Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/ZcpFGy9TDPs7L0KOBQ4w8ReDu1U.roa
File: ZcpFGy9TDPs7L0KOBQ4w8ReDu1U.roa (raw, json)
Hash identifier: NM1odmN9ZntGvJU+jyNUGkFBTx9gx9NvZezdCeHEq/E=
Subject key identifier: 65:CA:45:1B:2F:53:0C:FB:3B:2F:42:8E:05:0E:30:F1:17:83:BB:55
Certificate issuer: /CN=66ed3ba68c78bff2c4724400ade6348482fb4364
Certificate serial: 019554266FB3468E842BE007840AC85B89F7
Authority key identifier: 66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/ZcpFGy9TDPs7L0KOBQ4w8ReDu1U.roa
Signing time: Sat 01 Mar 2025 23:59:19 +0000
ROA not before: Sat 01 Mar 2025 23:59:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64289
IP address blocks: 185.225.24.0/24 maxlen: 24
185.225.26.0/24 maxlen: 24
192.189.157.0/24 maxlen: 24
2a14:3f80::/45 maxlen: 45
2a14:3f80:8::/45 maxlen: 45
2a14:3f80:10::/45 maxlen: 45
2a14:3f80:18::/45 maxlen: 45
2a14:3f80:20::/45 maxlen: 45
2a14:3f80:28::/45 maxlen: 45
2a14:3f80:60::/45 maxlen: 45
2a14:3f80:80::/45 maxlen: 45
2a14:3f80:88::/45 maxlen: 45
2a14:3f80:100::/45 maxlen: 45
2a14:3f80:108::/45 maxlen: 45
2a14:3f80:3d1::/48 maxlen: 48
2a14:3f80:800::/38 maxlen: 38
2a14:3f80:c00::/38 maxlen: 38
2a14:3f80:1000::/38 maxlen: 38
2a14:3f80:1400::/38 maxlen: 38
2a14:3f80:1800::/38 maxlen: 38
2a14:3f80:2000::/38 maxlen: 38
2a14:3f80:2400::/38 maxlen: 38
2a14:3f80:2800::/38 maxlen: 38
2a14:3f80:3000::/38 maxlen: 38
2a14:3f80:3400::/38 maxlen: 38
2a14:3f80:3800::/38 maxlen: 38
2a14:3f80:3c00::/38 maxlen: 38
2a14:3f80:4000::/38 maxlen: 38
2a14:3f80:4400::/38 maxlen: 38
2a14:3f80:5000::/38 maxlen: 38
2a14:3f80:6000::/38 maxlen: 38
2a14:3f80:7000::/38 maxlen: 38
2a14:3f80:8800::/38 maxlen: 38
2a14:3f80:af38::/45 maxlen: 45
2a14:3f81:5800::/38 maxlen: 38
2a14:3f82:4000::/38 maxlen: 38
2a14:3f82:6000::/38 maxlen: 38
2a14:3f82:7000::/38 maxlen: 38
2a14:3f82:8800::/38 maxlen: 38
2a14:3f87:2800::/38 maxlen: 38
2a14:3f87:4800::/38 maxlen: 38
2a14:3f87:6800::/38 maxlen: 38
2a14:3f87:9800::/38 maxlen: 38
2a14:3f87:c800::/38 maxlen: 38
2a14:3f87:e000::/38 maxlen: 38
2a14:3f87:f000::/38 maxlen: 38
2a14:3f87:fc00::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:54:26:6f:b3:46:8e:84:2b:e0:07:84:0a:c8:5b:89:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ed3ba68c78bff2c4724400ade6348482fb4364
Validity
Not Before: Mar 1 23:59:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65ca451b2f530cfb3b2f428e050e30f11783bb55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:41:6c:1e:37:a7:2d:48:5f:20:68:dc:0d:81:
04:34:54:c1:e4:d6:34:52:29:d1:54:7e:47:8b:96:
67:79:c6:13:18:fa:29:27:e2:91:9b:b0:0e:4f:c6:
2c:3d:93:4e:0f:8c:10:0e:78:a7:2d:9a:70:c2:14:
73:33:9c:c9:ae:7d:bc:c0:ec:77:01:b8:f7:58:b9:
c4:a2:39:37:d7:e6:a0:4d:bb:c9:6a:5c:f9:5d:a2:
cc:ab:51:29:3f:40:dd:4c:1c:15:11:f7:5e:d5:a7:
56:1c:89:db:1d:52:02:24:ec:9f:85:52:4b:f2:62:
9e:ba:db:2b:ea:cd:56:00:c9:b3:c8:c4:ce:2b:65:
a9:fd:54:82:07:12:6d:e4:7e:8b:3c:1b:fe:92:01:
85:08:31:98:a1:b7:40:75:56:e5:e2:3c:9e:08:a8:
bb:3f:39:7c:9d:50:15:e1:2c:65:c5:24:a6:37:e9:
89:09:bd:d7:ff:c7:89:a8:66:77:da:10:79:62:f5:
ed:7a:3f:7d:55:2e:30:2d:8f:2f:30:22:7f:ab:49:
45:3a:93:91:a1:5c:7a:4d:94:fb:a4:35:3a:4a:04:
91:be:4a:83:39:f8:37:c8:30:d7:9d:99:80:cc:71:
1d:53:0f:61:af:f4:72:27:7d:7c:ae:f2:08:f8:48:
42:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:CA:45:1B:2F:53:0C:FB:3B:2F:42:8E:05:0E:30:F1:17:83:BB:55
X509v3 Authority Key Identifier:
keyid:66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/ZcpFGy9TDPs7L0KOBQ4w8ReDu1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.24.0/24
185.225.26.0/24
192.189.157.0/24
IPv6:
2a14:3f80::-2a14:3f80:2f:ffff:ffff:ffff:ffff:ffff
2a14:3f80:60::/45
2a14:3f80:80::/44
2a14:3f80:100::/44
2a14:3f80:3d1::/48
2a14:3f80:800::-2a14:3f80:1bff:ffff:ffff:ffff:ffff:ffff
2a14:3f80:2000::-2a14:3f80:2bff:ffff:ffff:ffff:ffff:ffff
2a14:3f80:3000::-2a14:3f80:47ff:ffff:ffff:ffff:ffff:ffff
2a14:3f80:5000::/38
2a14:3f80:6000::/38
2a14:3f80:7000::/38
2a14:3f80:8800::/38
2a14:3f80:af38::/45
2a14:3f81:5800::/38
2a14:3f82:4000::/38
2a14:3f82:6000::/38
2a14:3f82:7000::/38
2a14:3f82:8800::/38
2a14:3f87:2800::/38
2a14:3f87:4800::/38
2a14:3f87:6800::/38
2a14:3f87:9800::/38
2a14:3f87:c800::/38
2a14:3f87:e000::/38
2a14:3f87:f000::/38
2a14:3f87:fc00::/38
Signature Algorithm: sha256WithRSAEncryption
7b:83:1a:69:12:42:72:27:f8:be:6f:5f:73:2f:d6:a2:a9:8c:
fb:da:d4:cb:53:22:d0:ee:ce:9d:0a:79:ad:54:e4:5c:9e:df:
d1:8a:a2:c1:af:c6:0a:54:51:1e:18:df:89:2a:63:15:e7:6b:
a6:ee:f3:93:49:c0:dd:14:e7:95:b1:0e:b2:3c:34:51:8b:a0:
dd:a4:c5:d8:1b:3b:61:df:7b:95:39:e3:77:10:b3:01:54:59:
19:ee:2c:a4:61:44:04:09:e1:9c:37:37:e4:83:fa:85:9d:9a:
1a:98:21:21:3b:31:6b:ca:2c:be:42:c3:5e:69:d4:cd:00:af:
22:9d:d2:40:bb:92:c7:c0:39:18:9c:05:e4:d1:31:cf:6a:a6:
88:18:7f:b7:45:19:5b:51:d1:ad:9a:c0:cd:94:57:6a:60:90:
a0:cd:8e:23:0c:6f:6c:db:88:60:f9:84:47:11:60:7c:72:8b:
09:36:95:02:13:26:3d:3e:e4:e7:f8:73:9a:85:70:9e:42:d2:
11:19:43:f5:9c:ed:60:b4:97:28:78:d9:fb:2e:a0:f8:2d:07:
3a:d3:4a:8e:49:eb:8d:8a:a0:25:9c:32:e1:4d:71:3b:b2:43:
8a:0e:50:11:0d:8b:53:9b:b5:be:c1:f6:8c:32:f2:bf:ef:c8:
17:60:db:71
-----BEGIN CERTIFICATE-----
MIIGFzCCBP+gAwIBAgISAZVUJm+zRo6EK+AHhArIW4n3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZWQzYmE2OGM3OGJmZjJjNDcyNDQwMGFkZTYzNDg0ODJm
YjQzNjQwHhcNMjUwMzAxMjM1OTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NWNhNDUxYjJmNTMwY2ZiM2IyZjQyOGUwNTBlMzBmMTE3ODNiYjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEFsHjenLUhfIGjcDYEENFTB5NY0
UinRVH5Hi5ZnecYTGPopJ+KRm7AOT8YsPZNOD4wQDninLZpwwhRzM5zJrn28wOx3
Abj3WLnEojk31+agTbvJalz5XaLMq1EpP0DdTBwVEfde1adWHInbHVICJOyfhVJL
8mKeutsr6s1WAMmzyMTOK2Wp/VSCBxJt5H6LPBv+kgGFCDGYobdAdVbl4jyeCKi7
Pzl8nVAV4SxlxSSmN+mJCb3X/8eJqGZ32hB5YvXtej99VS4wLY8vMCJ/q0lFOpOR
oVx6TZT7pDU6SgSRvkqDOfg3yDDXnZmAzHEdUw9hr/RyJ318rvII+EhCzwIDAQAB
o4IDIzCCAx8wHQYDVR0OBBYEFGXKRRsvUwz7Oy9CjgUOMPEXg7tVMB8GA1UdIwQY
MBaAFGbtO6aMeL/yxHJEAK3mNISC+0NkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnUwN3BveDR2X0xFY2tRQXJlWTBoSUw3UTJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9iNzlhNjgtNWIwMi00MDk3LWEyZTMt
MGE0M2I3YTNlYjU0LzEvWmNwRkd5OVREUHM3TDBLT0JRNHc4UmVEdTFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9iNzlhNjgtNWIwMi00MDk3LWEyZTMtMGE0M2I3YTNlYjU0
LzEvWnUwN3BveDR2X0xFY2tRQXJlWTBoSUw3UTJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBNwYIKwYBBQUHAQcBAf8EggEmMIIBIjAYBAIAATASAwQA
ueEYAwQAueEaAwQAwL2dMIIBBAQCAAIwgf0wEAMFByoUP4ADBwQqFD+AACADBwMq
FD+AAGADBwQqFD+AAIADBwQqFD+AAQADBwAqFD+AA9EwEAMGAyoUP4AIAwYCKhQ/
gBgwEAMGBSoUP4AgAwYCKhQ/gCgwEAMGBCoUP4AwAwYDKhQ/gEADBgIqFD+AUAMG
AioUP4BgAwYCKhQ/gHADBgIqFD+AiAMHAyoUP4CvOAMGAioUP4FYAwYCKhQ/gkAD
BgIqFD+CYAMGAioUP4JwAwYCKhQ/gogDBgIqFD+HKAMGAioUP4dIAwYCKhQ/h2gD
BgIqFD+HmAMGAioUP4fIAwYCKhQ/h+ADBgIqFD+H8AMGAioUP4f8MA0GCSqGSIb3
DQEBCwUAA4IBAQB7gxppEkJyJ/i+b19zL9aiqYz72tTLUyLQ7s6dCnmtVORcnt/R
iqLBr8YKVFEeGN+JKmMV52um7vOTScDdFOeVsQ6yPDRRi6DdpMXYGzth33uVOeN3
ELMBVFkZ7iykYUQECeGcNzfkg/qFnZoamCEhOzFryiy+QsNeadTNAK8indJAu5LH
wDkYnAXk0THPaqaIGH+3RRlbUdGtmsDNlFdqYJCgzY4jDG9s24hg+YRHEWB8cosJ
NpUCEyY9PuTn+HOahXCeQtIRGUP1nO1gtJcoeNn7LqD4LQc600qOSeuNiqAlnDLh
TXE7skOKDlARDYtTm7W+wfaMMvK/78gXYNtx
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:22:07 2025 by rpki-client