Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/tjHNWmKEub8RDLBRFomESLovIvQ.roa
File: tjHNWmKEub8RDLBRFomESLovIvQ.roa (raw, json)
Hash identifier: WYzftP5MpdrkCwObHzh0waYEz5Cv00PWBw6vTjn5Qjo=
Subject key identifier: B6:31:CD:5A:62:84:B9:BF:11:0C:B0:51:16:89:84:48:BA:2F:22:F4
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0194228D252D2BE83DED695AB2DE50106BDC
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/tjHNWmKEub8RDLBRFomESLovIvQ.roa
Signing time: Wed 01 Jan 2025 15:47:42 +0000
ROA not before: Wed 01 Jan 2025 15:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29648
IP address blocks: 31.173.104.0/24 maxlen: 24
31.173.105.0/24 maxlen: 24
31.173.106.0/24 maxlen: 24
31.173.107.0/24 maxlen: 24
31.173.108.0/24 maxlen: 24
31.173.109.0/24 maxlen: 24
31.173.110.0/24 maxlen: 24
31.173.111.0/24 maxlen: 24
31.173.112.0/24 maxlen: 24
31.173.113.0/24 maxlen: 24
31.173.114.0/24 maxlen: 24
31.173.115.0/24 maxlen: 24
31.173.116.0/24 maxlen: 24
31.173.117.0/24 maxlen: 24
31.173.118.0/24 maxlen: 24
31.173.119.0/24 maxlen: 24
77.233.160.0/19 maxlen: 19
77.233.160.0/24 maxlen: 24
77.233.161.0/24 maxlen: 24
77.233.162.0/24 maxlen: 24
77.233.164.0/24 maxlen: 24
77.233.166.0/24 maxlen: 24
77.233.167.0/24 maxlen: 24
77.233.170.0/24 maxlen: 24
77.233.173.0/24 maxlen: 24
77.233.178.0/24 maxlen: 24
77.233.180.0/24 maxlen: 24
77.233.181.0/24 maxlen: 24
77.233.182.0/24 maxlen: 24
77.233.185.0/24 maxlen: 24
77.233.186.0/24 maxlen: 24
77.233.188.0/24 maxlen: 24
77.233.190.0/24 maxlen: 24
77.233.191.0/24 maxlen: 24
78.109.120.0/24 maxlen: 24
78.109.121.0/24 maxlen: 24
78.109.123.0/24 maxlen: 24
78.109.124.0/24 maxlen: 24
83.169.217.0/24 maxlen: 24
83.169.218.0/24 maxlen: 24
83.169.219.0/24 maxlen: 24
83.169.220.0/24 maxlen: 24
83.169.221.0/24 maxlen: 24
83.169.222.0/24 maxlen: 24
83.169.223.0/24 maxlen: 24
86.109.192.0/19 maxlen: 19
86.109.192.0/20 maxlen: 20
86.109.193.0/24 maxlen: 24
86.109.195.0/24 maxlen: 24
86.109.200.0/23 maxlen: 23
86.109.208.0/24 maxlen: 24
86.109.210.0/24 maxlen: 24
86.109.212.0/24 maxlen: 24
86.109.213.0/24 maxlen: 24
86.109.214.0/24 maxlen: 24
86.109.215.0/24 maxlen: 24
86.109.216.0/24 maxlen: 24
86.109.218.0/23 maxlen: 23
86.109.220.0/24 maxlen: 24
86.109.222.0/24 maxlen: 24
86.109.223.0/24 maxlen: 24
178.176.96.0/24 maxlen: 24
178.176.97.0/24 maxlen: 24
178.176.98.0/24 maxlen: 24
178.176.99.0/24 maxlen: 24
178.176.100.0/24 maxlen: 24
178.176.101.0/24 maxlen: 24
178.176.102.0/24 maxlen: 24
178.176.103.0/24 maxlen: 24
178.176.114.0/24 maxlen: 24
178.176.115.0/24 maxlen: 24
178.176.116.0/24 maxlen: 24
178.176.117.0/24 maxlen: 24
178.176.118.0/24 maxlen: 24
178.176.119.0/24 maxlen: 24
178.176.120.0/24 maxlen: 24
178.176.121.0/24 maxlen: 24
178.176.122.0/24 maxlen: 24
178.176.123.0/24 maxlen: 24
178.176.124.0/24 maxlen: 24
178.176.125.0/24 maxlen: 24
178.176.126.0/24 maxlen: 24
178.176.127.0/24 maxlen: 24
178.178.160.0/24 maxlen: 24
188.94.168.0/24 maxlen: 24
188.94.169.0/24 maxlen: 24
188.94.170.0/24 maxlen: 24
188.94.171.0/24 maxlen: 24
188.94.172.0/24 maxlen: 24
188.94.173.0/24 maxlen: 24
188.94.174.0/24 maxlen: 24
188.94.175.0/24 maxlen: 24
188.170.96.0/24 maxlen: 24
188.170.97.0/24 maxlen: 24
188.170.98.0/24 maxlen: 24
188.170.99.0/24 maxlen: 24
188.170.100.0/24 maxlen: 24
188.170.101.0/24 maxlen: 24
188.170.102.0/24 maxlen: 24
188.170.103.0/24 maxlen: 24
188.170.104.0/24 maxlen: 24
188.170.105.0/24 maxlen: 24
188.170.106.0/24 maxlen: 24
188.170.107.0/24 maxlen: 24
188.170.108.0/24 maxlen: 24
188.170.109.0/24 maxlen: 24
188.170.110.0/24 maxlen: 24
188.170.111.0/24 maxlen: 24
188.170.112.0/24 maxlen: 24
188.170.113.0/24 maxlen: 24
188.170.114.0/24 maxlen: 24
188.170.115.0/24 maxlen: 24
188.170.116.0/24 maxlen: 24
188.170.117.0/24 maxlen: 24
188.170.118.0/24 maxlen: 24
188.170.119.0/24 maxlen: 24
188.170.120.0/24 maxlen: 24
188.170.121.0/24 maxlen: 24
188.170.122.0/24 maxlen: 24
188.170.123.0/24 maxlen: 24
188.170.124.0/24 maxlen: 24
188.170.125.0/24 maxlen: 24
188.170.126.0/24 maxlen: 24
188.170.127.0/24 maxlen: 24
195.149.111.0/24 maxlen: 24
217.115.80.0/20 maxlen: 20
217.115.80.0/24 maxlen: 24
217.115.81.0/24 maxlen: 24
217.115.91.0/24 maxlen: 24
217.115.94.0/24 maxlen: 24
2a03:d000:9004::/46 maxlen: 46
2a03:d005::/40 maxlen: 40
2a03:d005:100::/40 maxlen: 40
2a03:d005:200::/40 maxlen: 40
2a03:d005:300::/40 maxlen: 40
2a03:d005:400::/40 maxlen: 40
2a03:d005:500::/40 maxlen: 40
2a03:d005:600::/40 maxlen: 40
2a03:d005:700::/40 maxlen: 40
2a03:d005:800::/40 maxlen: 40
2a03:d005:900::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:25:2d:2b:e8:3d:ed:69:5a:b2:de:50:10:6b:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 15:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b631cd5a6284b9bf110cb05116898448ba2f22f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:12:9e:4e:46:10:3e:9b:20:d8:bc:b9:e2:85:
93:e0:b2:bc:5b:8a:c1:74:5c:dc:ea:25:b0:1c:7d:
12:9b:bd:00:62:d1:b7:2b:99:09:89:f7:c7:1a:e6:
61:6a:21:c8:ed:c2:a0:fc:40:ef:2e:00:d8:91:b6:
cd:57:dc:c0:3d:e9:1a:31:3d:57:d6:22:14:56:32:
b7:27:45:69:ef:a3:95:ef:0f:87:96:01:95:d4:c6:
da:75:9f:3a:5b:1b:c3:23:be:29:51:97:24:7f:0d:
39:03:56:bb:e6:a1:5f:a2:7c:cc:18:fa:2f:d8:aa:
17:7d:b1:fc:11:e2:94:a1:1d:53:81:03:38:38:2e:
e9:b7:a7:3d:c4:49:a1:57:01:19:b0:5a:de:36:ab:
2f:b0:b3:b0:d5:f7:77:55:99:47:bb:ae:92:d0:52:
f1:06:f3:3a:d1:11:dd:74:ff:5c:91:57:ba:07:16:
ab:4f:21:bf:bc:ac:2d:08:be:52:1b:d9:c7:f4:1f:
e7:f7:4c:cd:f7:20:42:0b:e4:44:ad:db:11:c8:bd:
1d:fa:c5:58:7d:2e:40:92:91:fd:99:6f:03:13:96:
2c:3c:03:cf:6e:83:cf:b6:06:f4:46:91:b3:e5:79:
9d:9a:3f:eb:bc:98:9d:e8:a7:00:15:97:e6:a0:71:
4f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:31:CD:5A:62:84:B9:BF:11:0C:B0:51:16:89:84:48:BA:2F:22:F4
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/tjHNWmKEub8RDLBRFomESLovIvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.104.0-31.173.119.255
77.233.160.0/19
78.109.120.0/23
78.109.123.0-78.109.124.255
83.169.217.0-83.169.223.255
86.109.192.0/19
178.176.96.0/21
178.176.114.0-178.176.127.255
178.178.160.0/24
188.94.168.0/21
188.170.96.0/19
195.149.111.0/24
217.115.80.0/20
IPv6:
2a03:d000:9004::/46
2a03:d005::-2a03:d005:9ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
03:5b:4d:e5:51:a6:a8:6b:bd:9e:9c:09:94:aa:6c:b1:8f:ee:
0c:d8:1c:ec:eb:3d:84:f1:b0:1a:98:f3:48:21:04:43:59:f9:
78:f3:8d:18:3d:ce:0f:97:3e:f2:b8:11:39:c8:b4:f3:d2:45:
cb:01:d5:d6:8d:c6:af:29:0e:64:0d:03:ec:d7:a6:5b:5d:ea:
04:4b:e9:34:2d:15:dd:df:0f:3d:fc:71:4f:2c:1f:01:3e:10:
e7:f5:d9:33:a0:80:37:ff:f9:50:d4:5f:ad:27:f7:5f:24:e5:
4c:b9:a3:ec:30:d0:78:01:db:ea:df:b2:24:87:ae:64:d7:08:
77:d7:82:eb:28:4a:03:ff:ff:9f:06:2a:8f:8a:59:0a:1d:a7:
66:13:6d:5c:ed:96:4a:a7:e0:51:df:1d:43:25:6f:ef:f4:c5:
19:b0:16:a7:63:1a:29:43:38:42:7b:12:bb:38:46:0e:ed:b8:
fd:2b:8b:8e:d6:85:f0:7a:99:19:cb:2f:fc:f1:7b:5d:3b:7d:
79:96:a7:be:f2:5c:c4:0f:cf:b3:20:9c:a9:e0:cb:2d:20:22:
04:c7:22:ce:b8:04:23:71:78:03:a2:66:d2:4e:cb:e3:af:c6:
8e:a1:86:49:58:65:0c:a2:2d:c4:07:d8:22:5e:12:13:3d:a5:
12:3b:39:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:36 2025 by rpki-client