Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/wesUsTowdM4tFuCF-fM9SZqZQqU.roa
File: wesUsTowdM4tFuCF-fM9SZqZQqU.roa (raw, json)
Hash identifier: T44kru0yuHlOb2RHDg7H5nWAUWTKqpyrnaeasi0Q/I0=
Subject key identifier: C1:EB:14:B1:3A:30:74:CE:2D:16:E0:85:F9:F3:3D:49:9A:99:42:A5
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0194228D278F86D43D8646D65D75E4580D16
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/wesUsTowdM4tFuCF-fM9SZqZQqU.roa
Signing time: Wed 01 Jan 2025 15:47:43 +0000
ROA not before: Wed 01 Jan 2025 15:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31195
IP address blocks: 31.173.132.0/23 maxlen: 23
31.173.134.0/23 maxlen: 23
31.173.135.0/24 maxlen: 24
31.173.143.0/24 maxlen: 24
31.173.225.0/24 maxlen: 24
31.173.226.0/24 maxlen: 24
31.173.228.0/23 maxlen: 23
31.173.228.0/24 maxlen: 24
31.173.229.0/24 maxlen: 24
31.173.230.0/24 maxlen: 24
31.173.231.0/24 maxlen: 24
31.173.232.0/23 maxlen: 23
31.173.235.0/24 maxlen: 24
31.173.236.0/23 maxlen: 23
31.173.238.0/24 maxlen: 24
31.173.239.0/24 maxlen: 24
37.28.188.0/22 maxlen: 22
37.28.190.0/24 maxlen: 24
37.28.191.0/24 maxlen: 24
37.29.43.0/24 maxlen: 24
37.29.88.0/22 maxlen: 22
37.29.89.0/24 maxlen: 24
37.29.91.0/24 maxlen: 24
37.29.92.0/22 maxlen: 22
37.29.94.0/24 maxlen: 24
37.29.95.0/24 maxlen: 24
78.25.124.0/22 maxlen: 22
78.25.127.0/24 maxlen: 24
83.149.52.0/22 maxlen: 22
83.169.224.0/23 maxlen: 23
83.169.226.0/24 maxlen: 24
83.169.227.0/24 maxlen: 24
83.169.228.0/23 maxlen: 23
83.169.230.0/24 maxlen: 24
85.26.240.0/22 maxlen: 22
85.26.244.0/22 maxlen: 22
85.26.247.0/24 maxlen: 24
178.176.233.0/24 maxlen: 24
178.176.234.0/24 maxlen: 24
178.176.235.0/24 maxlen: 24
178.178.64.0/24 maxlen: 24
178.178.65.0/24 maxlen: 24
178.178.66.0/24 maxlen: 24
178.178.67.0/24 maxlen: 24
178.178.68.0/24 maxlen: 24
178.178.70.0/24 maxlen: 24
178.178.71.0/24 maxlen: 24
178.178.72.0/24 maxlen: 24
178.178.73.0/24 maxlen: 24
178.178.74.0/24 maxlen: 24
178.178.75.0/24 maxlen: 24
178.178.76.0/24 maxlen: 24
188.170.228.0/23 maxlen: 23
188.170.230.0/24 maxlen: 24
188.170.231.0/24 maxlen: 24
188.170.232.0/24 maxlen: 24
188.170.233.0/24 maxlen: 24
188.170.234.0/24 maxlen: 24
188.170.235.0/24 maxlen: 24
188.170.236.0/24 maxlen: 24
188.170.237.0/24 maxlen: 24
188.170.239.0/24 maxlen: 24
2a03:d006::/40 maxlen: 40
2a03:d006:100::/40 maxlen: 40
2a03:d006:200::/40 maxlen: 40
2a03:d006:300::/40 maxlen: 40
2a03:d006:400::/40 maxlen: 40
2a03:d006:500::/40 maxlen: 40
2a03:d006:600::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:27:8f:86:d4:3d:86:46:d6:5d:75:e4:58:0d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 15:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1eb14b13a3074ce2d16e085f9f33d499a9942a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1f:52:fa:47:a3:70:75:63:9b:fc:c3:f4:58:
27:bf:ec:aa:c5:dd:93:c4:90:07:a0:5a:bd:e6:7e:
23:d6:65:92:74:b8:70:39:a1:c6:9b:ec:fc:3e:34:
fe:09:84:a7:4b:be:fe:39:bd:52:9f:85:55:98:ec:
e9:6e:75:db:fe:32:76:98:17:2a:52:04:3d:e6:2b:
69:78:4a:41:e7:6b:19:cc:8e:cb:97:60:8b:9c:fe:
53:c2:f4:3c:3d:40:b2:cd:92:4f:a6:86:8a:24:c0:
16:62:df:2b:ed:e9:2f:ca:84:03:f0:73:5e:d1:d4:
15:4f:80:a5:68:74:1c:88:fa:58:78:84:0b:70:66:
fa:de:9e:2b:19:4a:23:ea:01:51:66:6d:70:18:f5:
e3:7c:cd:f1:2c:0a:34:dd:cf:76:c0:3c:97:5f:7e:
e6:28:ae:43:69:fd:ee:35:3c:15:26:f0:62:37:f0:
41:4e:62:51:8c:0b:06:89:68:9c:47:9c:b9:bd:b6:
5e:73:bc:9c:11:e1:80:7a:ff:5d:b0:7f:51:c1:2f:
72:8b:f8:c4:39:e9:be:e4:72:af:ed:8c:10:a4:70:
32:48:58:9e:e2:22:29:bb:76:50:02:ac:76:0e:c0:
3a:02:e7:22:c0:05:a9:99:66:0c:b9:3e:8f:9e:25:
1f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:EB:14:B1:3A:30:74:CE:2D:16:E0:85:F9:F3:3D:49:9A:99:42:A5
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/wesUsTowdM4tFuCF-fM9SZqZQqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.132.0/22
31.173.143.0/24
31.173.225.0-31.173.226.255
31.173.228.0-31.173.233.255
31.173.235.0-31.173.239.255
37.28.188.0/22
37.29.43.0/24
37.29.88.0/21
78.25.124.0/22
83.149.52.0/22
83.169.224.0-83.169.230.255
85.26.240.0/21
178.176.233.0-178.176.235.255
178.178.64.0-178.178.68.255
178.178.70.0-178.178.76.255
188.170.228.0-188.170.237.255
188.170.239.0/24
IPv6:
2a03:d006::-2a03:d006:6ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
7b:65:a2:9e:81:43:2f:bc:54:53:0a:28:72:a6:2b:ea:08:be:
6b:52:23:7f:6a:29:46:96:15:18:f4:17:26:be:ca:4c:e2:dd:
7d:64:cd:ce:18:9b:67:51:15:d2:84:5a:c6:b7:cf:df:a6:c6:
db:82:e2:2d:ea:24:2d:77:52:3b:c6:a3:2a:32:0d:5b:6d:76:
73:2d:1e:a2:41:6d:44:21:7d:3b:15:d2:9d:e0:4b:7c:27:f0:
1d:10:59:07:8e:ae:f7:45:38:19:50:85:77:39:0d:44:0e:45:
46:0e:f5:08:98:4a:35:ff:d5:93:cf:0e:61:80:fa:07:b9:43:
33:47:f0:51:6e:0a:6a:3f:92:15:fd:e8:0d:3f:a8:ef:63:ff:
d7:a8:1f:49:83:c6:2d:25:9b:18:ca:2a:2b:a4:4d:fb:9b:10:
e3:82:4d:4b:e8:ba:94:5d:68:fc:21:0e:4f:d3:1b:2f:31:e7:
3e:41:4d:c4:d3:c4:72:ed:d3:aa:52:ed:36:22:66:d5:f6:89:
a8:24:10:6d:03:5c:21:55:7c:60:8b:9b:a2:fd:77:95:a8:ba:
3f:61:a0:06:76:b5:fe:af:d5:0c:75:f9:4a:64:12:29:25:64:
b2:74:a8:88:26:cf:59:db:d4:4d:17:6d:63:19:47:18:82:66:
02:b2:60:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:43 2025 by rpki-client