Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/Zwow0ssTWoLHcQQwX4JlNSY2oKE.roa
File: Zwow0ssTWoLHcQQwX4JlNSY2oKE.roa (raw, json)
Hash identifier: g9R5xbePLorUrV0h+F/IlBGdIVc1gSPIKLRgdm0mnmM=
Subject key identifier: 67:0A:30:D2:CB:13:5A:82:C7:71:04:30:5F:82:65:35:26:36:A0:A1
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 019425FCA3C2ACA379818B32F1AA10D4E9D6
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/Zwow0ssTWoLHcQQwX4JlNSY2oKE.roa
Signing time: Thu 02 Jan 2025 07:48:21 +0000
ROA not before: Thu 02 Jan 2025 07:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15694
IP address blocks: 46.229.144.0/20 maxlen: 20
77.79.192.0/18 maxlen: 18
77.79.206.0/24 maxlen: 24
77.79.210.0/24 maxlen: 24
77.79.215.0/24 maxlen: 24
77.79.221.0/24 maxlen: 24
85.232.224.0/19 maxlen: 19
85.232.254.0/24 maxlen: 24
194.145.228.0/24 maxlen: 24
195.167.144.0/20 maxlen: 20
195.167.150.0/24 maxlen: 24
195.167.155.0/24 maxlen: 24
195.167.158.0/24 maxlen: 24
206.252.224.0/19 maxlen: 19
206.252.250.0/24 maxlen: 24
212.91.4.0/22 maxlen: 22
212.91.10.0/24 maxlen: 24
212.91.11.0/24 maxlen: 24
212.91.12.0/24 maxlen: 24
212.91.13.0/24 maxlen: 24
212.91.14.0/24 maxlen: 24
212.91.16.0/20 maxlen: 20
212.91.28.0/24 maxlen: 24
213.189.32.0/19 maxlen: 19
213.189.32.0/24 maxlen: 24
213.189.42.0/24 maxlen: 24
213.189.50.0/24 maxlen: 24
217.17.32.0/20 maxlen: 20
217.149.240.0/20 maxlen: 20
2001:1a68::/32 maxlen: 32
2001:1a68:0:13::/64 maxlen: 64
2001:1a68:0:1d::/64 maxlen: 64
2001:1a68:0:21::/64 maxlen: 64
2001:1a68:18::/48 maxlen: 48
2001:1a68:2e::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:a3:c2:ac:a3:79:81:8b:32:f1:aa:10:d4:e9:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 2 07:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=670a30d2cb135a82c77104305f8265352636a0a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e6:34:95:6a:8e:a7:86:ff:b5:61:8d:2f:13:
0f:a9:3d:a2:63:af:d0:32:86:c3:d5:c2:1b:c4:70:
0d:17:a2:84:51:54:14:7c:ca:c1:b7:f7:bb:9f:e3:
c7:a5:49:44:d1:21:8e:77:8d:5b:3b:ed:c7:d7:6e:
35:ae:33:09:61:0c:cf:48:84:d0:d9:eb:bb:22:a5:
78:ac:6a:ca:51:68:bd:9a:42:6e:e1:88:ce:4c:e9:
ae:1a:2f:41:92:2e:43:92:86:9c:8a:aa:a5:76:76:
da:08:e1:64:87:91:99:3c:d2:31:68:f1:58:e4:6d:
ba:2c:c9:ec:fe:c3:d0:8f:83:60:a0:73:48:e1:1c:
60:21:1e:58:c5:84:0b:e8:22:49:d2:c3:ce:6d:97:
ea:de:cb:56:50:b4:42:05:5d:cc:60:36:c5:dd:71:
f4:fc:ff:49:62:a5:ef:89:c3:8b:49:14:90:cc:02:
88:03:8d:8e:3f:3a:f2:ba:02:ff:42:f2:93:17:a8:
d9:c7:1b:60:f9:67:c3:11:d0:41:fe:a3:61:81:cf:
f1:63:86:d4:2d:a8:f1:48:0d:98:82:04:36:ab:c4:
9c:c7:0d:29:45:46:8e:2f:14:0a:27:22:db:bb:e6:
92:b4:fd:15:bf:52:79:a8:b8:1d:69:a3:5a:08:07:
c3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:0A:30:D2:CB:13:5A:82:C7:71:04:30:5F:82:65:35:26:36:A0:A1
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/Zwow0ssTWoLHcQQwX4JlNSY2oKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.144.0/20
77.79.192.0/18
85.232.224.0/19
194.145.228.0/24
195.167.144.0/20
206.252.224.0/19
212.91.4.0/22
212.91.10.0-212.91.14.255
212.91.16.0/20
213.189.32.0/19
217.17.32.0/20
217.149.240.0/20
IPv6:
2001:1a68::/32
Signature Algorithm: sha256WithRSAEncryption
82:20:59:83:99:15:14:e0:22:c2:0e:da:cb:f9:19:ae:a3:05:
6b:fe:38:d3:f6:72:b8:26:5e:44:f4:8c:38:0c:b1:66:64:45:
7f:9d:10:7a:1b:8a:51:d4:74:5e:28:98:85:4f:5e:02:88:f7:
9c:c5:da:03:f7:ae:a2:00:a1:93:71:a3:c9:82:28:5a:8b:96:
78:72:fd:cf:c8:ad:61:e8:78:34:5b:e6:c6:39:ef:a1:3c:2f:
9e:e1:73:65:c7:93:2b:84:42:71:5a:69:ae:f3:a9:2e:54:fa:
e6:31:96:70:00:db:a3:10:bb:16:78:0f:eb:d6:c0:60:5d:01:
c3:a6:3d:47:b8:45:7d:ef:94:ee:1f:4a:13:87:dd:f5:60:9e:
a0:41:aa:6a:57:64:66:bc:32:58:f6:58:fe:f4:15:00:72:3a:
4f:c2:31:7a:4b:c6:9b:61:21:fa:8b:0b:1f:7f:46:1c:de:6d:
76:f6:22:78:58:ea:27:e6:b6:0c:7e:bc:e1:04:56:6d:fd:e3:
c5:a2:1d:18:77:e8:76:d4:e5:46:65:9e:98:f8:a5:85:c3:f5:
30:51:46:af:78:13:fb:ef:ed:c0:93:a8:03:e8:34:fe:d9:2e:
fa:eb:c1:0d:70:bb:01:fd:fc:d8:89:84:40:58:e1:89:10:fe:
38:d3:7b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:55 2025 by rpki-client