Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/ZJQMK7yNsMMIfMeXWxWZKfz66JU.roa
File: ZJQMK7yNsMMIfMeXWxWZKfz66JU.roa (raw, json)
Hash identifier: tjBZw/bhPQSxixMZcwLTYOaqyJ0p9Je97tfGRzQsMiQ=
Subject key identifier: 64:94:0C:2B:BC:8D:B0:C3:08:7C:C7:97:5B:15:99:29:FC:FA:E8:95
Certificate issuer: /CN=5094a26aba71007621fd599d537bb7aeaade8b33
Certificate serial: 0183CB1B21F3D3C38A0DDAC050B5431EE99D
Authority key identifier: 50:94:A2:6A:BA:71:00:76:21:FD:59:9D:53:7B:B7:AE:AA:DE:8B:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/ZJQMK7yNsMMIfMeXWxWZKfz66JU.roa
Signing time: Wed 12 Oct 2022 07:31:36 +0000
ROA not before: Wed 12 Oct 2022 07:31:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 32590
IP address blocks: 155.133.233.0/24 maxlen: 24
155.133.232.0/24 maxlen: 24
155.133.230.0/23 maxlen: 24
155.133.228.0/23 maxlen: 24
155.133.227.0/24 maxlen: 24
155.133.240.0/23 maxlen: 24
155.133.239.0/24 maxlen: 24
155.133.238.0/24 maxlen: 24
155.133.236.0/23 maxlen: 24
155.133.235.0/24 maxlen: 24
155.133.234.0/24 maxlen: 24
146.66.152.0/23 maxlen: 24
155.133.246.0/23 maxlen: 24
155.133.245.0/24 maxlen: 24
155.133.244.0/24 maxlen: 24
155.133.242.0/23 maxlen: 24
155.133.251.0/24 maxlen: 24
146.66.158.0/23 maxlen: 24
155.133.253.0/24 maxlen: 24
155.133.252.0/24 maxlen: 24
155.133.250.0/24 maxlen: 24
146.66.156.0/23 maxlen: 24
155.133.249.0/24 maxlen: 24
146.66.155.0/24 maxlen: 24
146.66.154.0/24 maxlen: 24
155.133.248.0/24 maxlen: 24
155.133.255.0/24 maxlen: 24
155.133.254.0/24 maxlen: 24
155.133.226.0/24 maxlen: 24
155.133.224.0/23 maxlen: 24
185.25.183.0/24 maxlen: 24
185.25.182.0/24 maxlen: 24
185.25.180.0/23 maxlen: 24
2a01:bc80:9::/48 maxlen: 48
2a01:bc80:c::/48 maxlen: 48
2a01:bc80:7::/48 maxlen: 48
2a01:bc80:2::/48 maxlen: 48
2a01:bc80:b::/48 maxlen: 48
2a01:bc80:6::/48 maxlen: 48
2a01:bc80:1::/48 maxlen: 48
2a01:bc80:4::/48 maxlen: 48
2a01:bc80:8::/48 maxlen: 48
2a01:bc80:3::/48 maxlen: 48
2a01:bc80::/48 maxlen: 48
2a01:bc80:a::/48 maxlen: 48
2a01:bc80:5::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:cb:1b:21:f3:d3:c3:8a:0d:da:c0:50:b5:43:1e:e9:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5094a26aba71007621fd599d537bb7aeaade8b33
Validity
Not Before: Oct 12 07:31:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=64940c2bbc8db0c3087cc7975b159929fcfae895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:34:8d:be:cd:a1:eb:23:4b:92:c5:b6:49:0f:
a7:89:ea:b1:2e:67:86:c1:f9:3c:65:3c:dc:4f:77:
34:46:e6:8a:1b:26:bf:0c:20:49:88:cd:51:aa:a0:
e8:78:75:a0:b9:66:be:b3:ba:a7:64:c8:05:2c:d9:
9a:9e:58:99:c5:3e:55:6e:6b:dc:d1:39:da:bb:99:
0d:ae:eb:c3:ad:86:41:e5:c5:1c:13:44:7f:5d:1c:
76:af:66:98:9d:f9:12:66:c5:dd:9b:38:7a:89:20:
10:29:ba:24:51:ae:35:18:8f:db:12:6e:2c:ca:58:
d5:47:b3:5a:56:ed:7e:84:df:8f:0a:9a:40:c9:06:
54:ea:37:35:08:5a:32:ab:c5:52:70:1a:0b:e2:64:
8e:13:4c:07:ae:b1:86:35:8b:96:c9:fd:8c:20:87:
ac:77:d8:a5:5c:a2:f7:52:b2:df:21:b0:7f:35:20:
83:7b:e5:d9:19:60:2d:83:63:9e:35:f2:b2:a8:5c:
9e:f9:56:81:59:b0:da:c7:e9:b4:58:eb:c5:aa:76:
48:1b:eb:79:21:2a:71:96:1f:de:72:02:15:83:7a:
a1:62:46:03:33:e3:7f:5b:bd:45:61:8b:09:dc:a4:
81:76:26:fa:0f:5a:52:ed:9d:9a:ae:26:83:e8:ae:
ea:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:94:0C:2B:BC:8D:B0:C3:08:7C:C7:97:5B:15:99:29:FC:FA:E8:95
X509v3 Authority Key Identifier:
keyid:50:94:A2:6A:BA:71:00:76:21:FD:59:9D:53:7B:B7:AE:AA:DE:8B:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/ZJQMK7yNsMMIfMeXWxWZKfz66JU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.66.152.0/21
155.133.224.0/19
185.25.180.0/22
IPv6:
2a01:bc80::-2a01:bc80:c:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a2:fd:58:cf:0b:af:81:af:10:b6:20:8d:70:90:ca:c2:3b:ad:
ba:17:52:d6:4e:92:7a:b1:f5:86:64:06:c8:81:eb:e9:19:fe:
27:8b:09:84:a5:da:91:99:bc:a8:38:59:9a:2b:1c:af:51:d8:
09:8f:87:a8:34:05:1d:35:a3:50:c2:d5:fd:d3:22:51:d4:e4:
6b:d0:e1:f4:7c:c4:71:e3:c7:37:35:d6:05:5e:b2:69:1a:72:
a3:a2:b5:d2:87:05:50:63:5f:ca:36:97:3f:97:7c:45:48:da:
40:eb:ba:0a:8b:17:c4:b9:24:7a:84:a2:30:cd:11:5f:3d:3c:
47:5a:d5:1d:ed:df:7c:25:fa:f7:8d:4d:ce:6b:8b:6e:a4:a8:
31:09:c4:fb:82:01:a4:07:61:63:da:1e:57:d0:41:b0:12:5e:
25:39:53:44:97:36:e0:d7:c5:2f:e0:67:b7:89:24:20:0a:78:
7d:9a:6b:15:cc:0a:f4:03:1c:e8:3a:2f:8b:17:8d:58:4c:64:
0a:71:d1:99:2b:a9:86:e5:cc:97:40:c4:bc:00:a7:1e:7e:88:
7e:90:8a:e1:02:c3:d5:c6:6e:f2:d6:1a:9e:19:2d:a1:d5:bb:
70:bc:c7:07:25:58:54:8a:92:9d:5c:7a:ab:f5:bf:de:0c:31:
51:f9:2b:5e
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAYPLGyHz08OKDdrAULVDHumdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwOTRhMjZhYmE3MTAwNzYyMWZkNTk5ZDUzN2JiN2FlYWFk
ZThiMzMwHhcNMjIxMDEyMDczMTM2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDk0MGMyYmJjOGRiMGMzMDg3Y2M3OTc1YjE1OTkyOWZjZmFlODk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTSNvs2h6yNLksW2SQ+nieqxLmeG
wfk8ZTzcT3c0RuaKGya/DCBJiM1RqqDoeHWguWa+s7qnZMgFLNmanliZxT5Vbmvc
0Tnau5kNruvDrYZB5cUcE0R/XRx2r2aYnfkSZsXdmzh6iSAQKbokUa41GI/bEm4s
yljVR7NaVu1+hN+PCppAyQZU6jc1CFoyq8VScBoL4mSOE0wHrrGGNYuWyf2MIIes
d9ilXKL3UrLfIbB/NSCDe+XZGWAtg2OeNfKyqFye+VaBWbDax+m0WOvFqnZIG+t5
ISpxlh/ecgIVg3qhYkYDM+N/W71FYYsJ3KSBdib6D1pS7Z2ariaD6K7qowIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFGSUDCu8jbDDCHzHl1sVmSn8+uiVMB8GA1UdIwQY
MBaAFFCUomq6cQB2If1ZnVN7t66q3oszMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUpTaWFycHhBSFloX1ZtZFUzdTNycXJlaXpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85ZmNlNzgtNGY5ZC00ODQ3LWI3NTkt
YjQ1MWU0NzdiOWMyLzEvWkpRTUs3eU5zTU1JZk1lWFd4V1pLZno2NkpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS85ZmNlNzgtNGY5ZC00ODQ3LWI3NTktYjQ1MWU0NzdiOWMy
LzEvVUpTaWFycHhBSFloX1ZtZFUzdTNycXJlaXpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAYBAIAATASAwQDkkKYAwQF
m4XgAwQCuRm0MBgEAgACMBIwEAMFByoBvIADBwAqAbyAAAwwDQYJKoZIhvcNAQEL
BQADggEBAKL9WM8Lr4GvELYgjXCQysI7rboXUtZOknqx9YZkBsiB6+kZ/ieLCYSl
2pGZvKg4WZorHK9R2AmPh6g0BR01o1DC1f3TIlHU5GvQ4fR8xHHjxzc11gVesmka
cqOitdKHBVBjX8o2lz+XfEVI2kDrugqLF8S5JHqEojDNEV89PEda1R3t33wl+veN
Tc5ri26kqDEJxPuCAaQHYWPaHlfQQbASXiU5U0SXNuDXxS/gZ7eJJCAKeH2aaxXM
CvQDHOg6L4sXjVhMZApx0ZkrqYblzJdAxLwApx5+iH6QiuECw9XGbvLWGp4ZLaHV
u3C8xwclWFSKkp1ceqv1v94MMVH5K14=
-----END CERTIFICATE-----
Generated at Tue Apr 8 09:49:57 2025 by rpki-client