
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ong7qexufhh6eveyhbi48jae8P0.roa
File: ong7qexufhh6eveyhbi48jae8P0.roa (raw, json)
Hash identifier: noH0JGbtBIyBH/42/tnwyi+zMaP47fWnK0mHAOVIzG0=
Subject key identifier: A2:78:3B:A9:EC:6E:7E:18:7A:7A:F7:B2:85:B8:B8:F2:36:9E:F0:FD
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184F146391EFB45C77BD19106951EF572E2
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ong7qexufhh6eveyhbi48jae8P0.roa
Signing time: Thu 08 Dec 2022 10:27:01 +0000
ROA not before: Thu 08 Dec 2022 10:27:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29648
IP address blocks: 109.188.0.0/16 maxlen: 24
193.201.228.0/22 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
31.173.119.0/24 maxlen: 24
212.119.160.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
77.233.160.0/19 maxlen: 19
77.233.161.0/24 maxlen: 24
77.233.164.0/24 maxlen: 24
77.233.160.0/24 maxlen: 24
77.233.162.0/24 maxlen: 24
77.233.166.0/24 maxlen: 24
77.233.167.0/24 maxlen: 24
77.233.170.0/24 maxlen: 24
195.78.116.0/23 maxlen: 24
31.173.104.0/24 maxlen: 24
31.173.105.0/24 maxlen: 24
31.173.112.0/24 maxlen: 24
31.173.108.0/24 maxlen: 24
31.173.109.0/24 maxlen: 24
31.173.110.0/24 maxlen: 24
31.173.106.0/24 maxlen: 24
31.173.111.0/24 maxlen: 24
31.173.107.0/24 maxlen: 24
31.173.116.0/24 maxlen: 24
31.173.113.0/24 maxlen: 24
31.173.117.0/24 maxlen: 24
31.173.114.0/24 maxlen: 24
31.173.118.0/24 maxlen: 24
31.173.115.0/24 maxlen: 24
77.233.173.0/24 maxlen: 24
77.233.178.0/24 maxlen: 24
77.233.185.0/24 maxlen: 24
77.233.181.0/24 maxlen: 24
77.233.180.0/24 maxlen: 24
77.233.186.0/24 maxlen: 24
77.233.182.0/24 maxlen: 24
77.233.188.0/24 maxlen: 24
77.233.191.0/24 maxlen: 24
77.233.190.0/24 maxlen: 24
212.44.64.0/19 maxlen: 24
195.16.96.0/19 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
185.3.32.0/22 maxlen: 24
188.170.98.0/24 maxlen: 24
86.109.192.0/19 maxlen: 19
86.109.192.0/20 maxlen: 20
188.170.96.0/24 maxlen: 24
188.170.97.0/24 maxlen: 24
188.170.102.0/24 maxlen: 24
86.109.193.0/24 maxlen: 24
188.170.103.0/24 maxlen: 24
188.170.99.0/24 maxlen: 24
188.170.100.0/24 maxlen: 24
188.170.104.0/24 maxlen: 24
86.109.195.0/24 maxlen: 24
188.170.101.0/24 maxlen: 24
188.170.105.0/24 maxlen: 24
188.170.110.0/24 maxlen: 24
188.170.106.0/24 maxlen: 24
188.170.111.0/24 maxlen: 24
188.170.107.0/24 maxlen: 24
86.109.200.0/23 maxlen: 23
188.170.108.0/24 maxlen: 24
212.69.96.0/19 maxlen: 24
188.170.109.0/24 maxlen: 24
188.170.112.0/24 maxlen: 24
188.170.114.0/24 maxlen: 24
86.109.213.0/24 maxlen: 24
188.170.115.0/24 maxlen: 24
188.170.116.0/24 maxlen: 24
86.109.212.0/24 maxlen: 24
86.109.208.0/24 maxlen: 24
188.170.118.0/24 maxlen: 24
188.170.117.0/24 maxlen: 24
188.170.113.0/24 maxlen: 24
86.109.210.0/24 maxlen: 24
188.170.119.0/24 maxlen: 24
188.170.123.0/24 maxlen: 24
86.109.216.0/24 maxlen: 24
188.170.122.0/24 maxlen: 24
86.109.215.0/24 maxlen: 24
86.109.218.0/23 maxlen: 23
188.170.125.0/24 maxlen: 24
188.170.121.0/24 maxlen: 24
188.170.120.0/24 maxlen: 24
86.109.214.0/24 maxlen: 24
188.170.124.0/24 maxlen: 24
188.170.127.0/24 maxlen: 24
86.109.220.0/24 maxlen: 24
188.170.126.0/24 maxlen: 24
86.109.223.0/24 maxlen: 24
86.109.222.0/24 maxlen: 24
78.109.120.0/24 maxlen: 24
78.109.121.0/24 maxlen: 24
185.210.140.0/22 maxlen: 24
128.204.64.0/18 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
178.176.98.0/24 maxlen: 24
195.149.111.0/24 maxlen: 24
178.176.96.0/24 maxlen: 24
178.176.97.0/24 maxlen: 24
178.176.102.0/24 maxlen: 24
178.176.103.0/24 maxlen: 24
178.176.99.0/24 maxlen: 24
178.176.100.0/24 maxlen: 24
178.176.101.0/24 maxlen: 24
178.176.118.0/24 maxlen: 24
178.176.114.0/24 maxlen: 24
178.176.115.0/24 maxlen: 24
178.176.116.0/24 maxlen: 24
178.176.117.0/24 maxlen: 24
178.176.122.0/24 maxlen: 24
178.176.123.0/24 maxlen: 24
178.176.119.0/24 maxlen: 24
178.176.124.0/24 maxlen: 24
178.176.120.0/24 maxlen: 24
178.176.125.0/24 maxlen: 24
178.176.121.0/24 maxlen: 24
178.176.126.0/24 maxlen: 24
178.176.127.0/24 maxlen: 24
83.169.217.0/24 maxlen: 24
83.169.218.0/24 maxlen: 24
83.169.219.0/24 maxlen: 24
83.169.220.0/24 maxlen: 24
83.169.221.0/24 maxlen: 24
83.169.222.0/24 maxlen: 24
83.169.223.0/24 maxlen: 24
188.94.168.0/21 maxlen: 24
109.74.112.0/20 maxlen: 24
188.162.0.0/16 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f1:46:39:1e:fb:45:c7:7b:d1:91:06:95:1e:f5:72:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 8 10:27:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a2783ba9ec6e7e187a7af7b285b8b8f2369ef0fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bc:7e:bb:bc:f7:b8:71:32:fa:79:b4:c1:b1:
d7:a6:01:7b:f2:a0:18:91:0f:e0:fd:42:7e:e3:d3:
e4:fe:39:e4:a7:6c:28:be:28:84:7b:5f:db:0d:ff:
5f:a3:7d:22:30:71:b7:d0:72:62:02:f0:89:72:b0:
f7:ad:48:40:23:da:33:cc:a6:95:10:7d:1f:cd:02:
22:e6:fa:30:fc:28:63:61:3b:10:68:dd:e6:64:a4:
6a:54:d1:54:f5:8a:90:0e:f9:ec:77:70:cf:d4:5f:
c0:45:21:6e:05:4a:ff:d6:d0:9a:a6:68:e1:c8:cf:
e8:ff:5e:b2:2d:98:ce:ea:e7:81:d5:a3:c4:90:50:
67:2f:94:18:df:5d:63:70:a7:2c:02:4f:08:f7:64:
47:95:d0:a1:c8:ef:42:76:55:37:41:f8:34:2f:c4:
1e:2a:83:f7:c0:43:7c:eb:e9:c4:17:b6:3f:bb:a6:
a3:2a:82:ad:48:f9:a3:c8:cf:32:f3:d6:42:d7:a6:
0f:a5:64:0c:d3:af:da:06:3b:32:76:8e:f5:67:58:
78:4c:77:cb:df:2d:3a:72:6a:0f:ad:be:49:63:88:
4a:66:3c:01:df:a2:37:16:8b:87:75:29:3b:8e:2e:
da:7e:87:cd:59:a5:b2:91:3d:5a:1d:45:1c:94:d4:
3e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:78:3B:A9:EC:6E:7E:18:7A:7A:F7:B2:85:B8:B8:F2:36:9E:F0:FD
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ong7qexufhh6eveyhbi48jae8P0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.104.0-31.173.119.255
77.233.160.0/19
78.109.120.0/23
83.169.217.0-83.169.223.255
86.109.192.0/19
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.96.0/21
178.176.114.0-178.176.127.255
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
188.170.96.0/19
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
14:77:4c:43:39:41:b6:18:b6:9d:4b:26:6c:a5:c0:56:98:9c:
4f:c9:3d:79:26:80:5b:b0:bd:29:25:8e:ae:ed:fb:b3:50:96:
87:3e:42:ea:92:4a:05:ad:77:7a:21:8d:97:5e:52:d7:2f:12:
46:80:d7:38:b0:d7:c7:17:dc:e4:3b:50:93:52:5a:b0:b5:26:
8a:0c:16:d0:87:0a:a4:d1:a9:9a:8d:1e:10:9d:1a:c5:ab:35:
cd:78:82:95:21:76:ec:27:a6:3c:c1:de:6c:cd:22:3b:d0:23:
96:99:8a:01:48:c5:38:4b:c6:ef:68:eb:b3:26:e5:32:d5:64:
9c:8e:cb:00:67:85:b5:d7:1b:7f:67:a7:77:b2:a2:c3:0a:f7:
ff:e4:fb:32:c9:81:bf:47:23:dc:40:6b:03:83:f7:2e:e3:cf:
ec:62:9f:16:d3:8e:61:ef:9f:57:44:52:5d:b4:1a:84:95:63:
2f:78:9f:39:1b:df:d2:1f:9f:b4:94:05:ef:c8:fb:63:19:a0:
0d:e0:0d:3d:39:86:e2:3a:18:85:cb:c3:28:52:53:d9:8e:ae:
e0:58:7c:00:9c:f2:2e:ea:bb:5a:fc:e4:4d:4b:17:06:ed:34:
3b:7d:28:20:24:cc:1b:0a:ee:2c:80:68:ac:8f:f3:11:24:3a:
a4:6c:14:21
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgISAYTxRjke+0XHe9GRBpUe9XLiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjIxMjA4MTAyNzAxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMjc4M2JhOWVjNmU3ZTE4N2E3YWY3YjI4NWI4YjhmMjM2OWVmMGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrx+u7z3uHEy+nm0wbHXpgF78qAY
kQ/g/UJ+49Pk/jnkp2woviiEe1/bDf9fo30iMHG30HJiAvCJcrD3rUhAI9ozzKaV
EH0fzQIi5vow/ChjYTsQaN3mZKRqVNFU9YqQDvnsd3DP1F/ARSFuBUr/1tCapmjh
yM/o/16yLZjO6ueB1aPEkFBnL5QY311jcKcsAk8I92RHldChyO9CdlU3Qfg0L8Qe
KoP3wEN86+nEF7Y/u6ajKoKtSPmjyM8y89ZC16YPpWQM06/aBjsydo71Z1h4THfL
3y06cmoPrb5JY4hKZjwB36I3FouHdSk7ji7afofNWaWykT1aHUUclNQ+OwIDAQAB
o4IC2DCCAtQwHQYDVR0OBBYEFKJ4O6nsbn4Yenr3soW4uPI2nvD9MB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvb25nN3FleHVmaGg2ZXZleWhiaTQ4amFlOFAwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHtBggrBgEFBQcBBwEB/wSB3TCB2jCB1wQCAAEwgdAwDAME
Ax+taAMEAx+tcAMEBU3poAMEAU5teDAMAwQAU6nZAwQFU6nAAwQFVm3AAwQEbUpw
AwQGbXxAAwMAbbwDBAaAzEADBAOyF5ADBAOysGAwDAMEAbKwcgMEB7KwAAMEArkD
IAMEArnSjAMEA7xeqAMDALyiAwQFvKpgAwQCwcnkAwQFwwWAAwQFwxBgAwQBw050
AwQAw5VvAwQFw+ZAAwQF1A6gAwQF1CxAAwQF1EVgAwQF1HegAwQF1ZqgAwQF1agg
AwQG1fNAAwQE2XNQMA0GCSqGSIb3DQEBCwUAA4IBAQAUd0xDOUG2GLadSyZspcBW
mJxPyT15JoBbsL0pJY6u7fuzUJaHPkLqkkoFrXd6IY2XXlLXLxJGgNc4sNfHF9zk
O1CTUlqwtSaKDBbQhwqk0amajR4QnRrFqzXNeIKVIXbsJ6Y8wd5szSI70COWmYoB
SMU4S8bvaOuzJuUy1WScjssAZ4W11xt/Z6d3sqLDCvf/5PsyyYG/RyPcQGsDg/cu
48/sYp8W045h759XRFJdtBqElWMveJ85G9/SH5+0lAXvyPtjGaAN4A09OYbiOhiF
y8MoUlPZjq7gWHwAnPIu6rta/ORNSxcG7TQ7fSggJMwbCu4sgGisj/MRJDqkbBQh
-----END CERTIFICATE-----
Generated at Tue Apr 8 04:31:17 2025 by rpki-client