Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/z0EgmTfjtZe--M_-6MIoRIjYK9M.roa
File: z0EgmTfjtZe--M_-6MIoRIjYK9M.roa (raw, json)
Hash identifier: 5TIwuYGq0Qw3w3PDXQpVNSMpOcOP97HqTdLJKJJXN+4=
Subject key identifier: CF:41:20:99:37:E3:B5:97:BE:F8:CF:FE:E8:C2:28:44:88:D8:2B:D3
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 08782D25
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/z0EgmTfjtZe--M_-6MIoRIjYK9M.roa
Signing time: Sat 01 Jan 2022 04:02:34 +0000
ROA not before: Sat 01 Jan 2022 04:02:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31195
IP address blocks: 109.188.0.0/16 maxlen: 24
46.29.192.0/21 maxlen: 24
212.14.160.0/19 maxlen: 24
195.230.64.0/19 maxlen: 24
77.233.160.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.16.96.0/19 maxlen: 24
85.26.128.0/17 maxlen: 24
81.24.128.0/20 maxlen: 24
79.171.8.0/21 maxlen: 24
195.78.116.0/23 maxlen: 24
78.41.100.0/22 maxlen: 24
193.201.228.0/22 maxlen: 24
178.23.144.0/21 maxlen: 24
109.124.64.0/18 maxlen: 24
83.169.192.0/18 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
185.3.32.0/22 maxlen: 24
93.153.128.0/17 maxlen: 24
94.25.128.0/17 maxlen: 24
86.109.192.0/19 maxlen: 24
212.69.96.0/19 maxlen: 24
188.94.168.0/21 maxlen: 24
188.162.0.0/16 maxlen: 24
109.74.112.0/20 maxlen: 24
46.232.200.0/21 maxlen: 24
37.29.0.0/17 maxlen: 24
62.64.0.0/19 maxlen: 24
37.28.160.0/19 maxlen: 24
78.25.64.0/18 maxlen: 24
185.210.140.0/22 maxlen: 24
212.119.160.0/19 maxlen: 24
80.247.176.0/20 maxlen: 24
91.193.212.0/22 maxlen: 24
213.243.64.0/18 maxlen: 24
217.115.80.0/20 maxlen: 24
83.222.192.0/19 maxlen: 24
46.229.128.0/20 maxlen: 24
212.44.64.0/19 maxlen: 24
83.229.128.0/17 maxlen: 24
195.5.128.0/19 maxlen: 24
128.204.64.0/18 maxlen: 24
95.137.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142093605 (0x8782d25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 04:02:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cf41209937e3b597bef8cffee8c2284488d82bd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ad:f6:35:6d:e0:1c:76:da:be:23:e8:34:06:
5a:13:01:d2:25:10:3a:56:a8:c8:2c:1a:51:41:84:
fa:98:9f:75:bd:03:a0:be:cc:cf:c4:6b:36:0e:0c:
1f:7a:19:8b:28:b0:ce:be:ad:89:d5:bf:f3:8a:10:
37:44:fe:d0:57:bf:3d:f9:bc:b0:d3:9f:79:c2:99:
84:20:3c:99:4d:02:0b:7d:1f:16:be:6f:5a:3a:fb:
c1:3e:c2:a6:a3:cb:7f:64:53:f0:ca:88:81:7f:ff:
c7:9d:df:32:36:ad:40:15:69:77:01:2f:8a:40:ea:
18:8c:b0:7e:00:c0:5c:7f:18:d4:4a:a5:86:b2:a7:
d5:75:d9:5d:b7:70:0d:a9:ed:fa:8f:23:46:e4:c3:
6e:17:47:9d:d2:64:ab:bf:e4:3b:b8:f0:7f:4a:70:
80:2d:7c:5a:2c:2a:fc:49:6d:6a:91:49:e9:1c:e6:
b6:12:11:09:47:56:af:05:d4:39:7b:69:a3:27:d0:
d8:d1:ee:55:2b:9d:ec:4b:a5:d7:ff:b5:d1:1f:69:
f6:2d:3a:db:5f:87:6d:66:a4:80:b3:98:d0:93:4c:
31:63:76:e6:49:38:22:3c:b0:41:3b:96:da:19:54:
4f:34:cd:31:c0:e2:fc:f8:9e:c8:41:66:1b:bc:37:
fa:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:41:20:99:37:E3:B5:97:BE:F8:CF:FE:E8:C2:28:44:88:D8:2B:D3
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/z0EgmTfjtZe--M_-6MIoRIjYK9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.28.160.0/19
37.29.0.0/17
46.29.192.0/21
46.229.128.0/20
46.232.200.0/21
62.64.0.0/19
77.233.160.0/19
78.25.64.0/18
78.41.100.0/22
79.171.8.0/21
80.247.176.0/20
81.24.128.0/20
83.169.192.0/18
83.222.192.0/19
83.229.128.0/17
85.26.128.0/17
86.109.192.0/19
91.193.212.0/22
93.153.128.0/17
94.25.128.0/17
95.137.0.0/17
109.74.112.0/20
109.124.64.0/18
109.188.0.0/16
128.204.64.0/18
178.23.144.0/21
185.3.32.0/22
185.210.140.0/22
188.94.168.0/21
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
217.115.80.0/20
Signature Algorithm: sha256WithRSAEncryption
a9:ba:cf:ca:9b:52:af:f6:49:db:20:61:2a:ba:b4:af:ff:0b:
5e:93:2a:35:5f:56:da:29:46:44:9c:c3:da:61:fe:66:4b:01:
06:65:d0:8d:1a:a9:19:13:1a:bd:06:8c:8b:e0:18:d7:63:f3:
15:7e:54:91:76:ec:fe:09:87:33:e3:c4:60:8c:f5:eb:86:76:
4b:6d:83:04:29:12:b0:71:be:66:eb:43:c7:5b:27:bd:45:e6:
52:df:f2:3f:b4:a5:d0:be:b5:23:7c:02:71:47:72:87:b8:7e:
7c:b7:cf:0b:d2:b0:1f:1e:b7:9f:86:7d:b3:05:d8:40:b6:fb:
5b:60:3c:bc:4b:1d:b3:45:55:a9:92:19:64:87:2a:f3:be:81:
75:94:53:b0:92:eb:04:8c:21:d3:39:73:59:17:41:0c:fc:1f:
3f:0d:a9:10:74:04:73:63:54:1d:01:62:2c:ac:47:e6:43:ee:
7a:a2:99:82:67:2b:e3:69:6c:96:45:5f:6b:a6:76:df:fa:13:
31:fa:f8:84:43:e9:82:bd:45:19:ec:2d:94:99:7b:85:eb:dc:
3a:36:bd:7a:cd:35:12:b9:82:bb:20:b6:1f:df:c3:67:fd:9f:
11:64:be:78:c6:29:f5:3a:e1:9d:03:35:0f:a2:a7:5f:df:8f:
d2:f2:43:0d
-----BEGIN CERTIFICATE-----
MIIF+TCCBOGgAwIBAgIECHgtJTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
MmQ3YzJhMTA3MmQ3MzUwN2FkYmY2NTA3ZGU2OGFhYWMwMTc4NWMwMB4XDTIyMDEw
MTA0MDIzNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2Y0MTIwOTkzN2Uz
YjU5N2JlZjhjZmZlZThjMjI4NDQ4OGQ4MmJkMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIqt9jVt4Bx22r4j6DQGWhMB0iUQOlaoyCwaUUGE+pifdb0D
oL7Mz8RrNg4MH3oZiyiwzr6tidW/84oQN0T+0Fe/Pfm8sNOfecKZhCA8mU0CC30f
Fr5vWjr7wT7CpqPLf2RT8MqIgX//x53fMjatQBVpdwEvikDqGIywfgDAXH8Y1Eql
hrKn1XXZXbdwDant+o8jRuTDbhdHndJkq7/kO7jwf0pwgC18Wiwq/EltapFJ6Rzm
thIRCUdWrwXUOXtpoyfQ2NHuVSud7Eul1/+10R9p9i0621+HbWakgLOY0JNMMWN2
5kk4IjywQTuW2hlUTzTNMcDi/PieyEFmG7w3+o8CAwEAAaOCAxMwggMPMB0GA1Ud
DgQWBBTPQSCZN+O1l774z/7owihEiNgr0zAfBgNVHSMEGDAWgBSS18KhBy1zUHrb
9lB95oqqwBeFwDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2t0ZkNvUWN0YzFCNjJfWlFmZWFLcXNBWGhjQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzcvOWNmZjdjLWYwNWEtNGUwMi1iZWE3LTg5ZTU2YzgwZDFkMC8x
L3owRWdtVGZqdFplLS1NXy02TUlvUklqWUs5TS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzcv
OWNmZjdjLWYwNWEtNGUwMi1iZWE3LTg5ZTU2YzgwZDFkMC8xL2t0ZkNvUWN0YzFC
NjJfWlFmZWFLcXNBWGhjQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCC
AScGCCsGAQUFBwEHAQH/BIIBFjCCARIwggEOBAIAATCCAQYDBAUlHKADBAclHQAD
BAMuHcADBAQu5YADBAMu6MgDBAU+QAADBAVN6aADBAZOGUADBAJOKWQDBANPqwgD
BARQ97ADBARRGIADBAZTqcADBAVT3sADBAdT5YADBAdVGoADBAVWbcADBAJbwdQD
BAddmYADBAdeGYADBAdfiQADBARtSnADBAZtfEADAwBtvAMEBoDMQAMEA7IXkAME
ArkDIAMEArnSjAMEA7xeqAMDALyiAwQCwcnkAwQFwwWAAwQFwxBgAwQBw050AwQA
w5VvAwQFw+ZAAwQF1A6gAwQF1CxAAwQF1EVgAwQF1HegAwQF1ZqgAwQF1aggAwQG
1fNAAwQE2XNQMA0GCSqGSIb3DQEBCwUAA4IBAQCpus/Km1Kv9knbIGEqurSv/wte
kyo1X1baKUZEnMPaYf5mSwEGZdCNGqkZExq9BoyL4BjXY/MVflSRduz+CYcz48Rg
jPXrhnZLbYMEKRKwcb5m60PHWye9ReZS3/I/tKXQvrUjfAJxR3KHuH58t88L0rAf
Hrefhn2zBdhAtvtbYDy8Sx2zRVWpkhlkhyrzvoF1lFOwkusEjCHTOXNZF0EM/B8/
DakQdARzY1QdAWIsrEfmQ+56opmCZyvjaWyWRV9rpnbf+hMx+viEQ+mCvUUZ7C2U
mXuF69w6Nr16zTUSuYK7ILYf38Nn/Z8RZL54xin1OuGdAzUPoqdf34/S8kMN
-----END CERTIFICATE-----
Generated at Tue Apr 8 04:48:36 2025 by rpki-client