Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/80d39e-9faa-4763-870b-0801368aa58e/1/ZlzAQ-LevtcQ-tSKj1hNX1jBZu4.roa
File: ZlzAQ-LevtcQ-tSKj1hNX1jBZu4.roa (raw, json)
Hash identifier: N1DcCeumEercXvKI8RTUeMFrDU+dSAFkX6QJz4zK7Sc=
Subject key identifier: 66:5C:C0:43:E2:DE:BE:D7:10:FA:D4:8A:8F:58:4D:5F:58:C1:66:EE
Certificate issuer: /CN=6acb8804e16bec2d6817d7e4ac65ae7e3c5bf837
Certificate serial: 0189AC9C8666141D931945A24133653A20F7
Authority key identifier: 6A:CB:88:04:E1:6B:EC:2D:68:17:D7:E4:AC:65:AE:7E:3C:5B:F8:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/asuIBOFr7C1oF9fkrGWufjxb-Dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/80d39e-9faa-4763-870b-0801368aa58e/1/ZlzAQ-LevtcQ-tSKj1hNX1jBZu4.roa
Signing time: Mon 31 Jul 2023 15:41:26 +0000
ROA not before: Mon 31 Jul 2023 15:41:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34754
IP address blocks: 88.87.0.0/24 maxlen: 24
88.87.1.0/24 maxlen: 24
88.87.0.0/19 maxlen: 24
88.87.10.0/23 maxlen: 24
88.87.10.0/24 maxlen: 24
88.87.12.0/23 maxlen: 24
88.87.14.0/24 maxlen: 24
193.228.172.0/23 maxlen: 24
193.228.182.0/23 maxlen: 24
212.50.64.0/22 maxlen: 24
212.50.64.0/19 maxlen: 24
212.50.68.0/22 maxlen: 24
87.254.163.0/24 maxlen: 24
87.254.164.0/23 maxlen: 24
87.254.164.0/24 maxlen: 24
87.254.165.0/24 maxlen: 24
87.254.160.0/23 maxlen: 24
87.254.160.0/19 maxlen: 24
87.254.162.0/23 maxlen: 24
87.254.162.0/24 maxlen: 24
87.254.166.0/23 maxlen: 24
87.254.168.0/23 maxlen: 24
87.254.170.0/23 maxlen: 24
87.254.172.0/24 maxlen: 24
87.254.172.0/23 maxlen: 24
87.254.173.0/24 maxlen: 24
87.254.174.0/24 maxlen: 24
87.254.175.0/24 maxlen: 24
87.254.176.0/24 maxlen: 24
87.254.177.0/24 maxlen: 24
87.254.178.0/24 maxlen: 24
87.254.178.0/23 maxlen: 24
87.254.180.0/23 maxlen: 24
87.254.182.0/23 maxlen: 24
87.254.184.0/23 maxlen: 24
87.254.186.0/23 maxlen: 24
87.254.191.0/24 maxlen: 24
87.254.188.0/23 maxlen: 24
87.254.190.0/23 maxlen: 24
109.199.146.0/24 maxlen: 24
109.199.152.0/24 maxlen: 24
109.199.147.0/24 maxlen: 24
109.199.148.0/22 maxlen: 24
109.199.153.0/24 maxlen: 24
109.199.158.0/24 maxlen: 24
109.199.158.0/23 maxlen: 24
109.199.154.0/23 maxlen: 24
109.199.156.0/23 maxlen: 24
109.199.130.0/23 maxlen: 24
109.199.132.0/22 maxlen: 24
109.199.128.0/23 maxlen: 24
109.199.128.0/19 maxlen: 24
109.199.136.0/24 maxlen: 24
109.199.136.0/23 maxlen: 24
109.199.137.0/24 maxlen: 24
109.199.138.0/24 maxlen: 24
109.199.139.0/24 maxlen: 24
109.199.144.0/24 maxlen: 24
109.199.145.0/24 maxlen: 24
109.199.140.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ac:9c:86:66:14:1d:93:19:45:a2:41:33:65:3a:20:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6acb8804e16bec2d6817d7e4ac65ae7e3c5bf837
Validity
Not Before: Jul 31 15:41:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=665cc043e2debed710fad48a8f584d5f58c166ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:0b:49:9f:42:e1:a7:98:18:30:a9:d0:d9:6e:
9c:09:b1:a8:17:d7:50:00:40:5d:da:81:d2:7f:77:
6d:1f:e0:8a:7e:6b:7e:e5:5e:29:b3:93:2f:4f:45:
b1:6f:97:07:1a:c1:09:a4:8c:0d:70:61:c3:9b:56:
8f:29:1e:17:1b:2b:21:a8:0a:db:d1:cf:52:00:65:
1e:90:4c:6e:ef:39:28:a1:e1:52:01:f6:1c:ec:54:
91:05:62:42:89:45:82:72:62:36:87:f6:a7:a6:c6:
e2:09:a8:ea:43:83:ef:f0:27:05:ef:22:98:c8:5e:
59:63:8d:7e:e1:f8:8c:d1:30:81:f1:09:2c:ba:ab:
b9:27:fb:f9:f0:5b:f9:ca:0d:f9:c2:c8:15:62:d1:
f1:6e:b1:5c:e9:90:da:3f:f8:c5:2c:17:a4:47:65:
3b:19:3e:6c:50:f2:cc:9f:38:74:82:d3:6b:d4:c4:
ef:94:c0:96:c9:3a:65:91:9b:b0:e2:7d:69:e7:42:
a8:da:bf:15:b4:1e:27:34:fa:1a:a2:bd:6b:84:33:
b9:5c:f8:22:96:1b:dc:44:b1:a6:7d:50:bb:c6:3f:
99:4a:43:85:af:a2:67:6b:0a:3c:b5:33:ed:64:72:
d9:05:b8:6a:4c:2d:8e:69:61:32:89:41:76:0d:1e:
28:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:5C:C0:43:E2:DE:BE:D7:10:FA:D4:8A:8F:58:4D:5F:58:C1:66:EE
X509v3 Authority Key Identifier:
keyid:6A:CB:88:04:E1:6B:EC:2D:68:17:D7:E4:AC:65:AE:7E:3C:5B:F8:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/asuIBOFr7C1oF9fkrGWufjxb-Dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/80d39e-9faa-4763-870b-0801368aa58e/1/ZlzAQ-LevtcQ-tSKj1hNX1jBZu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/80d39e-9faa-4763-870b-0801368aa58e/1/asuIBOFr7C1oF9fkrGWufjxb-Dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.160.0/19
88.87.0.0/19
109.199.128.0/19
193.228.172.0/23
193.228.182.0/23
212.50.64.0/19
Signature Algorithm: sha256WithRSAEncryption
73:ec:14:a3:36:15:67:52:8d:2b:cd:96:1a:95:80:88:0c:8b:
55:41:e5:b9:7c:99:dc:4c:51:61:2e:5b:94:7c:0d:32:e5:44:
89:4d:12:58:dc:cf:06:cd:b5:e0:e4:fa:1b:0b:74:0e:9b:07:
69:fe:df:d2:d5:a0:ad:04:62:3b:fa:59:38:12:fa:a1:7c:d2:
07:69:b5:ab:35:7e:b7:24:28:d7:bf:a4:79:75:7c:51:a4:e8:
a0:e5:b6:4c:44:55:ca:77:27:c2:5e:a8:80:d2:d6:61:2a:51:
51:97:d3:bd:ca:ed:43:37:3b:16:2f:4c:7f:9e:13:44:0e:d0:
1a:6e:44:a7:9e:48:91:74:13:1f:49:32:c0:18:59:62:5a:2d:
d2:7d:49:ef:fa:2f:1e:fb:10:35:b3:dc:8a:f9:12:fb:25:e6:
a7:d3:2b:e4:a1:40:04:9d:59:25:ef:94:1e:21:c2:c9:d4:a4:
59:ff:62:39:a2:8f:b1:9e:93:03:f8:31:7a:4a:11:18:23:77:
97:45:6b:de:ff:26:27:6d:dd:23:5b:ef:7f:84:88:ad:6e:b2:
68:2b:20:87:69:67:6c:d3:bc:a2:e5:66:45:c2:05:cc:63:04:
8c:bf:8a:61:48:dd:db:29:56:6f:ae:d0:28:89:0c:82:e4:78:
7c:ae:93:f4
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYmsnIZmFB2TGUWiQTNlOiD3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhY2I4ODA0ZTE2YmVjMmQ2ODE3ZDdlNGFjNjVhZTdlM2M1
YmY4MzcwHhcNMjMwNzMxMTU0MTI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjVjYzA0M2UyZGViZWQ3MTBmYWQ0OGE4ZjU4NGQ1ZjU4YzE2NmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwtJn0Lhp5gYMKnQ2W6cCbGoF9dQ
AEBd2oHSf3dtH+CKfmt+5V4ps5MvT0Wxb5cHGsEJpIwNcGHDm1aPKR4XGyshqArb
0c9SAGUekExu7zkooeFSAfYc7FSRBWJCiUWCcmI2h/anpsbiCajqQ4Pv8CcF7yKY
yF5ZY41+4fiM0TCB8Qksuqu5J/v58Fv5yg35wsgVYtHxbrFc6ZDaP/jFLBekR2U7
GT5sUPLMnzh0gtNr1MTvlMCWyTplkZuw4n1p50Ko2r8VtB4nNPoaor1rhDO5XPgi
lhvcRLGmfVC7xj+ZSkOFr6Jnawo8tTPtZHLZBbhqTC2OaWEyiUF2DR4oYQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFGZcwEPi3r7XEPrUio9YTV9YwWbuMB8GA1UdIwQY
MBaAFGrLiATha+wtaBfX5Kxlrn48W/g3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXN1SUJPRnI3QzFvRjlma3JHV3VmanhiLURjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC84MGQzOWUtOWZhYS00NzYzLTg3MGIt
MDgwMTM2OGFhNThlLzEvWmx6QVEtTGV2dGNRLXRTS2oxaE5YMWpCWnU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC84MGQzOWUtOWZhYS00NzYzLTg3MGItMDgwMTM2OGFhNThl
LzEvYXN1SUJPRnI3QzFvRjlma3JHV3VmanhiLURjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQFV/6gAwQF
WFcAAwQFbceAAwQBweSsAwQBweS2AwQF1DJAMA0GCSqGSIb3DQEBCwUAA4IBAQBz
7BSjNhVnUo0rzZYalYCIDItVQeW5fJncTFFhLluUfA0y5USJTRJY3M8GzbXg5Pob
C3QOmwdp/t/S1aCtBGI7+lk4EvqhfNIHabWrNX63JCjXv6R5dXxRpOig5bZMRFXK
dyfCXqiA0tZhKlFRl9O9yu1DNzsWL0x/nhNEDtAabkSnnkiRdBMfSTLAGFliWi3S
fUnv+i8e+xA1s9yK+RL7Jean0yvkoUAEnVkl75QeIcLJ1KRZ/2I5oo+xnpMD+DF6
ShEYI3eXRWve/yYnbd0jW+9/hIitbrJoKyCHaWds07yi5WZFwgXMYwSMv4phSN3b
KVZvrtAoiQyC5Hh8rpP0
-----END CERTIFICATE-----
Generated at Tue Apr 22 02:50:41 2025 by rpki-client