Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/mZZPOker7RpybQzcSxu7ysPoZLk.roa
File: mZZPOker7RpybQzcSxu7ysPoZLk.roa (raw, json)
Hash identifier: bIfG3a+ubmR9AM4YJCQVprP7U4IQPfRvYCbwfXunXHA=
Subject key identifier: 99:96:4F:3A:47:AB:ED:1A:72:6D:0C:DC:4B:1B:BB:CA:C3:E8:64:B9
Certificate issuer: /CN=c8f6f5dec09bc7a1203045699ba058295d38e346
Certificate serial: 04E2A97F
Authority key identifier: C8:F6:F5:DE:C0:9B:C7:A1:20:30:45:69:9B:A0:58:29:5D:38:E3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPb13sCbx6EgMEVpm6BYKV0440Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/mZZPOker7RpybQzcSxu7ysPoZLk.roa
Signing time: Thu 21 Apr 2022 04:26:42 +0000
ROA not before: Thu 21 Apr 2022 04:26:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25408
IP address blocks: 109.167.243.0/24 maxlen: 24
109.167.192.0/24 maxlen: 24
109.167.192.0/18 maxlen: 18
77.244.16.0/20 maxlen: 20
77.244.31.0/24 maxlen: 24
194.24.240.0/24 maxlen: 24
194.24.241.0/24 maxlen: 24
84.52.64.0/18 maxlen: 18
84.52.79.0/24 maxlen: 24
84.52.99.0/24 maxlen: 24
195.177.122.0/24 maxlen: 24
195.177.121.0/24 maxlen: 24
195.177.120.0/24 maxlen: 24
195.177.120.0/22 maxlen: 22
195.177.123.0/24 maxlen: 24
185.202.212.0/22 maxlen: 22
185.202.214.0/23 maxlen: 23
109.167.128.0/18 maxlen: 18
91.202.220.0/22 maxlen: 22
62.182.89.0/24 maxlen: 24
62.182.88.0/21 maxlen: 21
194.246.112.0/24 maxlen: 24
195.64.141.0/24 maxlen: 24
195.64.140.0/23 maxlen: 23
194.246.113.0/24 maxlen: 24
2a00:1c78::/29 maxlen: 29
2a00:1c78::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81963391 (0x4e2a97f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f6f5dec09bc7a1203045699ba058295d38e346
Validity
Not Before: Apr 21 04:26:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=99964f3a47abed1a726d0cdc4b1bbbcac3e864b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:cf:1a:d4:54:72:c3:82:b2:cb:f2:20:ea:d7:
1c:1e:ef:8f:5c:e3:a1:96:e9:92:c5:70:c7:bd:70:
cc:eb:c3:ae:f1:ac:1c:82:dd:10:b3:6b:22:98:b6:
8d:61:27:03:04:e3:63:8a:dc:bf:b8:82:fa:26:40:
79:a1:8e:57:26:1a:53:4f:76:86:65:ec:66:27:90:
f5:c2:be:8d:d4:a6:6e:a2:e5:80:e2:0c:0a:23:4d:
33:78:e0:39:f7:f9:e5:bf:65:5a:c2:7f:ec:fb:78:
df:5c:a7:3e:19:3b:83:7d:1d:b1:56:74:db:21:67:
f7:be:c5:77:66:d3:5d:f2:b6:81:3a:0e:3f:39:ae:
8e:43:7f:f8:e4:d1:da:ba:85:ca:30:9c:e3:66:11:
6f:d7:ef:d2:ac:f7:3d:00:2c:82:72:ed:49:1c:9b:
ff:4e:e2:88:9c:e8:28:7b:08:9e:fe:90:3f:ff:d1:
43:dd:04:11:3e:c5:f6:88:b9:00:c7:2d:6f:1f:dd:
c0:02:0d:b8:73:82:9a:31:f9:6c:1d:d7:bf:47:df:
56:ef:cf:44:a3:00:33:a8:2c:b7:ad:4d:68:46:e2:
4b:ba:bf:fb:97:3e:f4:a9:87:5a:c9:1c:b9:43:ec:
a2:f2:02:dd:25:39:ed:38:46:65:fc:df:63:65:02:
9c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:96:4F:3A:47:AB:ED:1A:72:6D:0C:DC:4B:1B:BB:CA:C3:E8:64:B9
X509v3 Authority Key Identifier:
keyid:C8:F6:F5:DE:C0:9B:C7:A1:20:30:45:69:9B:A0:58:29:5D:38:E3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPb13sCbx6EgMEVpm6BYKV0440Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/mZZPOker7RpybQzcSxu7ysPoZLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/yPb13sCbx6EgMEVpm6BYKV0440Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.88.0/21
77.244.16.0/20
84.52.64.0/18
91.202.220.0/22
109.167.128.0/17
185.202.212.0/22
194.24.240.0/23
194.246.112.0/23
195.64.140.0/23
195.177.120.0/22
IPv6:
2a00:1c78::/29
Signature Algorithm: sha256WithRSAEncryption
2f:dd:59:03:e9:db:53:38:f5:6f:d0:64:21:43:05:89:0b:20:
5f:48:65:f9:0e:76:6a:06:ad:ff:e4:59:81:d8:28:a8:34:e9:
02:d3:41:c7:93:59:d8:94:da:4e:5d:a8:4c:d0:65:3d:b9:e4:
10:a3:e5:57:7c:6b:cb:32:25:5a:ad:3c:98:ad:d9:c5:1b:f6:
ec:0f:18:79:fe:5b:6c:19:33:54:66:ad:40:4f:10:09:85:ab:
8d:1d:bc:63:8f:2e:9a:88:ae:2a:0b:f8:e3:b5:6b:cd:b1:e3:
69:c9:6e:bf:9d:c2:b3:5a:23:5d:a2:ca:92:9e:38:e0:27:34:
81:c0:3a:7f:18:a2:a5:84:e2:9d:0d:f8:9a:ba:97:7a:3b:31:
6c:c6:58:78:d2:ba:f1:21:82:0e:88:16:1e:8a:0f:42:bb:6c:
c9:eb:8e:b7:67:c0:3a:4e:18:86:3b:70:cb:c1:7f:f9:aa:1a:
0f:b0:f9:7e:6e:05:c0:61:d3:ad:15:79:e7:2a:8d:59:d5:33:
ea:04:54:02:c0:06:31:b3:1d:aa:b8:82:b3:b0:13:11:49:32:
0e:6a:9a:c4:7a:fa:2a:c9:c6:33:e9:75:ec:53:bd:6c:a8:bc:
76:4f:a7:a0:e9:72:a5:85:bd:8e:21:a1:fd:bd:32:21:82:67:
98:39:86:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 18:26:01 2025 by rpki-client