Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/t632asaX-YiAMZWNXySZUdw75NI.roa
File: t632asaX-YiAMZWNXySZUdw75NI.roa (raw, json)
Hash identifier: I23qke1ltYwEjeXXnSdqw/BmhrBOny8IP/t5+BaJXZ4=
Subject key identifier: B7:AD:F6:6A:C6:97:F9:88:80:31:95:8D:5F:24:99:51:DC:3B:E4:D2
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0185053F71E796069B48925368727F9B920B
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/t632asaX-YiAMZWNXySZUdw75NI.roa
Signing time: Mon 12 Dec 2022 07:32:02 +0000
ROA not before: Mon 12 Dec 2022 07:32:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25159
IP address blocks: 195.16.96.0/19 maxlen: 24
193.201.228.0/22 maxlen: 24
109.188.112.0/23 maxlen: 23
109.188.114.0/24 maxlen: 24
85.26.144.0/20 maxlen: 20
109.188.64.0/19 maxlen: 19
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
109.188.96.0/21 maxlen: 21
78.25.119.0/24 maxlen: 24
94.25.131.0/24 maxlen: 24
94.25.144.0/20 maxlen: 20
212.69.96.0/19 maxlen: 24
94.25.164.0/24 maxlen: 24
94.25.160.0/24 maxlen: 24
94.25.172.0/22 maxlen: 22
94.25.168.0/22 maxlen: 22
188.170.25.0/24 maxlen: 24
188.170.32.0/21 maxlen: 21
188.170.40.0/21 maxlen: 21
37.28.176.0/21 maxlen: 21
212.119.160.0/19 maxlen: 24
178.177.0.0/18 maxlen: 18
178.177.3.0/24 maxlen: 24
78.25.112.0/22 maxlen: 22
78.25.116.0/23 maxlen: 23
78.25.118.0/24 maxlen: 24
94.25.176.0/21 maxlen: 21
94.25.184.0/21 maxlen: 21
195.5.128.0/19 maxlen: 24
128.204.78.0/23 maxlen: 23
128.204.76.0/22 maxlen: 22
37.29.32.0/21 maxlen: 21
128.204.76.0/23 maxlen: 23
178.176.52.0/22 maxlen: 22
178.176.72.0/21 maxlen: 21
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
31.173.0.0/21 maxlen: 21
195.149.111.0/24 maxlen: 24
31.173.8.0/21 maxlen: 21
178.176.0.0/19 maxlen: 19
213.243.109.0/24 maxlen: 24
213.243.116.0/24 maxlen: 24
83.229.254.0/24 maxlen: 24
195.78.116.0/23 maxlen: 24
178.176.32.0/21 maxlen: 21
178.176.40.0/21 maxlen: 21
31.173.72.0/21 maxlen: 21
31.173.80.0/21 maxlen: 21
31.173.88.0/21 maxlen: 21
188.170.0.0/19 maxlen: 19
188.170.24.0/24 maxlen: 24
31.173.16.0/21 maxlen: 21
31.173.24.0/21 maxlen: 21
31.173.32.0/19 maxlen: 19
31.173.60.0/24 maxlen: 24
31.173.64.0/21 maxlen: 21
188.162.0.0/16 maxlen: 24
62.64.0.0/20 maxlen: 20
83.229.211.0/24 maxlen: 24
46.229.128.0/22 maxlen: 22
212.44.64.0/19 maxlen: 24
83.222.212.0/22 maxlen: 22
83.222.216.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:3f:71:e7:96:06:9b:48:92:53:68:72:7f:9b:92:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 12 07:32:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b7adf66ac697f9888031958d5f249951dc3be4d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7d:0b:bd:83:98:ca:dd:fb:ac:03:81:fa:68:
55:32:32:58:7e:4d:d3:7e:cc:80:2e:51:35:f1:07:
66:9a:af:7b:cd:92:17:30:49:0c:ee:5a:b5:38:02:
0c:b0:45:c6:51:c7:27:5f:55:ee:e3:ef:fd:1f:5c:
e6:b8:9c:ab:d9:93:fa:14:a8:92:2a:40:25:69:74:
02:d6:8d:13:b4:02:3e:2a:90:d0:0b:a2:38:19:61:
2b:25:09:fb:4a:ce:1d:91:e8:f3:63:69:74:5d:c8:
fa:ef:eb:60:be:13:b3:c8:9e:8c:f1:7f:95:75:77:
a3:e0:05:e5:2b:bb:55:47:9e:b3:2b:1a:bf:14:71:
ec:36:bd:d1:9e:9a:41:e8:03:94:b1:8f:cb:35:fe:
a6:77:86:fa:c6:59:59:42:b5:9a:f9:54:b5:84:4b:
09:b7:9d:45:c6:51:71:35:b7:ee:7c:0d:8c:64:cc:
4a:88:96:0d:0d:66:a0:82:b9:3b:36:c7:86:f9:e0:
06:73:96:42:3f:02:ea:fd:b7:95:da:f1:9e:3b:c6:
2d:18:2b:e6:da:01:bd:c2:80:15:9b:a4:d0:95:da:
d5:06:56:4f:42:76:3f:fd:09:30:ed:46:72:e2:5d:
88:92:69:27:0b:af:5c:1a:1e:57:db:16:61:99:75:
78:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:AD:F6:6A:C6:97:F9:88:80:31:95:8D:5F:24:99:51:DC:3B:E4:D2
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/t632asaX-YiAMZWNXySZUdw75NI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.0.0-31.173.95.255
37.28.176.0/21
37.29.32.0/21
46.229.128.0/22
62.64.0.0/20
78.25.112.0/21
83.222.212.0-83.222.223.255
83.229.211.0/24
83.229.254.0/24
85.26.144.0/20
94.25.131.0/24
94.25.144.0-94.25.160.255
94.25.164.0/24
94.25.168.0-94.25.191.255
109.188.64.0-109.188.103.255
109.188.112.0-109.188.114.255
128.204.76.0/22
178.176.0.0-178.176.47.255
178.176.52.0/22
178.176.72.0/21
178.177.0.0/18
188.162.0.0/16
188.170.0.0-188.170.47.255
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.109.0/24
213.243.116.0/24
Signature Algorithm: sha256WithRSAEncryption
09:8d:d3:f1:9e:e2:fc:6b:bd:27:57:b7:77:36:7c:44:05:d8:
f5:ed:14:9f:cb:22:1f:f8:2c:68:81:31:2e:87:34:38:4c:7f:
4d:d5:a7:f5:8e:13:27:6c:c6:4f:12:57:fb:92:24:18:ce:5d:
32:94:5e:a0:a5:3a:cd:6f:28:fc:5f:71:36:fd:ad:60:c2:ff:
3a:a9:8e:df:b4:9f:3c:2b:76:04:98:ff:fa:7b:9d:ff:6c:b2:
b1:f9:11:1f:73:e3:78:60:1f:cd:25:31:96:b5:60:cc:10:f8:
e7:ed:69:56:c5:b1:73:97:ad:5d:d2:08:fe:84:9b:8f:cc:24:
77:57:2c:89:1a:f1:5c:85:4c:6b:af:c8:2a:40:92:7e:c3:ad:
ce:a6:93:46:2e:c3:24:84:35:88:64:36:52:4f:b5:ee:60:e6:
62:a2:0f:d4:8b:b2:20:6b:db:19:b2:69:f9:dc:18:50:03:fa:
35:dd:53:85:33:07:b9:9d:87:74:cf:81:5f:28:15:bf:e7:bb:
43:e3:b2:9a:02:3a:de:9a:c5:0d:d6:19:12:67:d6:f1:e3:00:
02:bf:09:39:0b:0f:5d:7c:82:41:78:58:52:09:01:4a:3b:b1:
ee:8e:5e:47:b4:5c:31:19:15:93:06:d6:ad:d4:17:67:1d:91:
39:38:65:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:25:54 2025 by rpki-client