Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/xbuwMJRTJilwtSNdK1zvZyrZUOo.roa
File: xbuwMJRTJilwtSNdK1zvZyrZUOo.roa (raw, json)
Hash identifier: NpGzZuVgSRrCUgPOXSXZTngfLmLgm4vEIn9orB/ex1M=
Subject key identifier: C5:BB:B0:30:94:53:26:29:70:B5:23:5D:2B:5C:EF:67:2A:D9:50:EA
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01841D90B02E65C7160291E31BDDDC1ED04C
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/xbuwMJRTJilwtSNdK1zvZyrZUOo.roa
Signing time: Fri 28 Oct 2022 07:48:52 +0000
ROA not before: Fri 28 Oct 2022 07:48:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35298
IP address blocks: 109.188.0.0/16 maxlen: 24
46.29.192.0/21 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
77.233.160.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
81.24.128.0/20 maxlen: 24
79.171.8.0/21 maxlen: 24
195.78.116.0/23 maxlen: 24
78.41.100.0/22 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
83.169.192.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
178.176.154.0/23 maxlen: 23
31.173.176.0/20 maxlen: 20
93.153.128.0/17 maxlen: 24
94.25.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
109.74.112.0/20 maxlen: 24
46.232.200.0/21 maxlen: 24
37.29.0.0/17 maxlen: 24
37.28.160.0/19 maxlen: 24
62.64.0.0/19 maxlen: 24
78.25.64.0/18 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
46.229.128.0/20 maxlen: 24
212.44.64.0/19 maxlen: 24
195.5.128.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1d:90:b0:2e:65:c7:16:02:91:e3:1b:dd:dc:1e:d0:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Oct 28 07:48:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c5bbb0309453262970b5235d2b5cef672ad950ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:3f:db:18:4b:63:93:1e:e7:78:98:23:ae:a8:
99:e4:98:f4:f7:91:f5:c6:78:ee:ee:e8:bb:8f:34:
07:10:b5:f9:c7:6f:e3:c3:a0:f9:9a:26:c1:9a:81:
60:fc:31:19:f1:8a:0b:08:d1:0c:85:ed:72:f5:89:
0f:41:51:ae:4d:67:3c:73:e9:c6:86:89:90:95:86:
4c:e1:74:e3:8b:fc:e9:2a:a4:08:1b:ab:91:3d:59:
ed:f3:89:bb:6e:c1:81:99:3f:f7:d6:e9:12:bf:8d:
6e:64:0d:10:76:97:93:a9:82:a1:2c:0a:27:0d:16:
03:72:9b:44:6a:23:e5:96:15:3d:31:b0:6e:7e:4e:
39:d9:a6:d0:bb:39:87:b3:70:ca:5a:54:cc:d9:f4:
0d:3f:34:b8:b9:43:db:70:7e:95:17:89:24:5b:1a:
d0:89:3e:9f:b4:a4:2a:9d:0c:37:f6:8d:96:ab:cc:
2a:9d:7e:cd:0d:d2:d8:1e:94:6e:6d:f7:7c:b9:b7:
0f:dd:da:d5:2c:15:cb:52:28:9f:e2:57:c7:08:7b:
e7:c5:12:d5:56:fe:8f:67:ce:0a:0b:2f:87:47:4e:
4f:66:f2:35:68:9f:82:37:2a:f4:de:26:9c:bc:89:
df:a2:b1:2e:0b:42:22:ef:24:30:26:3a:2e:14:bc:
80:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:BB:B0:30:94:53:26:29:70:B5:23:5D:2B:5C:EF:67:2A:D9:50:EA
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/xbuwMJRTJilwtSNdK1zvZyrZUOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.176.0/20
37.28.160.0/19
37.29.0.0/17
46.29.192.0/21
46.229.128.0/20
46.232.200.0/21
62.64.0.0/19
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
178.176.154.0/23
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
4f:44:2e:90:f7:df:fe:17:98:7a:fe:04:00:10:78:e1:f4:d7:
4a:ae:70:cb:bb:a1:c9:f2:7c:81:4a:d4:c0:da:45:c1:23:e6:
95:76:f1:28:8c:43:5a:ab:34:60:09:a0:a3:94:52:07:04:63:
51:f5:fd:06:12:2a:69:e1:0d:f7:ec:c5:2c:46:79:9d:cd:ac:
24:8f:d2:3f:8c:7e:70:69:7f:9a:a9:c7:51:30:6f:12:3f:9e:
ea:0f:b0:ea:df:e3:f7:56:97:f0:77:b5:31:dd:09:8e:6c:7e:
8d:d9:70:be:cd:73:80:5f:d2:6c:de:03:73:76:72:b5:5c:f2:
02:e4:2c:0a:62:fa:a7:e5:03:fa:69:98:65:1b:ef:6f:89:a9:
cd:29:35:ca:51:da:f9:35:30:92:e7:f1:ea:45:e3:de:96:61:
25:fd:d4:5d:5b:05:a6:05:14:91:1a:8e:84:97:ff:6e:2f:87:
ef:c6:b7:39:a7:f7:63:56:35:48:b1:47:85:dd:c9:c2:d6:0a:
db:44:12:a9:30:f2:ed:7c:8a:3c:b4:2e:0e:f6:8a:34:c8:87:
58:2a:84:e4:89:5d:2d:89:24:f1:03:55:8a:18:6d:5d:b6:a1:
0b:4d:c9:d1:8a:27:30:2f:37:4b:fe:5c:8f:f3:44:2f:5b:2f:
67:2b:bd:9c
-----BEGIN CERTIFICATE-----
MIIGEzCCBPugAwIBAgISAYQdkLAuZccWApHjG93cHtBMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjIxMDI4MDc0ODUyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNWJiYjAzMDk0NTMyNjI5NzBiNTIzNWQyYjVjZWY2NzJhZDk1MGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7D/bGEtjkx7neJgjrqiZ5Jj095H1
xnju7ui7jzQHELX5x2/jw6D5mibBmoFg/DEZ8YoLCNEMhe1y9YkPQVGuTWc8c+nG
homQlYZM4XTji/zpKqQIG6uRPVnt84m7bsGBmT/31ukSv41uZA0QdpeTqYKhLAon
DRYDcptEaiPllhU9MbBufk452abQuzmHs3DKWlTM2fQNPzS4uUPbcH6VF4kkWxrQ
iT6ftKQqnQw39o2Wq8wqnX7NDdLYHpRubfd8ubcP3drVLBXLUiif4lfHCHvnxRLV
Vv6PZ84KCy+HR05PZvI1aJ+CNyr03iacvInforEuC0Ii7yQwJjouFLyAgwIDAQAB
o4IDHzCCAxswHQYDVR0OBBYEFMW7sDCUUyYpcLUjXStc72cq2VDqMB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEveGJ1d01KUlRKaWx3dFNOZEsxenZaeXJaVU9vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBMwYIKwYBBQUHAQcBAf8EggEiMIIBHjCCARoEAgABMIIB
EgMEBB+tsAMEBSUcoAMEByUdAAMEAy4dwAMEBC7lgAMEAy7oyAMEBT5AAAMEBU3p
oAMEBk4ZQAMEAk4pZAMEA0+rCAMEBFD3sAMEBFEYgAMEBlOpwAMEBVPewAMEB1Pl
gAMEB1UagAMEBVZtwAMEAlvB1AMEB12ZgAMEB14ZgAMEB1+JAAMEBG1KcAMEBm18
QAMDAG28AwQGgMxAAwQDsheQAwQBsrCaAwQCuQMgAwQCudKMAwQDvF6oAwMAvKID
BALByeQDBAXDBYADBAXDEGADBAHDTnQDBADDlW8DBAXD5kADBAXUDqADBAXULEAD
BAXURWADBAXUd6ADBAXVmqADBAXVqCADBAbV80ADBATZc1AwDQYJKoZIhvcNAQEL
BQADggEBAE9ELpD33/4XmHr+BAAQeOH010qucMu7ocnyfIFK1MDaRcEj5pV28SiM
Q1qrNGAJoKOUUgcEY1H1/QYSKmnhDffsxSxGeZ3NrCSP0j+MfnBpf5qpx1EwbxI/
nuoPsOrf4/dWl/B3tTHdCY5sfo3ZcL7Nc4Bf0mzeA3N2crVc8gLkLApi+qflA/pp
mGUb72+Jqc0pNcpR2vk1MJLn8epF496WYSX91F1bBaYFFJEajoSX/24vh+/Gtzmn
92NWNUixR4XdycLWCttEEqkw8u18ijy0Lg72ijTIh1gqhOSJXS2JJPEDVYoYbV22
oQtNydGKJzAvN0v+XI/zRC9bL2crvZw=
-----END CERTIFICATE-----
Generated at Tue Apr 8 04:36:03 2025 by rpki-client