Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/q-ZiaW3HS_w5MTDviWDaQb2E5Ho.roa
File: q-ZiaW3HS_w5MTDviWDaQb2E5Ho.roa (raw, json)
Hash identifier: cqaFmykvywduijKMPZtLJJCs3iIqNlQJ94eAwYNpyew=
Subject key identifier: AB:E6:62:69:6D:C7:4B:FC:39:31:30:EF:89:60:DA:41:BD:84:E4:7A
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01847659036605022DECDEFA1988E19B5A71
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/q-ZiaW3HS_w5MTDviWDaQb2E5Ho.roa
Signing time: Mon 14 Nov 2022 13:34:15 +0000
ROA not before: Mon 14 Nov 2022 13:34:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31208
IP address blocks: 109.188.0.0/16 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
79.171.8.0/21 maxlen: 24
178.178.84.0/22 maxlen: 22
178.178.82.0/24 maxlen: 24
193.201.228.0/22 maxlen: 24
178.178.80.0/23 maxlen: 23
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
93.153.128.0/17 maxlen: 24
94.25.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
78.25.64.0/18 maxlen: 24
185.210.140.0/22 maxlen: 24
178.176.230.0/23 maxlen: 23
212.119.160.0/19 maxlen: 24
37.28.186.0/24 maxlen: 24
188.170.50.0/24 maxlen: 24
37.28.184.0/24 maxlen: 24
37.28.185.0/24 maxlen: 24
188.170.49.0/24 maxlen: 24
188.170.48.0/24 maxlen: 24
188.170.55.0/24 maxlen: 24
80.247.176.0/20 maxlen: 24
188.170.52.0/24 maxlen: 24
188.170.57.0/24 maxlen: 24
188.170.54.0/24 maxlen: 24
37.28.187.0/24 maxlen: 24
188.170.56.0/24 maxlen: 24
188.170.53.0/24 maxlen: 24
91.193.212.0/22 maxlen: 24
188.170.63.0/24 maxlen: 24
188.170.60.0/24 maxlen: 24
188.170.62.0/24 maxlen: 24
188.170.59.0/24 maxlen: 24
188.170.61.0/24 maxlen: 24
37.29.74.0/24 maxlen: 24
37.29.73.0/24 maxlen: 24
37.29.75.0/24 maxlen: 24
37.29.72.0/24 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
178.176.56.0/24 maxlen: 24
178.176.58.0/24 maxlen: 24
178.176.57.0/24 maxlen: 24
178.176.62.0/24 maxlen: 24
178.176.59.0/24 maxlen: 24
178.176.61.0/24 maxlen: 24
178.176.63.0/24 maxlen: 24
178.176.60.0/24 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
77.233.160.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
81.24.128.0/20 maxlen: 24
83.149.41.0/24 maxlen: 24
83.149.44.0/23 maxlen: 23
83.149.42.0/23 maxlen: 23
83.149.40.0/24 maxlen: 24
195.78.116.0/23 maxlen: 24
78.41.100.0/22 maxlen: 24
83.149.46.0/23 maxlen: 23
83.169.192.0/18 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
109.74.112.0/20 maxlen: 24
46.232.200.0/21 maxlen: 24
62.64.0.0/19 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
212.44.64.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
46.229.136.0/22 maxlen: 22
46.229.140.0/24 maxlen: 24
46.229.143.0/24 maxlen: 24
46.229.141.0/24 maxlen: 24
46.229.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:76:59:03:66:05:02:2d:ec:de:fa:19:88:e1:9b:5a:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Nov 14 13:34:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=abe662696dc74bfc393130ef8960da41bd84e47a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f9:de:f6:43:17:42:26:6e:65:07:ba:ec:b7:
3a:1b:d0:57:05:0c:d1:53:e0:3e:26:07:30:9d:0d:
39:dd:6f:05:09:e1:b7:f8:76:59:79:e8:f3:14:6d:
d5:e0:42:f2:54:93:4a:62:31:1c:fe:54:e4:29:0f:
67:52:ae:07:78:bc:87:be:78:84:a4:72:d0:c1:a4:
1a:fb:e9:d8:ec:28:aa:97:a5:db:1c:92:8d:15:7e:
ad:2a:ed:73:8a:3c:8f:43:fe:c4:63:bb:60:84:d3:
ba:82:ca:40:63:13:42:96:19:dc:9d:12:f3:67:c0:
51:c7:ca:4a:5c:07:a4:1c:39:d0:bd:e5:13:44:d9:
c3:d0:78:a1:d8:6f:c6:38:0e:6c:7a:a6:a1:d1:e8:
3c:56:e0:89:f3:fd:2c:11:6b:91:3f:31:cb:df:5d:
89:83:ed:4c:83:81:3b:42:dd:7a:87:ab:a6:f4:40:
a1:70:11:c1:79:39:b8:73:0e:6f:42:56:2b:40:50:
0b:69:8d:d8:19:d9:29:4e:b1:48:b8:05:b3:73:e8:
6b:b2:5a:b8:a8:f6:0f:ab:36:00:89:7f:ec:ce:f3:
bd:ca:d6:10:9f:47:49:a5:9a:24:15:a1:04:aa:a9:
42:99:5e:67:c2:ea:23:32:54:af:9d:9f:54:7a:3c:
2c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E6:62:69:6D:C7:4B:FC:39:31:30:EF:89:60:DA:41:BD:84:E4:7A
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/q-ZiaW3HS_w5MTDviWDaQb2E5Ho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.28.184.0/22
37.29.72.0/22
46.229.136.0/21
46.232.200.0/21
62.64.0.0/19
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.149.40.0/21
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.56.0/21
178.176.230.0/23
178.178.80.0-178.178.82.255
178.178.84.0/22
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
188.170.48.0-188.170.50.255
188.170.52.0-188.170.57.255
188.170.59.0-188.170.63.255
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
65:bd:65:b3:71:11:19:48:91:52:18:04:00:84:a4:b9:b7:0c:
cd:bc:fb:f1:13:91:67:9e:50:a1:67:aa:3b:f7:53:04:b6:17:
5f:78:b4:e2:c1:1a:9e:16:31:d6:34:b4:1b:26:a7:bc:17:b5:
ad:10:05:18:cb:e8:9b:c4:b9:22:ff:34:bf:c6:48:4d:50:f0:
60:76:30:dc:ed:f6:9d:b6:c5:3b:7c:87:47:3d:4b:3c:4a:d8:
62:f6:04:dd:54:8e:be:84:ce:57:ad:4b:d6:89:47:03:7b:f5:
31:5b:6a:40:fb:1c:01:80:7d:15:30:38:6e:a8:a4:e8:14:3b:
21:2f:3e:e5:28:c1:6f:c5:ff:9e:bd:0b:02:a1:be:67:9e:32:
53:ba:34:7d:0b:f7:66:a1:b2:ab:05:fc:0f:9b:3a:f2:09:37:
62:82:d6:e8:0c:35:85:e0:f3:49:ac:a7:ef:49:18:96:fb:05:
82:11:75:e2:6f:91:7c:0f:fa:37:dd:dc:8a:67:b1:4d:8c:a3:
77:42:e7:80:91:d0:0f:e3:49:0c:42:77:2f:e1:c7:52:76:5c:
31:ce:62:2d:0c:cd:2f:98:92:d2:eb:01:4e:bb:fb:3d:9c:24:
57:00:b3:7e:ce:89:c4:f6:71:b2:0c:26:49:f0:b2:94:81:fa:
0c:06:71:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:28:21 2025 by rpki-client