Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/pB2fYRxf4rdSefH4UUO4Gh8bqHg.roa
File: pB2fYRxf4rdSefH4UUO4Gh8bqHg.roa (raw, json)
Hash identifier: s0MA1cOwTWrLYeB45Jh+E8gyFpWbTPV97CuIILbXmnw=
Subject key identifier: A4:1D:9F:61:1C:5F:E2:B7:52:79:F1:F8:51:43:B8:1A:1F:1B:A8:78
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184C3EFCC783E78AB2E48E867CA660A9CD3
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/pB2fYRxf4rdSefH4UUO4Gh8bqHg.roa
Signing time: Tue 29 Nov 2022 15:09:43 +0000
ROA not before: Tue 29 Nov 2022 15:09:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31213
IP address blocks: 109.188.0.0/16 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
79.171.8.0/21 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
188.170.80.0/21 maxlen: 21
94.25.128.0/17 maxlen: 24
93.153.128.0/17 maxlen: 24
188.170.92.0/22 maxlen: 22
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
37.28.160.0/21 maxlen: 21
78.25.64.0/18 maxlen: 24
37.28.168.0/21 maxlen: 21
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
188.170.66.0/24 maxlen: 24
188.170.68.0/24 maxlen: 24
188.170.65.0/24 maxlen: 24
188.170.67.0/24 maxlen: 24
188.170.72.0/21 maxlen: 21
37.29.71.0/24 maxlen: 24
37.29.68.0/23 maxlen: 23
37.29.70.0/24 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
37.29.48.0/21 maxlen: 21
95.137.0.0/17 maxlen: 24
37.29.56.0/21 maxlen: 21
37.29.64.0/22 maxlen: 22
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
77.233.160.0/19 maxlen: 24
81.24.128.0/20 maxlen: 24
78.41.100.0/22 maxlen: 24
195.78.116.0/23 maxlen: 24
83.169.192.0/18 maxlen: 24
109.74.112.0/20 maxlen: 24
188.162.0.0/16 maxlen: 24
188.94.168.0/21 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.149.0.0/21 maxlen: 21
83.222.192.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
212.44.64.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c3:ef:cc:78:3e:78:ab:2e:48:e8:67:ca:66:0a:9c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Nov 29 15:09:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a41d9f611c5fe2b75279f1f85143b81a1f1ba878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b7:3f:d1:48:20:57:97:44:ef:33:48:ca:75:
19:df:7b:b9:47:88:15:82:77:8b:10:7a:a7:4e:d9:
de:ff:e5:9a:cf:1f:3d:f6:67:c3:ae:85:87:93:fe:
ce:d0:b4:db:b3:bf:68:8e:8c:9c:cf:ec:fd:27:60:
71:87:a1:04:0d:ab:e3:6b:ca:bd:86:e4:cf:45:93:
29:2c:e6:e3:75:34:55:79:1d:dd:03:8b:b3:30:4f:
06:fc:77:b2:c5:30:74:39:c0:7c:c5:0a:08:9b:66:
27:4d:ec:eb:6f:33:a3:de:d5:36:26:d0:f9:5d:8d:
fc:c3:bf:da:fc:5d:4a:97:ee:48:9d:ae:be:03:a3:
be:ee:43:13:96:42:3e:fa:12:a3:f8:50:88:4f:ac:
f1:eb:cb:35:c9:f9:b4:5c:80:90:d4:63:6d:7e:f1:
a6:48:dc:a3:3d:b6:e4:a1:3d:ed:de:2a:67:66:31:
0c:73:8d:9a:64:61:47:e8:50:33:f8:d9:7b:31:a3:
76:c5:00:b3:47:7b:98:45:c6:ce:ba:4c:3c:1b:29:
10:c5:ad:0e:9d:c0:25:6b:d3:f8:a3:f8:18:69:74:
8e:f8:06:bc:4d:bd:f2:b3:5d:1a:b8:dc:c1:eb:4b:
38:df:b7:ad:fe:84:85:d0:83:a6:a7:88:d5:a7:0f:
e9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:1D:9F:61:1C:5F:E2:B7:52:79:F1:F8:51:43:B8:1A:1F:1B:A8:78
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/pB2fYRxf4rdSefH4UUO4Gh8bqHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.28.160.0/20
37.29.48.0-37.29.71.255
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.149.0.0/21
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
188.170.65.0-188.170.68.255
188.170.72.0-188.170.87.255
188.170.92.0/22
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
9b:b7:e1:4f:5f:b4:6a:07:58:4f:66:4f:92:7d:c6:a2:e6:7b:
ba:32:b1:8e:01:0a:8c:a9:b2:17:22:72:f8:47:92:44:63:85:
e9:f8:63:46:47:51:e1:04:5d:2a:32:2f:e0:57:7f:ee:63:b4:
6d:da:02:f4:8f:95:2a:ae:a9:3f:82:55:29:ae:d2:fe:bd:55:
be:41:aa:b6:5e:9f:9c:da:2f:5f:4e:f2:3a:77:c8:fe:93:d2:
e9:3a:0d:e2:67:e1:6d:49:c2:fc:f8:ee:6d:6a:77:11:e5:b5:
06:af:72:cb:92:5c:d2:09:3b:df:f1:00:32:f3:42:86:a1:9d:
4a:04:63:47:bc:ee:64:b3:7d:5d:86:db:0c:09:4a:e1:05:2a:
37:d4:14:2b:0a:17:1f:21:aa:ca:e8:3b:5c:d2:61:72:a8:53:
95:11:ea:52:8c:fb:3d:e3:aa:64:39:04:8a:d8:e8:68:d0:53:
1b:22:9a:40:33:f9:05:63:10:30:4c:7f:75:e7:41:04:54:8a:
99:34:6d:00:72:50:df:5c:bd:f9:0f:e7:93:97:12:f0:22:e1:
7d:29:04:19:56:9c:60:32:9e:f5:18:50:a8:c1:03:4f:47:5e:
bd:65:b6:d4:82:99:d0:98:eb:7c:2e:fb:bc:1e:25:8a:99:68:
25:77:13:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:36:05 2025 by rpki-client