Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/nPE4p37AzB80Q_tZtEK5ygR46Yk.roa
File: nPE4p37AzB80Q_tZtEK5ygR46Yk.roa (raw, json)
Hash identifier: af/jnMGu/YtGPd784AEERL7AzhkMqi8+Dy6BhXYDW1U=
Subject key identifier: 9C:F1:38:A7:7E:C0:CC:1F:34:43:FB:59:B4:42:B9:CA:04:78:E9:89
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0194228D24089DEDDEFD45CE278148909809
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/nPE4p37AzB80Q_tZtEK5ygR46Yk.roa
Signing time: Wed 01 Jan 2025 15:47:42 +0000
ROA not before: Wed 01 Jan 2025 15:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25159
IP address blocks: 31.173.0.0/21 maxlen: 21
31.173.8.0/21 maxlen: 21
31.173.16.0/21 maxlen: 21
31.173.24.0/21 maxlen: 21
31.173.32.0/19 maxlen: 19
31.173.60.0/24 maxlen: 24
31.173.64.0/21 maxlen: 21
31.173.72.0/21 maxlen: 21
31.173.80.0/21 maxlen: 21
31.173.88.0/21 maxlen: 21
37.28.176.0/21 maxlen: 21
37.29.32.0/21 maxlen: 21
46.229.128.0/22 maxlen: 22
62.64.0.0/20 maxlen: 20
62.64.16.0/20 maxlen: 20
78.25.112.0/22 maxlen: 22
78.25.116.0/23 maxlen: 23
78.25.118.0/24 maxlen: 24
78.25.119.0/24 maxlen: 24
83.222.212.0/22 maxlen: 22
83.222.216.0/21 maxlen: 21
83.229.211.0/24 maxlen: 24
83.229.254.0/24 maxlen: 24
85.26.144.0/20 maxlen: 20
91.205.168.0/23 maxlen: 23
91.205.170.0/23 maxlen: 23
94.25.131.0/24 maxlen: 24
94.25.144.0/20 maxlen: 20
94.25.160.0/24 maxlen: 24
94.25.164.0/24 maxlen: 24
94.25.168.0/22 maxlen: 22
94.25.172.0/22 maxlen: 22
94.25.176.0/21 maxlen: 21
94.25.184.0/21 maxlen: 21
109.188.64.0/19 maxlen: 19
109.188.96.0/21 maxlen: 21
109.188.112.0/23 maxlen: 23
109.188.114.0/24 maxlen: 24
128.204.76.0/22 maxlen: 22
128.204.76.0/23 maxlen: 23
128.204.78.0/23 maxlen: 23
178.176.0.0/19 maxlen: 19
178.176.32.0/21 maxlen: 21
178.176.40.0/21 maxlen: 21
178.176.52.0/22 maxlen: 22
178.176.72.0/21 maxlen: 21
178.176.92.0/22 maxlen: 22
178.177.0.0/18 maxlen: 18
178.177.3.0/24 maxlen: 24
178.178.192.0/22 maxlen: 22
178.178.198.0/23 maxlen: 23
178.178.204.0/24 maxlen: 24
178.178.205.0/24 maxlen: 24
178.178.216.0/21 maxlen: 21
178.178.235.0/24 maxlen: 24
178.178.236.0/24 maxlen: 24
188.170.0.0/19 maxlen: 19
188.170.24.0/24 maxlen: 24
188.170.25.0/24 maxlen: 24
188.170.32.0/21 maxlen: 21
188.170.40.0/21 maxlen: 21
193.201.228.0/22 maxlen: 22
195.16.96.0/19 maxlen: 19
195.16.110.0/23 maxlen: 23
195.16.114.0/23 maxlen: 23
195.230.70.0/23 maxlen: 23
195.230.91.0/24 maxlen: 24
195.230.92.0/24 maxlen: 24
212.69.96.0/19 maxlen: 19
212.69.106.0/24 maxlen: 24
212.69.113.0/24 maxlen: 24
212.69.114.0/24 maxlen: 24
212.69.125.0/24 maxlen: 24
213.243.109.0/24 maxlen: 24
213.243.116.0/24 maxlen: 24
2a03:d000:4000::/36 maxlen: 36
2a03:d000:4100::/40 maxlen: 40
2a03:d000:4200::/40 maxlen: 40
2a03:d000:4300::/40 maxlen: 40
2a03:d000:4400::/40 maxlen: 40
2a03:d004::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:24:08:9d:ed:de:fd:45:ce:27:81:48:90:98:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 15:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9cf138a77ec0cc1f3443fb59b442b9ca0478e989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c5:46:50:85:c3:68:72:d8:0d:4d:74:58:eb:
ed:36:61:18:14:b7:ae:43:50:eb:df:cb:a7:fc:92:
41:3b:af:6c:86:eb:69:a5:3f:f1:d4:f0:7c:c0:4b:
d2:2e:7c:79:b3:8a:0c:22:09:1c:53:16:0f:54:85:
61:c0:db:61:3f:3a:95:f3:f2:ba:1c:8d:6f:97:b7:
66:da:6e:a6:33:dd:7e:de:78:d9:e6:96:c2:a2:67:
07:86:66:66:3c:19:70:83:58:8e:67:4c:0e:65:6b:
00:17:03:1b:01:f2:e3:81:10:a8:84:ad:08:4e:9b:
37:9b:95:a6:08:18:9e:a1:df:05:7f:63:67:ee:2f:
e6:b2:62:38:de:2b:c6:0e:ca:43:e1:a4:7c:40:a7:
a1:45:9c:d8:6b:58:83:c8:4a:09:91:04:55:1e:63:
59:eb:02:d3:38:b6:61:43:70:8b:8c:39:13:16:14:
fd:39:79:1b:88:11:f0:2e:cc:e2:dd:92:e4:6a:c1:
1c:3c:06:15:58:2b:c3:a7:3d:ac:8e:c2:d0:73:0a:
ed:e4:d0:30:2a:ac:7e:7d:dd:78:99:87:9f:ea:62:
bc:bb:af:23:b7:9a:8e:30:9f:ea:54:9d:85:91:ca:
ea:df:98:25:20:e2:ec:be:41:3c:8a:f2:0b:ad:18:
ce:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F1:38:A7:7E:C0:CC:1F:34:43:FB:59:B4:42:B9:CA:04:78:E9:89
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/nPE4p37AzB80Q_tZtEK5ygR46Yk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.0.0-31.173.95.255
37.28.176.0/21
37.29.32.0/21
46.229.128.0/22
62.64.0.0/19
78.25.112.0/21
83.222.212.0-83.222.223.255
83.229.211.0/24
83.229.254.0/24
85.26.144.0/20
91.205.168.0/22
94.25.131.0/24
94.25.144.0-94.25.160.255
94.25.164.0/24
94.25.168.0-94.25.191.255
109.188.64.0-109.188.103.255
109.188.112.0-109.188.114.255
128.204.76.0/22
178.176.0.0-178.176.47.255
178.176.52.0/22
178.176.72.0/21
178.176.92.0/22
178.177.0.0/18
178.178.192.0/22
178.178.198.0/23
178.178.204.0/23
178.178.216.0/21
178.178.235.0-178.178.236.255
188.170.0.0-188.170.47.255
193.201.228.0/22
195.16.96.0/19
195.230.70.0/23
195.230.91.0-195.230.92.255
212.69.96.0/19
213.243.109.0/24
213.243.116.0/24
IPv6:
2a03:d000:4000::/36
2a03:d004::/40
Signature Algorithm: sha256WithRSAEncryption
3d:6c:96:9f:d9:60:f1:a2:b5:7a:87:84:19:8a:05:9c:a9:d3:
75:0d:ab:29:d4:95:1e:5e:43:cb:72:20:d7:bc:3c:3b:c3:fa:
ca:93:5a:55:02:89:7b:45:06:d0:46:78:c3:f1:22:07:40:7b:
93:6c:27:56:85:76:87:fd:80:63:b6:dd:3c:33:02:af:1c:94:
46:20:ea:70:0d:f7:39:99:8e:88:5e:05:dc:ba:75:b9:a1:9b:
47:bf:7a:69:df:5d:cb:ad:77:97:c1:09:58:20:70:d4:9d:25:
42:bd:67:1a:4e:79:0e:03:43:5a:91:2e:a3:51:e6:aa:40:b6:
de:fe:6a:b6:9d:f8:64:af:e5:e3:90:65:41:45:b2:4b:6d:10:
ce:c4:5c:81:f2:39:f5:23:36:c9:36:b9:e5:9a:77:71:83:67:
57:e9:54:31:fa:32:bb:87:b6:6f:2b:2a:f1:8f:71:dd:90:b8:
1e:58:ae:9f:12:ec:90:17:8e:67:49:f7:bd:c5:d2:19:a6:04:
03:e5:91:90:a2:32:4f:d5:55:46:51:62:04:18:51:e4:35:ef:
92:12:75:02:b9:e2:77:9f:5c:65:af:06:bd:b1:cc:60:3b:cd:
8d:f7:4b:0c:c6:6b:f3:a5:57:03:40:49:5f:2a:73:ed:e1:41:
b5:e9:01:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:01 2025 by rpki-client on console.sobornost.net