Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/ZyTYx4_I8iX9v5lQkYuv5jjnHDc.roa
File: ZyTYx4_I8iX9v5lQkYuv5jjnHDc.roa (raw, json)
Hash identifier: IsPYBtktM7yyYSnqCKu1rWWAKF76ifsCq7lUpAAMtgw=
Subject key identifier: 67:24:D8:C7:8F:C8:F2:25:FD:BF:99:50:91:8B:AF:E6:38:E7:1C:37
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0185868689DE63D3F6ED839FF88C118B6242
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/ZyTYx4_I8iX9v5lQkYuv5jjnHDc.roa
Signing time: Fri 06 Jan 2023 10:00:42 +0000
ROA not before: Fri 06 Jan 2023 10:00:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 193.46.210.0/24 maxlen: 24
85.255.180.0/22 maxlen: 24
5.180.176.0/24 maxlen: 24
5.105.125.0/24 maxlen: 24
5.105.123.0/24 maxlen: 24
5.105.122.0/24 maxlen: 24
5.105.131.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.136.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.156.0/24 maxlen: 24
5.105.166.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.168.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.172.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.76.0/24 maxlen: 24
5.105.74.0/24 maxlen: 24
5.105.84.0/24 maxlen: 24
5.105.82.0/24 maxlen: 24
5.105.81.0/24 maxlen: 24
5.105.80.0/24 maxlen: 24
5.105.79.0/24 maxlen: 24
5.105.96.0/24 maxlen: 24
5.105.95.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.103.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.108.0/24 maxlen: 24
5.105.106.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.230.0/24 maxlen: 24
5.105.229.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
5.105.195.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.197.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
5.105.214.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.12.0/24 maxlen: 24
5.105.26.0/24 maxlen: 24
5.105.40.0/24 maxlen: 24
5.105.43.0/24 maxlen: 24
5.105.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:86:86:89:de:63:d3:f6:ed:83:9f:f8:8c:11:8b:62:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 6 10:00:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6724d8c78fc8f225fdbf9950918bafe638e71c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0e:e4:43:ec:34:0d:1c:f7:98:51:74:36:68:
60:5c:99:85:37:d7:9b:e5:2e:93:3a:a8:db:c3:83:
2a:38:bd:58:63:1b:33:fc:85:5e:ac:1d:93:b9:0d:
4a:73:1b:45:c1:0d:f3:4a:61:50:72:94:04:79:4b:
5d:d5:f5:c0:f9:9f:70:47:27:e6:09:3e:9c:7b:05:
0e:37:c0:91:1c:50:99:9f:e3:d9:f1:f1:57:2d:84:
cc:8d:d7:c8:86:cd:f2:00:bb:d7:98:09:eb:87:08:
4e:d2:74:cf:5a:64:2f:dd:aa:c4:2f:76:fe:fa:08:
b2:e6:92:a6:c0:49:61:84:a1:c6:38:19:7e:1b:70:
9a:03:a9:43:47:dc:8e:60:8c:5c:55:57:cc:d2:9e:
da:9d:dc:da:d1:45:34:31:13:58:01:c2:f5:1a:53:
ea:25:86:49:b1:ac:fd:75:62:98:13:68:7f:9d:2c:
b1:01:1e:3b:f6:e4:62:2e:3d:a6:1b:75:d8:a0:db:
31:cf:3f:1c:2a:3a:6e:74:e1:af:0c:36:9f:bf:40:
8b:f7:47:1e:a1:27:f3:16:70:b2:d4:bd:ce:41:a3:
d1:d9:84:72:4d:78:7e:f8:ec:97:a4:ff:f3:32:35:
ba:ca:72:fa:4e:3c:6e:66:37:32:3a:43:1b:fc:99:
0f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:24:D8:C7:8F:C8:F2:25:FD:BF:99:50:91:8B:AF:E6:38:E7:1C:37
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/ZyTYx4_I8iX9v5lQkYuv5jjnHDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.7.0/24
5.105.12.0/24
5.105.26.0/24
5.105.40.0/24
5.105.43.0/24
5.105.68.0/23
5.105.74.0/24
5.105.76.0/24
5.105.79.0-5.105.82.255
5.105.84.0/24
5.105.94.0-5.105.96.255
5.105.103.0/24
5.105.106.0/24
5.105.108.0/24
5.105.112.0/22
5.105.122.0/23
5.105.125.0/24
5.105.127.0/24
5.105.131.0/24
5.105.134.0/24
5.105.136.0/24
5.105.138.0/23
5.105.142.0/23
5.105.156.0/24
5.105.162.0/24
5.105.165.0-5.105.166.255
5.105.168.0/24
5.105.170.0/24
5.105.172.0/24
5.105.186.0/23
5.105.195.0/24
5.105.197.0-5.105.199.255
5.105.202.0/23
5.105.206.0/23
5.105.214.0/24
5.105.216.0/24
5.105.218.0/24
5.105.229.0-5.105.230.255
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.248.0/23
5.180.176.0/24
85.255.180.0/22
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
64:b7:4e:55:6c:dc:03:75:92:a6:cd:49:27:ca:52:19:44:7d:
b7:a9:13:75:38:cc:1d:d6:72:98:d5:8a:5f:54:63:42:74:cd:
2f:b8:ae:38:4a:19:0d:79:13:3f:ae:34:10:20:15:08:d6:28:
af:c2:99:13:d3:2b:6c:d0:c5:6e:ce:32:70:b9:a6:4e:8d:b0:
14:19:31:37:e0:f7:97:a2:a7:f9:80:c4:60:f9:01:e3:af:6e:
1f:8b:0f:a2:7e:32:d4:a0:6e:05:4f:d2:9e:f7:89:1d:49:4c:
3b:25:e9:dc:e8:d3:ac:22:1b:6d:5f:c1:22:4a:77:84:af:84:
55:78:4c:27:ea:ed:90:ef:32:5f:8e:90:44:1e:7c:39:31:7e:
34:31:ae:b1:04:bb:01:b6:80:c0:be:46:5e:17:09:5b:67:35:
eb:15:d8:86:90:58:22:e2:c7:b7:f0:8a:d6:68:2a:d9:fe:74:
e1:5a:51:df:98:c6:b6:3b:ee:15:63:64:d8:ae:2c:01:a7:0b:
a8:ca:24:fe:28:6a:f1:f8:96:d6:97:91:35:2b:cd:7c:b0:5e:
7d:87:f5:e3:e3:c2:ef:a0:b4:b4:76:0e:ab:ea:2f:32:ee:da:
6a:9d:b5:af:f6:d2:f8:b4:16:e3:8b:3a:2a:9b:bb:1b:66:b6:
32:eb:e8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:56:02 2025 by rpki-client