Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/0yys8rp9HbVgpzBIxQ2x-Buj-Ww.roa
File: 0yys8rp9HbVgpzBIxQ2x-Buj-Ww.roa (raw, json)
Hash identifier: DG/bkhdjZGwI6qeVLNx6z8MGt/ytSN/XP++vV/Ik2aY=
Subject key identifier: D3:2C:AC:F2:BA:7D:1D:B5:60:A7:30:48:C5:0D:B1:F8:1B:A3:F9:6C
Certificate issuer: /CN=6647892437160dd5777ed3ed78d49bc72b5e1c5e
Certificate serial: 01915563F484A4A3A92DC7A1AF22009EA47E
Authority key identifier: 66:47:89:24:37:16:0D:D5:77:7E:D3:ED:78:D4:9B:C7:2B:5E:1C:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkeJJDcWDdV3ftPteNSbxyteHF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/0yys8rp9HbVgpzBIxQ2x-Buj-Ww.roa
Signing time: Thu 15 Aug 2024 09:34:59 +0000
ROA not before: Thu 15 Aug 2024 09:34:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2686
IP address blocks: 62.200.0.0/16 maxlen: 16
62.200.0.0/22 maxlen: 22
62.200.9.0/24 maxlen: 24
62.200.132.0/22 maxlen: 22
62.200.136.0/23 maxlen: 23
62.200.168.0/24 maxlen: 24
62.200.226.0/23 maxlen: 23
62.200.232.0/22 maxlen: 22
139.92.0.0/16 maxlen: 16
139.92.51.0/24 maxlen: 24
139.92.52.0/22 maxlen: 22
139.92.128.0/23 maxlen: 23
194.10.0.0/16 maxlen: 16
194.161.154.0/24 maxlen: 24
194.161.200.0/23 maxlen: 23
194.194.0.0/16 maxlen: 16
194.196.0.0/16 maxlen: 16
194.196.12.0/24 maxlen: 24
194.196.14.0/24 maxlen: 24
194.196.23.0/24 maxlen: 24
194.196.49.0/24 maxlen: 24
194.196.127.0/24 maxlen: 24
194.196.130.0/24 maxlen: 24
194.196.139.0/24 maxlen: 24
194.196.144.0/24 maxlen: 24
194.196.149.0/24 maxlen: 24
194.196.155.0/24 maxlen: 24
194.196.197.0/24 maxlen: 24
194.196.239.0/24 maxlen: 24
195.75.0.0/16 maxlen: 16
195.75.11.0/24 maxlen: 24
195.75.14.0/24 maxlen: 24
195.75.22.0/23 maxlen: 23
195.75.74.0/24 maxlen: 24
195.75.144.0/24 maxlen: 24
195.75.145.0/24 maxlen: 24
195.75.146.0/24 maxlen: 24
195.75.150.0/24 maxlen: 24
195.75.210.0/23 maxlen: 23
195.75.250.0/24 maxlen: 24
195.75.252.0/24 maxlen: 24
195.183.0.0/16 maxlen: 16
195.183.8.0/24 maxlen: 24
195.183.128.0/24 maxlen: 24
195.183.136.0/24 maxlen: 24
195.183.141.0/24 maxlen: 24
195.212.0.0/16 maxlen: 16
195.212.63.0/24 maxlen: 24
195.212.103.0/24 maxlen: 24
195.212.117.0/24 maxlen: 24
195.212.120.0/24 maxlen: 24
195.212.136.0/24 maxlen: 24
195.212.168.0/24 maxlen: 24
195.212.169.0/24 maxlen: 24
195.212.178.0/24 maxlen: 24
195.212.196.0/22 maxlen: 22
195.212.206.0/24 maxlen: 24
213.62.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:55:63:f4:84:a4:a3:a9:2d:c7:a1:af:22:00:9e:a4:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6647892437160dd5777ed3ed78d49bc72b5e1c5e
Validity
Not Before: Aug 15 09:34:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d32cacf2ba7d1db560a73048c50db1f81ba3f96c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:06:ca:de:9a:16:6a:fc:66:46:db:fc:8f:75:
7f:12:7d:01:e6:0e:8e:55:55:5c:07:5f:6f:82:c2:
99:ea:6e:f0:a9:46:ca:31:66:5f:31:31:20:07:b1:
d4:48:81:8a:73:0a:5c:81:55:39:f9:ea:34:b9:f5:
fc:2f:6b:0e:64:bb:a1:c9:49:94:5e:09:8c:73:0f:
2c:7d:52:bf:ac:fe:39:2b:df:d8:80:3c:73:24:59:
52:9b:09:bf:e5:8d:b2:cf:e3:ab:ff:d2:98:74:9f:
26:63:64:a1:a9:58:41:e1:91:4e:3e:b6:06:a9:e3:
bf:3f:7b:6f:18:62:e6:c0:85:45:81:3c:39:d3:21:
3e:04:cf:1a:62:3a:f7:02:3f:5b:e6:81:87:86:1b:
f7:67:5a:c6:2c:55:bc:fa:f3:28:b3:2f:05:65:6e:
6c:ac:fb:a1:0f:d8:50:22:2c:79:9f:0e:ba:e2:8e:
4d:d8:42:3e:e9:b5:30:b5:ac:e4:a5:7b:7b:a6:03:
f5:08:00:85:1a:1f:95:b4:f7:97:db:8b:42:be:6b:
d6:05:35:e3:bf:59:6a:e6:ca:26:23:66:2f:f5:6a:
ba:17:e5:3c:9d:68:5c:49:5b:9b:e4:57:49:9b:bd:
ac:71:91:b0:3c:67:a9:69:e0:d0:4f:8f:7e:7e:42:
97:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:2C:AC:F2:BA:7D:1D:B5:60:A7:30:48:C5:0D:B1:F8:1B:A3:F9:6C
X509v3 Authority Key Identifier:
keyid:66:47:89:24:37:16:0D:D5:77:7E:D3:ED:78:D4:9B:C7:2B:5E:1C:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkeJJDcWDdV3ftPteNSbxyteHF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/0yys8rp9HbVgpzBIxQ2x-Buj-Ww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/ZkeJJDcWDdV3ftPteNSbxyteHF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.200.0.0/16
139.92.0.0/16
194.10.0.0/16
194.161.154.0/24
194.161.200.0/23
194.194.0.0/16
194.196.0.0/16
195.75.0.0/16
195.183.0.0/16
195.212.0.0/16
213.62.0.0/16
Signature Algorithm: sha256WithRSAEncryption
30:0a:b3:aa:a9:24:0c:65:97:bf:76:1f:eb:0e:85:d8:5b:61:
18:b4:11:75:59:91:ed:6f:9b:39:c8:61:3d:03:99:6f:9e:88:
6a:c1:f4:08:ed:93:31:d3:30:a1:d9:01:a9:6b:ca:45:13:a4:
c0:46:19:d0:66:82:71:bf:ed:55:d6:03:06:8e:4b:1b:94:e9:
6f:16:71:46:a5:73:a1:25:52:bb:f8:18:f1:d7:91:88:d2:80:
b3:b2:19:bf:a1:5b:b6:6f:7d:ea:eb:b4:91:77:ed:7e:fa:b7:
5a:ce:cd:90:50:c1:bb:ec:bc:ad:bf:fe:51:06:8d:fe:43:89:
20:76:17:5b:25:c2:39:87:8a:77:6c:ed:8b:86:b2:1c:9e:66:
8b:52:7c:4a:48:4c:81:b5:64:a4:1f:61:f2:06:29:ef:55:5a:
c2:47:91:2c:4e:fa:22:2a:84:f7:88:bf:d3:27:a1:e6:b3:37:
6c:33:0b:b4:2d:12:72:28:87:87:f3:a4:2f:78:a4:60:5f:ed:
03:60:20:b9:41:3d:18:05:d6:c0:ac:58:f9:9d:ce:61:36:ed:
83:80:a4:37:f4:2e:24:cd:cc:57:f5:63:c7:04:ca:23:4b:e3:
21:bf:c7:48:74:b0:69:c7:27:93:51:41:94:eb:f0:d4:33:01:
49:34:e7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 15 16:42:32 2024 by rpki-client on console-fra.rpki-client.org