Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/z80MVwRUXWgMDbcJ_g9xksS0uHs.roa
File: z80MVwRUXWgMDbcJ_g9xksS0uHs.roa (raw, json)
Hash identifier: SUb3bn81u2CP978uSjnzY5A3iGrgJwGR+seJyNzkQWc=
Subject key identifier: CF:CD:0C:57:04:54:5D:68:0C:0D:B7:09:FE:0F:71:92:C4:B4:B8:7B
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 0194266B5B8B3DF37C644C97F47BF9B9D49E
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/z80MVwRUXWgMDbcJ_g9xksS0uHs.roa
Signing time: Thu 02 Jan 2025 09:49:17 +0000
ROA not before: Thu 02 Jan 2025 09:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44247
IP address blocks: 109.160.63.0/24 maxlen: 24
109.160.64.0/22 maxlen: 22
109.160.69.0/24 maxlen: 24
109.160.70.0/24 maxlen: 24
109.160.82.0/23 maxlen: 23
109.160.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:5b:8b:3d:f3:7c:64:4c:97:f4:7b:f9:b9:d4:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Jan 2 09:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cfcd0c5704545d680c0db709fe0f7192c4b4b87b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:35:86:05:51:2a:a2:e1:d6:5e:f7:cd:8a:9f:
a7:14:94:bb:ce:33:f9:94:74:e8:ce:1b:15:2f:c7:
8a:f2:99:57:8d:f0:3f:5b:c7:0e:09:9a:a9:85:18:
34:76:f5:48:b4:8d:0d:ba:44:71:1b:49:5b:dc:03:
66:a3:86:5e:4b:ad:a7:97:c5:1b:8e:f6:bd:08:58:
eb:9b:36:ec:4f:d8:fc:29:60:38:31:32:c9:8e:81:
b6:92:0c:0a:f5:6a:5e:d0:3a:9e:d2:af:27:f2:fe:
8a:d1:0c:93:46:d0:9e:3b:c3:cd:6d:85:4e:e5:3e:
8d:db:2e:9e:c5:ff:77:60:9e:58:a9:9b:ad:9a:5e:
81:04:37:0f:ca:af:c3:a4:0b:9b:33:64:e9:5a:12:
67:45:f8:8f:f2:a0:ab:1d:97:6c:37:6f:bb:0b:f1:
ad:a9:a2:ca:29:51:e7:90:ab:ff:fa:d7:39:55:a6:
aa:20:0e:8f:4f:80:fa:a4:6a:75:87:5c:23:de:93:
2c:8c:76:9b:c1:51:56:9b:dd:a6:02:4e:56:0f:20:
01:6a:2d:f4:1b:11:45:6c:ae:7b:5b:b9:4f:ce:e9:
32:36:1c:6c:e1:90:fa:1b:8d:22:e0:09:54:61:bd:
84:2a:0a:8f:22:de:cb:1a:1c:8a:79:bd:0d:8e:3d:
73:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:CD:0C:57:04:54:5D:68:0C:0D:B7:09:FE:0F:71:92:C4:B4:B8:7B
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/z80MVwRUXWgMDbcJ_g9xksS0uHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.160.63.0-109.160.67.255
109.160.69.0-109.160.70.255
109.160.82.0-109.160.84.255
Signature Algorithm: sha256WithRSAEncryption
47:f2:7c:6c:3a:cb:fa:90:82:34:3d:fa:35:09:ef:b9:46:5c:
94:ac:c3:89:be:89:ad:8a:d7:98:8e:d6:d1:49:89:1d:b4:5b:
79:6d:3b:18:a5:07:45:12:48:68:c6:3b:c9:73:51:ea:36:62:
78:71:cb:d3:e4:71:90:4f:8f:f9:45:66:8d:53:30:68:c7:3b:
d1:60:e4:1c:5b:2a:db:53:e6:80:79:60:ff:78:6d:34:ee:69:
92:84:91:5b:45:3b:bb:4e:4a:22:01:a2:c2:46:26:04:31:57:
e2:11:e7:07:0d:95:b1:ad:ff:25:e2:7f:6e:32:91:b1:39:62:
1d:ba:20:c1:c9:87:69:e8:db:91:fb:56:58:a9:85:c4:03:e7:
33:bb:66:1a:5f:dc:33:f7:05:a6:fb:d0:c7:6f:3d:03:7b:bc:
da:24:af:25:52:fc:57:41:cf:90:d6:e6:5a:5b:c5:6a:03:0d:
6e:64:64:a8:e6:76:c9:d2:84:20:8b:79:05:ad:10:90:b1:d6:
7b:01:7b:2c:06:fc:83:a1:f3:6e:35:64:c9:33:e4:f0:90:0a:
bb:d4:a0:26:40:e7:e3:b4:57:56:0d:9d:65:a9:e9:46:4e:72:
db:32:65:96:0a:0c:27:94:be:c0:8b:26:92:39:f5:91:8e:62:
23:b3:87:a2
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZQma1uLPfN8ZEyX9Hv5udSeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMmE4YzFkMzExODk1MDE2MTA4ZmZiZDE0NTc1Yzc3Y2My
ODc3M2EwHhcNMjUwMTAyMDk0OTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZmNkMGM1NzA0NTQ1ZDY4MGMwZGI3MDlmZTBmNzE5MmM0YjRiODdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTWGBVEqouHWXvfNip+nFJS7zjP5
lHTozhsVL8eK8plXjfA/W8cOCZqphRg0dvVItI0NukRxG0lb3ANmo4ZeS62nl8Ub
jva9CFjrmzbsT9j8KWA4MTLJjoG2kgwK9Wpe0Dqe0q8n8v6K0QyTRtCeO8PNbYVO
5T6N2y6exf93YJ5YqZutml6BBDcPyq/DpAubM2TpWhJnRfiP8qCrHZdsN2+7C/Gt
qaLKKVHnkKv/+tc5VaaqIA6PT4D6pGp1h1wj3pMsjHabwVFWm92mAk5WDyABai30
GxFFbK57W7lPzukyNhxs4ZD6G40i4AlUYb2EKgqPIt7LGhyKeb0Njj1zywIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFM/NDFcEVF1oDA23Cf4PcZLEtLh7MB8GA1UdIwQY
MBaAFHIqjB0xGJUBYQj/vRRXXHfMKHc6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYt
YTU1OGVlNjU0MzFmLzEvejgwTVZ3UlVYV2dNRGJjSl9nOXhrc1MwdUhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYtYTU1OGVlNjU0MzFm
LzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqMAwDBABtoD8D
BAJtoEAwDAMEAG2gRQMEAG2gRjAMAwQBbaBSAwQAbaBUMA0GCSqGSIb3DQEBCwUA
A4IBAQBH8nxsOsv6kII0Pfo1Ce+5RlyUrMOJvomtiteYjtbRSYkdtFt5bTsYpQdF
EkhoxjvJc1HqNmJ4ccvT5HGQT4/5RWaNUzBoxzvRYOQcWyrbU+aAeWD/eG007mmS
hJFbRTu7TkoiAaLCRiYEMVfiEecHDZWxrf8l4n9uMpGxOWIduiDByYdp6NuR+1ZY
qYXEA+czu2YaX9wz9wWm+9DHbz0De7zaJK8lUvxXQc+Q1uZaW8VqAw1uZGSo5nbJ
0oQgi3kFrRCQsdZ7AXssBvyDofNuNWTJM+TwkAq71KAmQOfjtFdWDZ1lqelGTnLb
MmWWCgwnlL7AiyaSOfWRjmIjs4ei
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:04:47 2025 by rpki-client