Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/ZA2eo4PhOO6YarPBjFuZYerlXM8.roa
File: ZA2eo4PhOO6YarPBjFuZYerlXM8.roa (raw, json)
Hash identifier: OaUR9ntwZSMTqF4rae/f45ntDF7DCdGD74N9a3x5n8s=
Subject key identifier: 64:0D:9E:A3:83:E1:38:EE:98:6A:B3:C1:8C:5B:99:61:EA:E5:5C:CF
Certificate issuer: /CN=bf2805992e6531d3da31ee1af6bcd5c06d02b6ca
Certificate serial: 0194228E08EEE2E29E1C7B66C3EFC759A5A7
Authority key identifier: BF:28:05:99:2E:65:31:D3:DA:31:EE:1A:F6:BC:D5:C0:6D:02:B6:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/ZA2eo4PhOO6YarPBjFuZYerlXM8.roa
Signing time: Wed 01 Jan 2025 15:48:41 +0000
ROA not before: Wed 01 Jan 2025 15:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13189
IP address blocks: 62.101.32.0/21 maxlen: 21
62.101.40.0/22 maxlen: 22
62.101.44.0/22 maxlen: 22
62.101.48.0/22 maxlen: 22
62.101.56.0/21 maxlen: 21
83.172.64.0/19 maxlen: 19
83.172.96.0/19 maxlen: 19
95.140.176.0/20 maxlen: 20
185.94.72.0/22 maxlen: 22
212.112.32.0/19 maxlen: 19
2001:be8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:08:ee:e2:e2:9e:1c:7b:66:c3:ef:c7:59:a5:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf2805992e6531d3da31ee1af6bcd5c06d02b6ca
Validity
Not Before: Jan 1 15:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=640d9ea383e138ee986ab3c18c5b9961eae55ccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3d:39:e0:4a:3a:7a:ba:43:d4:32:f3:ec:31:
e7:2b:59:72:2f:0d:16:75:29:7f:5d:51:9d:b1:bf:
f1:91:58:c6:df:39:e8:f2:d9:56:a5:97:1e:88:39:
9b:ad:c4:fe:13:42:0f:25:79:b3:55:81:96:93:02:
73:f9:49:85:e5:f3:7a:67:5f:32:3b:ff:97:f6:cc:
57:8f:ef:21:44:ba:be:df:0a:ce:33:d5:92:05:43:
aa:53:fd:e8:3d:31:6a:0d:ab:4f:08:67:b2:6e:98:
57:e5:6a:bd:6c:43:89:7f:95:e4:1e:14:df:67:75:
ce:d4:ab:61:23:35:c8:9e:7c:ad:fe:19:8e:26:9f:
aa:eb:eb:71:e8:52:c3:8d:95:2f:7a:ce:42:b6:2e:
20:14:43:70:c0:71:06:4b:e9:ab:e1:9d:7b:3a:b4:
de:55:1e:82:60:97:21:e6:86:c2:3c:b3:f2:3b:da:
59:d3:3b:87:a0:5a:59:ab:50:48:ed:c1:ed:3f:e3:
ad:5b:4b:5b:2b:f9:c4:78:7b:c5:ec:29:e4:95:c2:
87:04:38:5d:0b:62:b6:be:ef:e8:42:2c:78:99:e5:
e4:69:b9:76:d1:5f:bf:0b:1f:10:48:8d:1d:36:af:
45:05:98:ee:a5:7d:91:cc:66:98:80:a8:33:39:60:
35:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:0D:9E:A3:83:E1:38:EE:98:6A:B3:C1:8C:5B:99:61:EA:E5:5C:CF
X509v3 Authority Key Identifier:
keyid:BF:28:05:99:2E:65:31:D3:DA:31:EE:1A:F6:BC:D5:C0:6D:02:B6:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/ZA2eo4PhOO6YarPBjFuZYerlXM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.101.32.0-62.101.51.255
62.101.56.0/21
83.172.64.0/18
95.140.176.0/20
185.94.72.0/22
212.112.32.0/19
IPv6:
2001:be8::/32
Signature Algorithm: sha256WithRSAEncryption
8e:1e:68:3a:50:9c:02:92:71:d0:6d:a3:d6:d5:39:2f:ab:a2:
99:47:0d:7a:7d:3f:08:45:e1:15:f9:e4:b8:06:b1:97:fa:f8:
57:82:87:a8:23:8e:01:19:88:9c:82:6a:87:ab:5b:be:df:b5:
40:ae:5e:0d:e4:df:c6:33:28:41:63:fd:66:27:86:f5:e8:27:
4c:5b:2b:7a:4f:68:80:af:fd:1f:53:e4:1a:37:76:ec:63:6d:
11:a5:3d:4a:56:fb:7f:0f:91:c5:e2:28:ae:40:7a:9d:93:f5:
f4:a7:1d:c9:d3:c6:35:70:c5:0b:d1:3d:e2:37:e8:2f:14:b1:
2a:71:68:6c:41:6f:74:bc:42:0e:52:e4:33:1f:f7:79:50:b3:
de:4b:b4:47:5e:b2:55:7c:43:3f:85:6b:e2:e7:f2:a8:f3:be:
c0:ea:e3:a2:87:a8:4d:59:42:1e:86:d8:66:94:dc:ae:35:43:
80:3c:a6:bd:5e:1a:1f:37:14:d0:30:66:e9:4d:e8:cb:80:24:
d1:d8:de:de:8f:3f:d2:41:99:04:ef:6f:0f:96:9d:8b:49:f7:
1d:e8:ac:dd:ba:c2:a7:5a:f3:80:fd:47:bd:d0:5b:11:7a:f4:
25:23:03:39:f2:ba:39:f8:92:a7:db:f0:f4:bc:e8:0a:4c:ca:
b6:12:b7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:56:28 2025 by rpki-client