Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/548858-6b84-4b52-bd83-54b8403bcacd/1/zmhPCtGN1AMSWdULX30qu4cGWjw.roa
File: zmhPCtGN1AMSWdULX30qu4cGWjw.roa (raw, json)
Hash identifier: EbySkQ/zSm5/QkMcyS9WpSTyWi9EUnp0WBH4jdCq++Y=
Subject key identifier: CE:68:4F:0A:D1:8D:D4:03:12:59:D5:0B:5F:7D:2A:BB:87:06:5A:3C
Certificate issuer: /CN=73f33c451e745fa8938fceeed59283dea7b2701c
Certificate serial: 1B1CCD6F
Authority key identifier: 73:F3:3C:45:1E:74:5F:A8:93:8F:CE:EE:D5:92:83:DE:A7:B2:70:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_M8RR50X6iTj87u1ZKD3qeycBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/548858-6b84-4b52-bd83-54b8403bcacd/1/zmhPCtGN1AMSWdULX30qu4cGWjw.roa
Signing time: Sat 01 Jan 2022 13:02:07 +0000
ROA not before: Sat 01 Jan 2022 13:02:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47215
IP address blocks: 5.11.48.0/21 maxlen: 32
109.75.176.0/20 maxlen: 32
93.190.64.0/21 maxlen: 32
185.32.116.0/22 maxlen: 32
95.130.248.0/21 maxlen: 32
185.143.164.0/22 maxlen: 22
141.101.32.0/21 maxlen: 32
185.65.88.0/22 maxlen: 32
2a00:12c0::/29 maxlen: 29
2a00:12c0::/32 maxlen: 32
2a04:4cc0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 454872431 (0x1b1ccd6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f33c451e745fa8938fceeed59283dea7b2701c
Validity
Not Before: Jan 1 13:02:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ce684f0ad18dd4031259d50b5f7d2abb87065a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:54:e0:b4:44:bf:be:3a:b1:7b:9c:16:63:02:
77:b2:7f:21:a6:e6:5f:56:79:f1:f0:c0:7a:f7:e8:
4d:b0:12:bf:7f:00:b9:15:ef:46:1f:e5:49:0e:52:
60:0c:8c:d7:98:d5:e8:74:7a:04:39:95:2f:80:7f:
0d:53:08:3f:06:77:f8:05:57:85:ac:d5:98:1e:e7:
84:84:aa:a5:b8:4b:c3:8f:fd:5a:55:63:7d:39:b5:
4f:ca:3a:79:60:9a:a1:34:72:80:83:f0:d2:36:6a:
b7:70:6d:47:82:72:96:ab:2c:91:5c:d2:bc:85:99:
18:54:a0:79:44:84:24:d6:4f:8f:5c:d6:fc:49:9c:
fb:5c:e9:bd:5a:db:50:5e:14:c3:df:57:ab:c0:47:
1f:23:cd:f9:78:f0:c8:e0:65:26:f7:9c:7d:ae:23:
64:40:f0:8e:6d:a7:95:45:ab:a2:83:39:a8:e1:1f:
01:f8:df:37:5e:6d:6b:11:44:58:9e:5c:24:87:5a:
c4:76:f5:e8:35:2d:db:d7:8c:ce:bc:d5:12:80:c5:
cc:67:7f:e6:b9:e5:4e:cb:19:41:68:2b:92:d8:77:
35:76:c0:ec:31:49:4b:f0:f4:a9:71:9f:df:ae:b3:
3d:e6:86:fb:81:84:0e:2c:07:79:a2:97:e1:44:fc:
ee:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:68:4F:0A:D1:8D:D4:03:12:59:D5:0B:5F:7D:2A:BB:87:06:5A:3C
X509v3 Authority Key Identifier:
keyid:73:F3:3C:45:1E:74:5F:A8:93:8F:CE:EE:D5:92:83:DE:A7:B2:70:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_M8RR50X6iTj87u1ZKD3qeycBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/548858-6b84-4b52-bd83-54b8403bcacd/1/zmhPCtGN1AMSWdULX30qu4cGWjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/548858-6b84-4b52-bd83-54b8403bcacd/1/c_M8RR50X6iTj87u1ZKD3qeycBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.11.48.0/21
93.190.64.0/21
95.130.248.0/21
109.75.176.0/20
141.101.32.0/21
185.32.116.0/22
185.65.88.0/22
185.143.164.0/22
IPv6:
2a00:12c0::/29
2a04:4cc0::/29
Signature Algorithm: sha256WithRSAEncryption
08:2d:02:09:c1:8e:5a:0b:1f:c8:83:cd:51:09:a6:4d:25:ae:
4a:3d:c3:97:0a:1a:65:14:16:1d:a8:a4:c6:64:27:74:6c:41:
1f:d8:08:a6:11:49:60:1d:24:54:8f:6c:f9:e6:3e:f7:7b:0c:
2b:d6:58:57:d7:48:f4:09:da:83:91:97:db:36:d6:bb:fe:d2:
df:8f:ee:84:21:94:3a:7c:de:e0:25:0c:a9:9c:85:88:70:7f:
4a:38:6d:d0:14:65:de:22:40:b7:bf:a4:70:34:22:c7:7d:c2:
fd:8e:e8:02:21:ca:d0:09:33:4b:d3:ee:36:3e:5d:53:41:9d:
b3:f8:be:22:e1:85:cc:19:e2:73:e1:98:26:9c:96:b0:42:86:
c1:59:02:46:4f:b9:b8:eb:2e:9c:e2:91:63:4b:af:ef:ad:57:
d2:a1:6a:7a:85:03:53:2d:91:01:f2:df:d7:30:5e:a8:4e:d0:
b1:52:33:1d:34:af:e9:a2:e8:6c:c5:a7:67:8f:d7:45:a4:a9:
64:f0:d7:b7:0e:a3:3d:3f:b8:4f:20:b4:01:08:a5:dd:53:0d:
87:f8:01:87:26:b3:14:cc:a8:be:83:cf:78:ad:99:d7:1b:35:
e3:ca:f0:6a:c4:c1:d4:4c:03:d9:8a:f1:c8:14:63:86:5a:da:
77:2c:60:7e
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIEGxzNbzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
M2YzM2M0NTFlNzQ1ZmE4OTM4ZmNlZWVkNTkyODNkZWE3YjI3MDFjMB4XDTIyMDEw
MTEzMDIwN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2U2ODRmMGFkMThk
ZDQwMzEyNTlkNTBiNWY3ZDJhYmI4NzA2NWEzYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAO5U4LREv746sXucFmMCd7J/IabmX1Z58fDAevfoTbASv38A
uRXvRh/lSQ5SYAyM15jV6HR6BDmVL4B/DVMIPwZ3+AVXhazVmB7nhISqpbhLw4/9
WlVjfTm1T8o6eWCaoTRygIPw0jZqt3BtR4JylqsskVzSvIWZGFSgeUSEJNZPj1zW
/Emc+1zpvVrbUF4Uw99Xq8BHHyPN+XjwyOBlJvecfa4jZEDwjm2nlUWrooM5qOEf
AfjfN15taxFEWJ5cJIdaxHb16DUt29eMzrzVEoDFzGd/5rnlTssZQWgrkth3NXbA
7DFJS/D0qXGf366zPeaG+4GEDiwHeaKX4UT87nMCAwEAAaOCAkkwggJFMB0GA1Ud
DgQWBBTOaE8K0Y3UAxJZ1QtffSq7hwZaPDAfBgNVHSMEGDAWgBRz8zxFHnRfqJOP
zu7VkoPep7JwHDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NfTThSUjUwWDZpVGo4N3UxWktEM3FleWNCdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDUvNTQ4ODU4LTZiODQtNGI1Mi1iZDgzLTU0Yjg0MDNiY2FjZC8x
L3ptaFBDdEdOMUFNU1dkVUxYMzBxdTRjR1dqdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUv
NTQ4ODU4LTZiODQtNGI1Mi1iZDgzLTU0Yjg0MDNiY2FjZC8xL2NfTThSUjUwWDZp
VGo4N3UxWktEM3FleWNCdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBf
BggrBgEFBQcBBwEB/wRQME4wNgQCAAEwMAMEAwULMAMEA12+QAMEA1+C+AMEBG1L
sAMEA41lIAMEArkgdAMEArlBWAMEArmPpDAUBAIAAjAOAwUDKgASwAMFAyoETMAw
DQYJKoZIhvcNAQELBQADggEBAAgtAgnBjloLH8iDzVEJpk0lrko9w5cKGmUUFh2o
pMZkJ3RsQR/YCKYRSWAdJFSPbPnmPvd7DCvWWFfXSPQJ2oORl9s21rv+0t+P7oQh
lDp83uAlDKmchYhwf0o4bdAUZd4iQLe/pHA0Isd9wv2O6AIhytAJM0vT7jY+XVNB
nbP4viLhhcwZ4nPhmCaclrBChsFZAkZPubjrLpzikWNLr++tV9KhanqFA1MtkQHy
39cwXqhO0LFSMx00r+mi6GzFp2eP10WkqWTw17cOoz0/uE8gtAEIpd1TDYf4AYcm
sxTMqL6Dz3itmdcbNePK8GrEwdRMA9mK8cgUY4Za2ncsYH4=
-----END CERTIFICATE-----
Generated at Fri Apr 18 00:34:46 2025 by rpki-client