Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/ZsqXkleHUtBxCBDnh-JpVGyEcZs.roa
File: ZsqXkleHUtBxCBDnh-JpVGyEcZs.roa (raw, json)
Hash identifier: /AufRAQBSivL0rxC2XLhzAzSy/N1qYvVGVksj/eRNLg=
Subject key identifier: 66:CA:97:92:57:87:52:D0:71:08:10:E7:87:E2:69:54:6C:84:71:9B
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019097930B2E089732B64916191F451A61DA
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/ZsqXkleHUtBxCBDnh-JpVGyEcZs.roa
Signing time: Tue 09 Jul 2024 12:58:34 +0000
ROA not before: Tue 09 Jul 2024 12:58:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7342
IP address blocks: 81.19.192.0/24 maxlen: 24
81.19.193.0/24 maxlen: 24
81.19.196.0/24 maxlen: 24
81.19.197.0/24 maxlen: 24
81.19.198.0/24 maxlen: 24
81.19.199.0/24 maxlen: 24
81.19.200.0/24 maxlen: 24
81.19.201.0/24 maxlen: 24
81.19.202.0/24 maxlen: 24
81.19.203.0/24 maxlen: 24
81.19.204.0/24 maxlen: 24
81.19.205.0/24 maxlen: 24
81.19.206.0/24 maxlen: 24
81.19.207.0/24 maxlen: 24
185.100.3.0/24 maxlen: 24
193.109.220.0/24 maxlen: 24
194.110.75.0/24 maxlen: 24
217.30.80.0/24 maxlen: 24
217.30.80.7/32 maxlen: 32
217.30.81.0/24 maxlen: 24
217.30.82.0/24 maxlen: 24
217.30.83.0/24 maxlen: 24
217.30.84.0/24 maxlen: 24
217.30.85.0/24 maxlen: 24
217.30.87.0/24 maxlen: 24
217.30.92.0/24 maxlen: 24
217.30.94.0/24 maxlen: 24
217.30.95.0/24 maxlen: 24
2a10:eec0::/48 maxlen: 48
2a10:eec0:1::/48 maxlen: 48
2a10:eec0:2::/48 maxlen: 48
2a10:eec0:2::7/128 maxlen: 128
2a10:eec0:3::/48 maxlen: 48
2a10:eec0:4::/48 maxlen: 48
2a10:eec0:5::/48 maxlen: 48
2a10:eec0:6::/48 maxlen: 48
2a10:eec0:7::/48 maxlen: 48
2a10:eec0:8::/48 maxlen: 48
2a10:eec0:9::/48 maxlen: 48
2a10:eec0:a::/48 maxlen: 48
2a10:eec0:c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:97:93:0b:2e:08:97:32:b6:49:16:19:1f:45:1a:61:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jul 9 12:58:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66ca9792578752d0710810e787e269546c84719b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:73:74:c5:bb:73:fa:36:55:cb:01:f6:40:0d:
1c:e8:3f:6a:17:b9:19:ea:e3:30:7c:c2:94:0c:38:
37:0f:29:bf:71:c4:33:1b:00:fa:ef:04:66:f7:59:
5d:eb:75:7b:ca:02:df:fb:82:fb:89:c5:af:f8:e8:
10:75:d5:58:0c:b7:7d:95:7c:95:e0:81:9b:b1:3d:
04:d9:49:fd:dc:f7:12:0d:ef:c9:6c:00:7f:a9:ee:
9a:52:32:c9:10:5e:e7:f8:ab:ce:08:f3:6d:49:bc:
de:d1:28:5d:56:3b:1c:2f:7e:aa:ba:58:f6:e7:95:
63:9b:87:58:3b:aa:4c:53:59:d8:20:a3:80:67:c6:
e2:96:2e:b5:5b:49:7c:82:f6:09:dd:b8:0b:33:c0:
8f:ef:d0:07:ab:15:d8:46:8d:20:21:84:27:b8:47:
64:c5:06:86:f2:7b:33:99:13:23:03:f7:74:1b:32:
e8:99:06:9b:b1:a2:b7:0f:df:a8:08:5e:6a:a7:51:
4d:96:e3:79:22:96:3e:f6:fb:a8:27:f4:3b:4c:34:
e4:95:17:6a:c5:14:c4:e9:4f:79:99:d5:30:e0:d3:
24:7b:47:23:03:03:b2:9f:cb:e7:52:ae:b7:bb:f3:
9a:9d:43:8b:86:5e:f3:30:69:b1:01:37:36:03:3b:
74:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:CA:97:92:57:87:52:D0:71:08:10:E7:87:E2:69:54:6C:84:71:9B
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/ZsqXkleHUtBxCBDnh-JpVGyEcZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.192.0/23
81.19.196.0-81.19.207.255
185.100.3.0/24
193.109.220.0/24
194.110.75.0/24
217.30.80.0-217.30.85.255
217.30.87.0/24
217.30.92.0/24
217.30.94.0/23
IPv6:
2a10:eec0::-2a10:eec0:a:ffff:ffff:ffff:ffff:ffff
2a10:eec0:c::/48
Signature Algorithm: sha256WithRSAEncryption
86:ce:96:2c:76:c3:22:fe:0f:7d:b0:97:b9:4b:04:75:2b:7c:
39:7e:7f:5d:26:cf:3b:d1:75:38:fe:f5:81:e5:2f:e4:84:f9:
34:3e:81:4c:8b:da:c5:78:d2:6b:55:4e:66:da:c8:b5:74:5d:
4b:e3:80:f6:b4:41:0e:5c:65:1d:39:21:dc:07:3a:18:9f:f9:
d4:eb:cc:fe:3a:6c:f8:3d:c9:f6:55:2c:44:c1:71:36:76:ba:
60:3a:3f:67:cc:c3:33:ca:05:d7:a5:82:3e:6c:4f:c7:62:19:
6c:3f:e8:e6:17:b0:3a:ed:4a:57:0b:14:db:16:8d:ab:d9:74:
0f:ac:90:9a:89:60:58:36:5d:7e:7e:b3:b6:93:1a:15:fe:35:
c7:6c:62:b1:45:44:e9:9c:9f:05:ae:f0:fc:cd:85:54:9a:a8:
3e:bb:13:aa:21:ec:0a:21:5d:5e:d3:64:7b:10:77:f8:be:f6:
f6:23:54:84:93:2e:68:fe:c8:6e:70:5d:0a:4f:d4:44:a3:cb:
3a:23:ca:59:79:89:b9:d2:d3:9f:e1:27:9c:51:46:ea:ff:0f:
cd:e0:f5:4b:f2:85:7c:63:87:3d:3b:df:cd:d3:e0:de:74:c8:
aa:31:44:63:3e:fe:89:9a:a6:e3:c6:11:d5:95:31:14:2b:85:
cd:c2:4f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:15:04 2025 by rpki-client