f9213c972120b6d3c76809d4b546bd752d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:68:51:92:61:05:49:a6:77:c6:dd:81:74:8b:
97:dc:e5:8c:c2:b5:75:0e:9b:90:6f:2c:08:29:c2:
2a:0b:cc:de:23:82:e7:94:17:38:17:81:39:d4:f3:
ff:85:1a:94:80:12:51:a2:e7:73:ae:07:4d:50:e6:
84:86:14:97:a3:a9:55:b7:46:8a:7f:81:88:d0:8e:
99:22:b9:6e:18:25:b4:79:8f:25:28:82:29:bb:32:
6e:74:d0:36:70:12:12:1d:89:b2:e2:70:f0:69:30:
67:94:9b:8b:80:c5:65:c5:26:83:27:0e:c1:78:3a:
75:05:68:c8:b1:ae:a5:3c:94:05:5f:2b:40:e0:30:
23:3a:44:2b:b1:ae:ff:f9:20:fc:dc:ca:08:80:88:
77:94:52:f8:fe:5e:7d:76:49:1f:d6:f5:4e:6a:05:
11:8a:e5:70:ef:88:7d:f3:72:4a:9e:f2:bd:96:1a:
fd:76:2b:29:4b:59:d8:d3:30:f1:42:04:02:ca:e8:
03:c1:25:41:ed:6c:1a:0a:67:0b:78:50:f4:72:f3:
f9:a6:6d:f1:a3:6f:0e:b5:a4:b0:0f:d3:31:a1:3e:
8e:27:21:f5:5b:a9:f9:97:61:38:33:af:38:1c:db:
3f:77:4b:3d:9e:dd:c1:11:dd:f9:cb:97:bb:88:c4:
2f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D2:F9:21:3C:97:21:20:B6:D3:C7:68:09:D4:B5:46:BD:75:2D:40
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/dNL5ITyXISC208doCdS1Rr11LUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.0.0/16
37.28.160.0/19
37.29.0.0/17
46.229.128.0/20
46.232.200.0/21
62.64.0.0/19
62.89.194.0/24
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
79.171.208.0/24
80.247.176.0/20
81.24.128.0/20
83.149.0.0/18
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
84.204.0.0/16
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.106.192.0/19
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.50.0/23
178.176.64.0/22
178.176.128.0/24
178.176.130.0-178.176.137.255
178.176.139.0/24
178.176.141.0-178.176.145.255
178.176.149.0-178.176.150.255
178.176.152.0/23
178.176.156.0/24
178.176.158.0/24
178.176.160.0/19
178.178.96.0/24
178.178.100.0-178.178.108.255
178.178.110.0-178.178.112.255
178.178.114.0/24
178.178.116.0/24
178.178.126.0/23
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
188.170.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
8a:85:a6:02:c0:bf:c1:37:d4:1b:47:ea:49:8d:de:9c:ab:48:
05:e6:21:5b:d7:53:dc:5f:90:5a:3e:9e:93:95:cf:0d:02:c4:
7c:6c:bd:bb:6b:d5:ed:79:dc:d2:38:5a:93:78:29:4d:a8:75:
e9:77:d3:45:fa:fe:3d:9a:35:d6:72:4e:c1:bd:4e:3d:28:b9:
52:69:58:70:68:e9:d4:9d:58:93:a7:1b:6f:4b:9b:89:b1:09:
22:4a:7a:f1:5a:56:c1:96:49:e2:18:06:5e:14:e5:84:48:b0:
c3:00:d3:82:79:39:c4:d6:18:5c:c3:38:dc:e6:c9:da:ba:ec:
13:88:3d:05:c4:e3:59:6d:c1:a5:89:48:e9:e1:d8:01:ad:c9:
42:35:c1:8b:9b:33:98:4a:ee:13:23:de:2f:53:33:6f:69:93:
f5:4d:10:2e:99:48:74:56:ee:5c:a1:0a:27:e1:7f:87:3a:42:
c4:d9:a3:9d:ff:48:a3:60:fd:ee:71:da:67:25:d9:9f:0c:1b:
31:76:d1:42:3b:e2:ac:57:6a:22:26:b8:0e:f6:57:d5:6e:89:
a4:6b:56:ab:94:04:75:30:56:bf:1b:c7:a1:ce:8c:32:9f:1f:
30:67:62:bd:21:c3:33:74:82:d6:04:c9:f7:c6:00:b5:02:b1:
46:e5:be:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:31:23 2025 by rpki-client