Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/nXThEwBWYNqcGrO3RoJeBIc6Rl8.roa
File: nXThEwBWYNqcGrO3RoJeBIc6Rl8.roa (raw, json)
Hash identifier: G/QEoaI66e5kv73wcGaZuTxaZZ5vvEqCjABjTOC9oAQ=
Subject key identifier: 9D:74:E1:13:00:56:60:DA:9C:1A:B3:B7:46:82:5E:04:87:3A:46:5F
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01869CE26BC8DE7210D9BB145FAD159743CC
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/nXThEwBWYNqcGrO3RoJeBIc6Rl8.roa
Signing time: Wed 01 Mar 2023 11:15:29 +0000
ROA not before: Wed 01 Mar 2023 11:15:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29648
IP address blocks: 31.173.119.0/24 maxlen: 24
77.233.160.0/19 maxlen: 19
77.233.160.0/24 maxlen: 24
77.233.166.0/24 maxlen: 24
77.233.161.0/24 maxlen: 24
77.233.164.0/24 maxlen: 24
77.233.162.0/24 maxlen: 24
77.233.167.0/24 maxlen: 24
77.233.170.0/24 maxlen: 24
31.173.104.0/24 maxlen: 24
31.173.105.0/24 maxlen: 24
31.173.112.0/24 maxlen: 24
31.173.109.0/24 maxlen: 24
31.173.110.0/24 maxlen: 24
31.173.107.0/24 maxlen: 24
31.173.108.0/24 maxlen: 24
31.173.106.0/24 maxlen: 24
31.173.111.0/24 maxlen: 24
31.173.117.0/24 maxlen: 24
31.173.118.0/24 maxlen: 24
31.173.115.0/24 maxlen: 24
31.173.116.0/24 maxlen: 24
31.173.113.0/24 maxlen: 24
31.173.114.0/24 maxlen: 24
77.233.173.0/24 maxlen: 24
77.233.178.0/24 maxlen: 24
77.233.181.0/24 maxlen: 24
77.233.182.0/24 maxlen: 24
77.233.185.0/24 maxlen: 24
77.233.180.0/24 maxlen: 24
77.233.186.0/24 maxlen: 24
77.233.190.0/24 maxlen: 24
77.233.188.0/24 maxlen: 24
77.233.191.0/24 maxlen: 24
188.170.98.0/24 maxlen: 24
86.109.192.0/19 maxlen: 19
86.109.192.0/20 maxlen: 20
188.170.97.0/24 maxlen: 24
188.170.96.0/24 maxlen: 24
188.170.100.0/24 maxlen: 24
188.170.103.0/24 maxlen: 24
86.109.195.0/24 maxlen: 24
188.170.105.0/24 maxlen: 24
188.170.102.0/24 maxlen: 24
86.109.193.0/24 maxlen: 24
188.170.99.0/24 maxlen: 24
188.170.104.0/24 maxlen: 24
188.170.101.0/24 maxlen: 24
188.170.106.0/24 maxlen: 24
188.170.111.0/24 maxlen: 24
86.109.200.0/23 maxlen: 23
188.170.108.0/24 maxlen: 24
188.170.110.0/24 maxlen: 24
188.170.107.0/24 maxlen: 24
188.170.109.0/24 maxlen: 24
188.170.112.0/24 maxlen: 24
188.170.114.0/24 maxlen: 24
86.109.213.0/24 maxlen: 24
86.109.210.0/24 maxlen: 24
86.109.208.0/24 maxlen: 24
188.170.113.0/24 maxlen: 24
188.170.116.0/24 maxlen: 24
188.170.115.0/24 maxlen: 24
86.109.212.0/24 maxlen: 24
188.170.118.0/24 maxlen: 24
188.170.117.0/24 maxlen: 24
188.170.119.0/24 maxlen: 24
86.109.216.0/24 maxlen: 24
188.170.122.0/24 maxlen: 24
188.170.121.0/24 maxlen: 24
188.170.120.0/24 maxlen: 24
86.109.214.0/24 maxlen: 24
188.170.124.0/24 maxlen: 24
188.170.123.0/24 maxlen: 24
86.109.215.0/24 maxlen: 24
86.109.218.0/23 maxlen: 23
188.170.125.0/24 maxlen: 24
188.170.127.0/24 maxlen: 24
86.109.222.0/24 maxlen: 24
86.109.220.0/24 maxlen: 24
188.170.126.0/24 maxlen: 24
86.109.223.0/24 maxlen: 24
78.109.120.0/24 maxlen: 24
78.109.121.0/24 maxlen: 24
195.149.111.0/24 maxlen: 24
178.176.96.0/24 maxlen: 24
178.176.98.0/24 maxlen: 24
178.176.97.0/24 maxlen: 24
178.176.102.0/24 maxlen: 24
178.176.99.0/24 maxlen: 24
178.176.101.0/24 maxlen: 24
178.176.103.0/24 maxlen: 24
178.176.100.0/24 maxlen: 24
178.176.118.0/24 maxlen: 24
178.176.115.0/24 maxlen: 24
178.176.117.0/24 maxlen: 24
178.176.114.0/24 maxlen: 24
178.176.116.0/24 maxlen: 24
178.176.123.0/24 maxlen: 24
178.176.120.0/24 maxlen: 24
178.176.125.0/24 maxlen: 24
178.176.122.0/24 maxlen: 24
178.176.119.0/24 maxlen: 24
178.176.124.0/24 maxlen: 24
178.176.121.0/24 maxlen: 24
178.176.126.0/24 maxlen: 24
178.176.127.0/24 maxlen: 24
83.169.217.0/24 maxlen: 24
83.169.218.0/24 maxlen: 24
83.169.219.0/24 maxlen: 24
83.169.220.0/24 maxlen: 24
83.169.223.0/24 maxlen: 24
83.169.221.0/24 maxlen: 24
83.169.222.0/24 maxlen: 24
188.94.172.0/24 maxlen: 24
188.94.169.0/24 maxlen: 24
188.94.170.0/24 maxlen: 24
188.94.168.0/24 maxlen: 24
188.94.171.0/24 maxlen: 24
188.94.175.0/24 maxlen: 24
188.94.173.0/24 maxlen: 24
188.94.174.0/24 maxlen: 24
217.115.81.0/24 maxlen: 24
217.115.80.0/20 maxlen: 20
217.115.80.0/24 maxlen: 24
217.115.91.0/24 maxlen: 24
2a03:d005::/40 maxlen: 40
2a03:d005:200::/40 maxlen: 40
2a03:d000:9004::/46 maxlen: 46
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9c:e2:6b:c8:de:72:10:d9:bb:14:5f:ad:15:97:43:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Mar 1 11:15:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d74e113005660da9c1ab3b746825e04873a465f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:aa:e8:53:9f:ef:57:c4:00:40:28:d0:b7:4b:
bb:64:7f:15:c0:3a:64:3b:8c:8a:a9:93:ef:b2:be:
cc:30:29:1a:d6:17:86:3f:93:9b:9a:d9:34:56:54:
22:c9:6f:d1:6f:89:80:22:ad:48:b5:ad:af:e3:f6:
b4:3a:8a:4a:9d:5c:ba:6d:69:9d:73:bb:4e:2b:6d:
a5:3c:a9:31:e4:b4:6c:b7:50:9b:98:39:70:da:c2:
49:92:24:84:16:d4:7a:e4:71:70:bc:07:42:8b:38:
94:5d:df:37:82:52:25:f6:02:48:42:0a:84:be:dd:
8c:6e:db:22:52:95:14:15:fc:51:6e:ea:53:07:39:
16:a0:ed:e8:68:44:78:69:3d:88:34:54:bd:88:96:
f2:2e:66:92:fa:07:4f:50:dc:ae:76:d8:7c:dc:3e:
a2:80:9e:28:89:3d:37:96:5e:d0:30:95:eb:98:63:
65:09:7f:89:0c:75:02:87:0d:f3:b2:87:3f:f1:ee:
f6:70:30:5a:5f:63:94:f4:00:51:55:32:31:ba:0d:
a7:aa:70:2d:84:cf:1e:93:06:c8:a8:3b:16:d3:82:
9b:b4:18:a2:2d:d6:c8:fd:c3:f5:c2:f5:09:42:71:
01:6d:2f:70:04:02:d2:58:bc:e7:36:5f:dd:83:2f:
37:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:74:E1:13:00:56:60:DA:9C:1A:B3:B7:46:82:5E:04:87:3A:46:5F
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/nXThEwBWYNqcGrO3RoJeBIc6Rl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.104.0-31.173.119.255
77.233.160.0/19
78.109.120.0/23
83.169.217.0-83.169.223.255
86.109.192.0/19
178.176.96.0/21
178.176.114.0-178.176.127.255
188.94.168.0/21
188.170.96.0/19
195.149.111.0/24
217.115.80.0/20
IPv6:
2a03:d000:9004::/46
2a03:d005::/40
2a03:d005:200::/40
Signature Algorithm: sha256WithRSAEncryption
a6:3d:2c:a6:4f:29:b3:87:06:3d:7d:73:d9:68:87:bb:2d:ca:
b4:12:4b:57:af:f6:43:a2:c2:eb:57:79:6b:ff:ab:95:34:e8:
f8:0e:9b:77:08:e9:0e:e1:33:c3:41:f4:c4:95:fd:2f:d1:17:
d7:ee:24:ae:ba:a6:80:5c:07:b0:e6:53:63:c4:cd:b5:e6:c3:
55:f4:4b:6e:8c:1c:63:9f:6a:69:2c:6d:e5:7a:18:e7:67:98:
81:e3:1b:f9:2a:af:2f:95:00:49:d8:e9:e4:62:cd:37:83:b8:
0d:9f:f8:89:d4:1e:0f:da:0d:a2:24:55:1d:13:03:26:00:a1:
15:c8:82:aa:23:60:0b:ce:17:c4:47:ee:b6:21:60:d9:37:a8:
f5:6a:31:73:79:97:95:e6:bb:c1:63:a5:04:af:80:0c:e9:04:
3a:b9:75:88:b0:b3:f5:d0:c8:b2:f0:04:64:48:17:e4:8d:7d:
e5:94:49:cf:04:43:e2:eb:5b:50:b5:d3:74:bf:c7:f9:6b:c2:
7b:57:cc:9c:25:3d:dc:16:97:84:d0:a6:d3:72:43:ef:58:21:
0a:7f:02:73:50:8c:64:8e:f8:27:c6:f2:0c:c2:24:bc:c6:20:
d0:6d:52:ea:5b:de:4d:f5:a7:a1:71:dc:fa:a0:b3:21:e9:a2:
04:09:88:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:56:03 2025 by rpki-client