Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ZNbLEjf_aMXt4UmZldo6n0DBN2o.roa
File: ZNbLEjf_aMXt4UmZldo6n0DBN2o.roa (raw, json)
Hash identifier: yE9TP0FRxXwGuCooqJRelGQzkVRKor62wd+xPuXAkzs=
Subject key identifier: 64:D6:CB:12:37:FF:68:C5:ED:E1:49:99:95:DA:3A:9F:40:C1:37:6A
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0185053F6D14E780F742C7F5B71E1B75A9E2
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ZNbLEjf_aMXt4UmZldo6n0DBN2o.roa
Signing time: Mon 12 Dec 2022 07:32:00 +0000
ROA not before: Mon 12 Dec 2022 07:32:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6854
IP address blocks: 212.69.96.0/19 maxlen: 24
212.14.160.0/19 maxlen: 24
188.162.0.0/16 maxlen: 24
195.230.64.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
80.253.0.0/20 maxlen: 20
195.16.96.0/19 maxlen: 24
212.119.160.0/19 maxlen: 24
62.64.16.0/20 maxlen: 20
62.64.24.0/21 maxlen: 21
195.78.116.0/23 maxlen: 24
193.201.228.0/22 maxlen: 24
213.243.64.0/18 maxlen: 18
83.222.192.0/19 maxlen: 19
195.5.128.0/19 maxlen: 24
83.229.128.0/17 maxlen: 17
212.44.64.0/19 maxlen: 24
213.154.160.0/19 maxlen: 24
213.168.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:3f:6d:14:e7:80:f7:42:c7:f5:b7:1e:1b:75:a9:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 12 07:32:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=64d6cb1237ff68c5ede1499995da3a9f40c1376a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6b:5a:8a:38:5f:05:bd:ec:be:3c:3c:b1:d0:
b3:31:aa:85:26:cb:4a:8b:84:d5:26:29:40:84:9f:
8b:a1:a0:3f:12:2b:3a:85:26:2c:e8:86:19:37:b4:
d1:b3:8a:65:ad:21:2e:b9:46:a1:10:79:75:51:32:
11:19:8c:28:e6:44:7e:92:a7:9a:6d:c5:48:ef:1d:
5e:60:50:b4:fb:36:01:25:4e:f9:96:ae:c4:e8:0f:
f7:cb:d0:d9:e2:b8:c3:cb:02:7b:8a:23:71:4b:21:
62:a6:62:7d:c3:e0:bf:8d:0d:61:bd:db:32:b4:d7:
2b:60:37:08:d8:9f:88:7e:63:12:76:32:4a:1e:6a:
58:61:f8:cf:70:a5:f3:2b:ce:e8:4b:c1:84:fb:bc:
e3:e5:a8:d9:25:e6:ab:88:41:01:73:d0:8e:d4:39:
dd:5b:b6:cf:d2:74:ad:79:9a:06:13:af:69:90:05:
8d:38:90:33:a2:df:b7:2e:37:8b:cc:16:fe:34:a4:
bc:59:7f:d0:d3:a2:f9:32:32:77:75:61:aa:55:0d:
72:93:67:19:db:0e:d1:6d:0a:ad:ba:c2:8a:03:12:
ce:34:22:34:d9:dd:c5:3d:95:43:48:77:64:6c:e3:
a9:51:ca:c8:76:6f:9a:9a:2a:75:bc:af:02:4a:83:
ab:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D6:CB:12:37:FF:68:C5:ED:E1:49:99:95:DA:3A:9F:40:C1:37:6A
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ZNbLEjf_aMXt4UmZldo6n0DBN2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.64.16.0/20
80.253.0.0/20
83.222.192.0/19
83.229.128.0/17
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
213.168.32.0/19
213.243.64.0/18
Signature Algorithm: sha256WithRSAEncryption
35:df:62:df:03:f8:d8:bc:f4:9c:49:60:e1:df:97:7b:5a:78:
e7:cf:4a:0f:65:e1:ac:74:f0:58:a6:be:ed:a2:9b:ab:4d:9f:
59:63:ec:d4:c8:9b:cb:e7:40:12:a8:8a:43:61:f6:f3:d8:dd:
6a:b0:b3:82:90:d6:dd:5f:14:76:5f:eb:be:97:25:ff:21:a5:
53:06:20:e4:99:80:6d:59:5e:8b:83:d7:38:7c:9c:ce:b0:5d:
57:23:1b:7e:2e:c1:0c:4b:72:d2:11:cc:93:91:10:85:0d:25:
d9:27:36:f9:0d:b0:9d:f3:58:48:4b:9b:8c:8c:de:fa:12:8b:
b1:03:8d:24:85:7c:55:bc:fb:f4:c7:38:07:93:1f:8e:1f:b4:
e3:1d:41:bd:c2:bc:70:7e:0e:76:a2:91:45:d8:ce:92:9e:4e:
8b:f8:ad:ce:db:9f:6f:ce:a5:50:a2:f6:34:52:7e:d9:64:27:
63:f0:99:a0:5d:5e:bd:88:97:b9:ce:e6:ee:52:42:78:a3:68:
55:6d:07:e9:5f:25:46:3f:51:80:ea:05:c6:ea:19:bf:aa:e5:
b8:df:78:3f:99:50:4c:e4:7c:82:5b:83:5b:a2:e6:24:d3:a6:
36:12:dd:e4:cd:be:0f:20:78:36:a2:4d:7c:97:b9:18:b0:6f:
3d:21:f5:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:28:24 2025 by rpki-client