Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/iQEIVPGKWyHzx2sgYrf71bAyj9A.roa
File: iQEIVPGKWyHzx2sgYrf71bAyj9A.roa (raw, json)
Hash identifier: iUuCZkyPTovMzGNvDfCmu8g6v6yTYv8Lq7MtZ5rNTQY=
Subject key identifier: 89:01:08:54:F1:8A:5B:21:F3:C7:6B:20:62:B7:FB:D5:B0:32:8F:D0
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184F1F517B9C417262496335273B9C719F2
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/iQEIVPGKWyHzx2sgYrf71bAyj9A.roa
Signing time: Thu 08 Dec 2022 13:38:02 +0000
ROA not before: Thu 08 Dec 2022 13:38:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31195
IP address blocks: 195.16.96.0/19 maxlen: 24
193.201.228.0/22 maxlen: 24
85.26.240.0/22 maxlen: 22
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
178.178.64.0/24 maxlen: 24
178.178.71.0/24 maxlen: 24
178.178.67.0/24 maxlen: 24
178.178.70.0/24 maxlen: 24
178.178.66.0/24 maxlen: 24
178.178.65.0/24 maxlen: 24
178.178.68.0/24 maxlen: 24
185.3.32.0/22 maxlen: 24
178.178.73.0/24 maxlen: 24
178.178.72.0/24 maxlen: 24
78.25.124.0/22 maxlen: 22
78.25.127.0/24 maxlen: 24
212.69.96.0/19 maxlen: 24
31.173.225.0/24 maxlen: 24
31.173.226.0/24 maxlen: 24
185.210.140.0/22 maxlen: 24
31.173.132.0/23 maxlen: 23
31.173.134.0/23 maxlen: 23
31.173.135.0/24 maxlen: 24
178.176.233.0/24 maxlen: 24
212.119.160.0/19 maxlen: 24
178.176.235.0/24 maxlen: 24
178.176.234.0/24 maxlen: 24
31.173.143.0/24 maxlen: 24
37.28.190.0/24 maxlen: 24
37.28.188.0/22 maxlen: 22
37.28.191.0/24 maxlen: 24
37.29.91.0/24 maxlen: 24
37.29.88.0/22 maxlen: 22
37.29.89.0/24 maxlen: 24
37.29.95.0/24 maxlen: 24
37.29.94.0/24 maxlen: 24
37.29.92.0/22 maxlen: 22
188.170.232.0/24 maxlen: 24
188.170.233.0/24 maxlen: 24
188.170.230.0/24 maxlen: 24
188.170.231.0/24 maxlen: 24
188.170.228.0/23 maxlen: 23
188.170.236.0/24 maxlen: 24
188.170.237.0/24 maxlen: 24
188.170.234.0/24 maxlen: 24
188.170.239.0/24 maxlen: 24
188.170.235.0/24 maxlen: 24
31.173.230.0/24 maxlen: 24
31.173.231.0/24 maxlen: 24
31.173.228.0/23 maxlen: 23
31.173.232.0/23 maxlen: 23
31.173.228.0/24 maxlen: 24
31.173.229.0/24 maxlen: 24
31.173.238.0/24 maxlen: 24
31.173.235.0/24 maxlen: 24
31.173.239.0/24 maxlen: 24
31.173.236.0/23 maxlen: 23
195.5.128.0/19 maxlen: 24
37.29.43.0/24 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.78.116.0/23 maxlen: 24
83.149.52.0/22 maxlen: 22
83.169.230.0/24 maxlen: 24
83.169.228.0/23 maxlen: 23
83.169.227.0/24 maxlen: 24
83.169.226.0/24 maxlen: 24
83.169.224.0/23 maxlen: 23
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
85.26.244.0/22 maxlen: 22
85.26.247.0/24 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
212.44.64.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f1:f5:17:b9:c4:17:26:24:96:33:52:73:b9:c7:19:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 8 13:38:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=89010854f18a5b21f3c76b2062b7fbd5b0328fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8b:fd:c9:af:13:5a:ea:92:8c:cd:ab:26:e5:
77:66:4b:b7:ae:e7:ca:97:fe:b5:99:ce:10:c9:9c:
a9:00:f1:7a:86:dd:95:37:67:91:b4:fe:34:30:56:
82:05:7f:20:fd:3c:5c:3a:09:21:4f:7b:e5:c6:de:
be:cf:b0:7f:36:13:27:a3:03:d6:13:b9:96:5b:4f:
37:d0:d3:8b:10:f1:01:c3:ed:c5:00:44:16:22:60:
79:c9:18:d9:69:07:f5:d4:f1:39:ac:09:e4:1a:0a:
c9:27:92:0e:5f:81:04:c0:0c:68:a2:48:c2:94:1a:
e3:ad:1a:42:23:0f:8e:c6:fd:2c:a7:40:8d:74:0f:
72:3a:d0:3e:98:65:fd:c5:2d:b1:10:62:25:7a:de:
4b:8e:17:7e:03:75:01:86:a0:92:08:c4:58:8c:73:
1a:f4:33:4f:ab:7f:13:af:26:65:52:64:cc:eb:b7:
35:b1:c9:a2:9d:8a:07:c5:07:d0:ed:c9:e9:38:c1:
d0:7c:58:05:a1:cb:28:87:a3:c9:29:59:db:e4:cc:
ab:61:8b:1c:12:6b:80:7c:43:4c:eb:b9:07:ac:7d:
ed:e3:3e:3e:8e:1e:e6:d5:1f:90:00:68:99:93:3c:
58:b2:71:58:41:75:c6:ae:f1:c6:3a:e0:66:2d:49:
fb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:01:08:54:F1:8A:5B:21:F3:C7:6B:20:62:B7:FB:D5:B0:32:8F:D0
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/iQEIVPGKWyHzx2sgYrf71bAyj9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.132.0/22
31.173.143.0/24
31.173.225.0-31.173.226.255
31.173.228.0-31.173.233.255
31.173.235.0-31.173.239.255
37.28.188.0/22
37.29.43.0/24
37.29.88.0/21
78.25.124.0/22
83.149.52.0/22
83.169.224.0-83.169.230.255
85.26.240.0/21
178.176.233.0-178.176.235.255
178.178.64.0-178.178.68.255
178.178.70.0-178.178.73.255
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
188.170.228.0-188.170.237.255
188.170.239.0/24
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
90:99:9b:88:71:a1:f9:50:9b:11:27:ed:5e:6f:4d:ec:9a:6a:
2a:6f:66:dd:6d:a1:66:b9:87:14:21:8d:2c:2d:fd:e2:c2:d4:
12:4e:a0:df:4b:79:9e:69:91:76:a7:e6:71:1d:ff:92:03:a8:
0f:ea:a7:eb:5a:9b:45:d8:5c:ec:9d:5d:20:88:c8:ec:af:47:
66:5f:fb:9e:97:af:96:63:74:5d:93:dc:b6:2e:0c:82:16:e8:
93:b5:b6:76:38:b2:31:a0:29:21:f6:7a:e9:85:0d:9c:bd:36:
6a:a9:d9:ba:74:05:be:21:a7:57:b7:06:90:87:8f:b5:87:33:
3a:df:cb:4d:96:1f:ba:16:69:da:37:e1:82:61:e4:f7:83:dd:
04:dc:b2:0a:e4:79:ea:4a:94:f6:bb:12:b8:ea:ce:dd:71:17:
d4:51:d2:e6:0e:92:26:22:20:e6:18:21:25:be:eb:0f:0b:b1:
d7:d7:03:fe:26:2e:85:92:6c:c9:66:e4:7b:4c:1a:7b:0e:7d:
9e:f5:33:a0:eb:5a:cb:fe:cf:99:d5:91:1b:0f:90:7a:50:7d:
ee:94:91:0d:6a:cc:dd:f8:df:3c:23:bb:2e:2c:47:f9:0e:df:
f5:72:8e:7b:df:6c:6c:7a:41:4e:49:40:39:68:c5:bd:39:ae:
a5:f8:6f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:41:14 2025 by rpki-client