Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/qz7pkkItpGPvGQpDWIzHRBXBzqQ.roa
File: qz7pkkItpGPvGQpDWIzHRBXBzqQ.roa (raw, json)
Hash identifier: pRMMMOfI9DRbokP4oGkJS8i/O8fnXtH822o9Of1lkHM=
Subject key identifier: AB:3E:E9:92:42:2D:A4:63:EF:19:0A:43:58:8C:C7:44:15:C1:CE:A4
Certificate issuer: /CN=1c864813c0862e6b4756f8dfda8957c6aeac6654
Certificate serial: 019420D657CC3F74233C37F03AE2F966D268
Authority key identifier: 1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/qz7pkkItpGPvGQpDWIzHRBXBzqQ.roa
Signing time: Wed 01 Jan 2025 07:48:25 +0000
ROA not before: Wed 01 Jan 2025 07:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15830
IP address blocks: 62.209.32.0/19 maxlen: 19
62.216.224.0/21 maxlen: 21
62.216.233.0/24 maxlen: 24
62.216.234.0/23 maxlen: 23
62.216.236.0/22 maxlen: 22
62.216.240.0/20 maxlen: 20
62.216.244.0/22 maxlen: 22
62.216.246.0/24 maxlen: 24
80.85.64.0/20 maxlen: 20
80.85.80.0/23 maxlen: 23
80.85.82.0/23 maxlen: 23
80.85.88.0/21 maxlen: 21
80.252.80.0/20 maxlen: 20
81.29.192.0/19 maxlen: 19
81.29.208.0/20 maxlen: 20
81.201.96.0/22 maxlen: 22
81.201.100.0/23 maxlen: 23
81.201.104.0/24 maxlen: 24
81.201.108.0/22 maxlen: 22
81.201.112.0/22 maxlen: 22
81.201.118.0/23 maxlen: 23
81.201.124.0/22 maxlen: 22
82.199.64.0/19 maxlen: 19
85.90.224.0/20 maxlen: 20
85.90.240.0/22 maxlen: 22
85.90.248.0/21 maxlen: 21
85.90.252.0/22 maxlen: 22
85.233.192.0/19 maxlen: 19
85.233.194.0/24 maxlen: 24
85.233.196.0/24 maxlen: 24
85.233.205.0/24 maxlen: 24
87.237.184.0/21 maxlen: 21
87.252.192.0/20 maxlen: 20
87.252.208.0/20 maxlen: 20
88.80.160.0/20 maxlen: 20
88.80.176.0/21 maxlen: 21
89.21.0.0/19 maxlen: 19
89.107.16.0/21 maxlen: 21
109.237.16.0/21 maxlen: 21
109.237.28.0/24 maxlen: 24
188.95.96.0/21 maxlen: 21
212.71.224.0/21 maxlen: 21
212.71.240.0/22 maxlen: 22
212.111.32.0/21 maxlen: 21
212.111.44.0/22 maxlen: 22
212.111.48.0/20 maxlen: 20
213.52.132.0/22 maxlen: 22
213.52.136.0/21 maxlen: 21
213.52.144.0/20 maxlen: 20
213.52.160.0/20 maxlen: 20
213.52.172.0/22 maxlen: 22
213.52.176.0/22 maxlen: 22
213.52.180.0/23 maxlen: 23
213.52.184.0/22 maxlen: 22
213.52.188.0/23 maxlen: 23
213.52.190.0/23 maxlen: 23
213.52.192.0/18 maxlen: 18
213.168.224.0/20 maxlen: 20
213.168.240.0/21 maxlen: 21
213.168.252.0/22 maxlen: 22
213.219.0.0/19 maxlen: 19
213.219.32.0/22 maxlen: 22
213.219.40.0/21 maxlen: 21
213.219.48.0/20 maxlen: 20
217.20.32.0/20 maxlen: 20
217.20.32.0/21 maxlen: 21
217.20.40.0/23 maxlen: 23
217.20.42.0/23 maxlen: 23
217.20.44.0/22 maxlen: 22
217.68.16.0/20 maxlen: 20
217.68.16.0/22 maxlen: 22
217.68.20.0/22 maxlen: 22
217.68.24.0/21 maxlen: 21
217.114.160.0/20 maxlen: 20
217.117.144.0/20 maxlen: 20
2001:4d78::/32 maxlen: 48
2001:4d78:f200::/40 maxlen: 40
2a02:170::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:57:cc:3f:74:23:3c:37:f0:3a:e2:f9:66:d2:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c864813c0862e6b4756f8dfda8957c6aeac6654
Validity
Not Before: Jan 1 07:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab3ee992422da463ef190a43588cc74415c1cea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a1:87:fb:0e:b6:67:57:7e:c5:2c:b4:4f:7f:
f6:7a:05:11:30:81:ff:e0:ce:0c:30:52:47:c7:ea:
7e:01:44:cc:9b:d0:16:3f:74:61:79:e6:e1:9b:a7:
d6:af:c3:7a:98:78:dc:a1:95:79:b7:b8:f2:24:73:
b5:5a:79:2c:ee:2e:fc:ef:37:9c:a1:4a:20:66:ee:
9e:ba:d9:95:3d:12:ad:f7:55:f6:16:5b:a1:5f:65:
1e:94:fe:e8:fe:1d:dc:b1:c5:27:d0:e8:da:2a:c1:
c0:de:85:5c:f8:69:55:df:42:99:a3:2d:8f:50:25:
5d:de:33:99:c5:73:99:a5:d4:92:19:36:6d:dd:f3:
ef:d6:7a:21:61:b4:9d:dc:33:c0:74:fd:0f:82:72:
2f:db:47:7a:0b:ec:d0:c4:79:44:3a:37:f0:73:9a:
36:82:b5:51:61:82:5c:b1:b0:d0:4b:47:ec:5a:fe:
1c:3a:38:06:d0:01:32:64:90:c1:d0:fb:eb:b3:da:
79:f4:70:01:2e:83:d8:d4:59:93:98:e7:9e:53:55:
50:d3:39:88:5d:76:80:a1:16:52:c2:bb:31:a9:fc:
a6:a9:b8:b9:d7:c3:05:98:ee:74:44:7b:70:6e:8d:
3b:99:25:cd:d6:a9:89:6b:47:7d:c0:ae:ec:1b:b4:
7f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:3E:E9:92:42:2D:A4:63:EF:19:0A:43:58:8C:C7:44:15:C1:CE:A4
X509v3 Authority Key Identifier:
keyid:1C:86:48:13:C0:86:2E:6B:47:56:F8:DF:DA:89:57:C6:AE:AC:66:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HIZIE8CGLmtHVvjf2olXxq6sZlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/qz7pkkItpGPvGQpDWIzHRBXBzqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/10393d-a030-4af5-8995-8f2d6684c814/1/HIZIE8CGLmtHVvjf2olXxq6sZlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.209.32.0/19
62.216.224.0/21
62.216.233.0-62.216.255.255
80.85.64.0-80.85.83.255
80.85.88.0/21
80.252.80.0/20
81.29.192.0/19
81.201.96.0-81.201.101.255
81.201.104.0/24
81.201.108.0-81.201.115.255
81.201.118.0/23
81.201.124.0/22
82.199.64.0/19
85.90.224.0-85.90.243.255
85.90.248.0/21
85.233.192.0/19
87.237.184.0/21
87.252.192.0/19
88.80.160.0-88.80.183.255
89.21.0.0/19
89.107.16.0/21
109.237.16.0/21
109.237.28.0/24
188.95.96.0/21
212.71.224.0/21
212.71.240.0/22
212.111.32.0/21
212.111.44.0-212.111.63.255
213.52.132.0-213.52.181.255
213.52.184.0-213.52.255.255
213.168.224.0-213.168.247.255
213.168.252.0/22
213.219.0.0-213.219.35.255
213.219.40.0-213.219.63.255
217.20.32.0/20
217.68.16.0/20
217.114.160.0/20
217.117.144.0/20
IPv6:
2001:4d78::/32
2a02:170::/32
Signature Algorithm: sha256WithRSAEncryption
8c:3c:6f:ef:74:c6:d0:4b:73:03:f8:4a:bc:09:04:d8:81:43:
01:0d:f1:18:3c:db:c9:02:ca:e4:d3:52:95:5a:32:95:fd:a6:
37:f0:60:78:fd:06:29:80:85:ed:28:c3:4b:12:91:04:44:4e:
1e:4c:b8:1b:74:a0:e9:eb:78:10:ad:80:fa:9c:4d:a5:8b:3d:
ce:8f:77:ad:a3:a9:07:39:6f:74:81:c7:74:0a:e8:69:23:46:
1c:47:b2:27:13:e9:e6:bc:84:b8:1a:fa:34:62:02:bb:51:3b:
e0:0e:5f:4d:8f:1f:3b:9d:eb:2c:c1:48:37:7a:21:55:a8:1f:
a9:c6:ed:b5:d5:cd:3f:85:85:d4:b5:92:c2:00:51:e2:fd:1d:
77:31:85:7e:56:61:94:1a:b9:a8:51:5f:d0:59:96:8b:14:bc:
09:13:aa:00:fa:33:9e:98:da:06:2e:60:c0:34:a4:36:57:70:
d8:48:f5:46:c6:8e:8f:3d:fb:49:f2:68:50:93:da:c4:6d:31:
82:41:b1:d4:98:88:2a:9d:86:8a:56:ff:94:b4:09:3a:2e:89:
99:24:a4:06:35:8a:8f:a9:df:80:44:6d:b7:13:96:a6:c5:21:
81:a6:93:03:35:53:72:55:c2:fc:43:76:8c:20:99:75:3e:68:
e0:b7:fe:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:17:53 2025 by rpki-client