Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/ZjbhmZqOPty2fQQUAwFjLrtMWz8.roa
File: ZjbhmZqOPty2fQQUAwFjLrtMWz8.roa (raw, json)
Hash identifier: Uuw1uzUpE7lZ6TubD2ztEMFNSk3bAyqQwOwRfGhhD8c=
Subject key identifier: 66:36:E1:99:9A:8E:3E:DC:B6:7D:04:14:03:01:63:2E:BB:4C:5B:3F
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 019034B96111DB2105CB3A1EB8EE22902074
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/ZjbhmZqOPty2fQQUAwFjLrtMWz8.roa
Signing time: Thu 20 Jun 2024 08:18:02 +0000
ROA not before: Thu 20 Jun 2024 08:18:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200598
IP address blocks: 24.235.22.0/23 maxlen: 24
31.187.92.0/22 maxlen: 24
66.9.96.0/20 maxlen: 24
66.117.8.0/22 maxlen: 24
69.72.72.0/22 maxlen: 24
74.124.204.0/22 maxlen: 24
77.223.192.0/21 maxlen: 24
77.223.200.0/23 maxlen: 24
79.110.184.0/22 maxlen: 24
79.139.64.0/23 maxlen: 24
83.142.200.0/21 maxlen: 24
85.204.28.0/23 maxlen: 24
86.106.28.0/23 maxlen: 24
89.20.50.0/23 maxlen: 24
89.37.60.0/23 maxlen: 24
89.39.184.0/23 maxlen: 24
89.40.236.0/23 maxlen: 24
91.210.80.0/22 maxlen: 24
91.217.106.0/23 maxlen: 24
95.215.144.0/22 maxlen: 24
121.127.48.0/20 maxlen: 24
128.0.60.0/22 maxlen: 24
134.199.80.0/20 maxlen: 24
141.193.108.0/22 maxlen: 24
141.193.214.0/23 maxlen: 24
162.216.138.0/23 maxlen: 24
162.250.216.0/22 maxlen: 24
168.149.248.0/23 maxlen: 24
173.214.200.0/22 maxlen: 24
176.111.54.0/23 maxlen: 24
176.222.48.0/22 maxlen: 24
178.216.184.0/21 maxlen: 24
188.215.12.0/22 maxlen: 24
193.91.8.0/23 maxlen: 24
194.149.76.0/22 maxlen: 24
195.78.90.0/23 maxlen: 24
198.14.16.0/20 maxlen: 24
198.145.112.0/22 maxlen: 24
199.48.230.0/23 maxlen: 24
204.15.4.0/22 maxlen: 24
205.134.244.0/22 maxlen: 24
205.220.216.0/23 maxlen: 24
217.144.108.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:34:b9:61:11:db:21:05:cb:3a:1e:b8:ee:22:90:20:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Jun 20 08:18:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6636e1999a8e3edcb67d04140301632ebb4c5b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6c:c4:9d:80:4b:f2:e1:39:6d:21:44:f8:21:
c4:3d:1f:96:c2:b5:de:b6:2b:ac:db:56:62:50:b6:
2d:75:af:a5:b8:ad:56:51:38:6e:4b:a4:c8:8c:18:
34:6e:fb:c9:4c:07:ef:d1:38:c1:d0:d8:c5:1e:c7:
91:c0:03:ff:eb:14:50:62:66:32:4a:b6:5e:4a:24:
34:f2:c9:e9:ba:33:d5:9b:99:e4:6c:ef:fc:f8:65:
23:c6:42:f2:94:9b:17:70:c8:17:2e:83:4e:69:32:
c5:4a:e9:f6:44:28:3b:99:b0:9a:b6:4c:7a:0e:e8:
82:cd:08:79:33:5e:21:c4:d0:fa:4a:40:f7:5c:d3:
b9:49:9f:50:28:a3:1f:38:99:05:4a:f7:18:f7:cb:
51:3a:06:d3:a0:f3:d2:82:b5:db:c4:60:4d:66:31:
8b:dc:6b:d4:2d:be:7b:c9:5f:83:64:8f:00:66:a0:
9e:00:b2:39:84:24:2b:28:f8:c2:e6:94:db:18:74:
af:cf:db:3a:b6:9a:06:b7:20:4f:0a:fb:44:67:6b:
87:4f:84:17:56:01:b1:a8:b3:96:c0:85:3c:4d:ec:
31:22:30:7a:af:29:ff:d2:c1:a4:1b:33:6d:7f:7b:
5d:bc:1b:9c:42:b8:b2:58:61:7c:04:ee:8a:2f:56:
bd:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:36:E1:99:9A:8E:3E:DC:B6:7D:04:14:03:01:63:2E:BB:4C:5B:3F
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/ZjbhmZqOPty2fQQUAwFjLrtMWz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.235.22.0/23
31.187.92.0/22
66.9.96.0/20
66.117.8.0/22
69.72.72.0/22
74.124.204.0/22
77.223.192.0-77.223.201.255
79.110.184.0/22
79.139.64.0/23
83.142.200.0/21
85.204.28.0/23
86.106.28.0/23
89.20.50.0/23
89.37.60.0/23
89.39.184.0/23
89.40.236.0/23
91.210.80.0/22
91.217.106.0/23
95.215.144.0/22
121.127.48.0/20
128.0.60.0/22
134.199.80.0/20
141.193.108.0/22
141.193.214.0/23
162.216.138.0/23
162.250.216.0/22
168.149.248.0/23
173.214.200.0/22
176.111.54.0/23
176.222.48.0/22
178.216.184.0/21
188.215.12.0/22
193.91.8.0/23
194.149.76.0/22
195.78.90.0/23
198.14.16.0/20
198.145.112.0/22
199.48.230.0/23
204.15.4.0/22
205.134.244.0/22
205.220.216.0/23
217.144.108.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:06:3b:d5:53:df:e7:cc:e7:4b:a0:8e:c5:fe:e0:d4:92:67:
cf:e1:05:24:4c:bc:05:6c:60:f2:eb:83:3a:45:a6:8e:6f:e0:
21:f7:f2:c0:7e:8f:02:b7:07:c2:1c:13:74:e1:8a:92:9d:1c:
0d:02:4a:8a:ab:75:01:dc:b2:04:f1:8d:50:7d:c2:a5:42:cb:
f0:bc:95:f2:66:67:ff:4f:f3:c2:b8:fe:8b:38:eb:d2:a3:a0:
a7:70:8f:2a:e9:b3:a3:f7:89:d5:24:c9:0e:d4:26:ae:b2:5c:
99:86:79:e5:79:e5:76:31:1f:db:ea:d2:82:f3:4b:6f:5b:29:
a9:ae:51:f2:06:14:3c:88:ad:8d:07:8b:4c:10:b2:53:a6:bf:
b6:51:64:88:4e:61:4f:00:94:95:75:09:ca:35:a0:a3:41:10:
5a:55:9a:b0:4f:13:21:ed:6a:50:23:be:51:95:67:88:b1:72:
00:ca:b7:aa:23:85:b7:33:90:54:40:ad:bc:1d:a0:cc:38:85:
04:57:15:66:0f:31:ac:28:9d:9f:b7:96:f8:d1:c1:1c:cf:96:
6f:5b:d9:37:62:79:16:b5:75:64:de:33:dc:03:c4:45:9e:79:
11:40:9a:67:c2:0f:e6:f9:83:a0:41:a1:a7:6d:77:97:5e:4c:
64:f5:e2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:25 2025 by rpki-client