Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/7Z7IzpBHNDRFWYLe_OokcTNbBnw.roa
File: 7Z7IzpBHNDRFWYLe_OokcTNbBnw.roa (raw, json)
Hash identifier: 24No6BP2DTZdRjBSm6KFYcGax0GtKenfx9uqKb2W2tw=
Subject key identifier: ED:9E:C8:CE:90:47:34:34:45:59:82:DE:FC:EA:24:71:33:5B:06:7C
Certificate issuer: /CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
Certificate serial: 0194206824BFC9D80AB4F92E494347355DAB
Authority key identifier: 66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/7Z7IzpBHNDRFWYLe_OokcTNbBnw.roa
Signing time: Wed 01 Jan 2025 05:48:03 +0000
ROA not before: Wed 01 Jan 2025 05:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8814
IP address blocks: 80.69.52.0/24 maxlen: 24
80.69.54.0/24 maxlen: 24
80.69.55.0/24 maxlen: 24
80.69.58.0/24 maxlen: 24
80.69.59.0/24 maxlen: 24
80.69.61.0/24 maxlen: 24
80.69.62.0/24 maxlen: 24
80.69.63.0/24 maxlen: 24
91.135.245.0/24 maxlen: 24
91.135.246.0/24 maxlen: 24
91.135.247.0/24 maxlen: 24
91.135.248.0/24 maxlen: 24
91.135.249.0/24 maxlen: 24
91.135.250.0/24 maxlen: 24
91.135.251.0/24 maxlen: 24
91.135.254.0/24 maxlen: 24
91.135.255.0/24 maxlen: 24
92.39.88.0/24 maxlen: 24
92.39.89.0/24 maxlen: 24
92.39.95.0/24 maxlen: 24
158.181.32.0/24 maxlen: 24
158.181.33.0/24 maxlen: 24
158.181.35.0/24 maxlen: 24
158.181.36.0/24 maxlen: 24
158.181.40.0/22 maxlen: 22
158.181.44.0/22 maxlen: 22
212.47.128.0/22 maxlen: 22
212.47.132.0/22 maxlen: 22
212.47.136.0/22 maxlen: 22
212.47.140.0/22 maxlen: 22
212.47.144.0/22 maxlen: 22
212.47.148.0/22 maxlen: 22
212.47.152.0/24 maxlen: 24
212.47.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:24:bf:c9:d8:0a:b4:f9:2e:49:43:47:35:5d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
Validity
Not Before: Jan 1 05:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed9ec8ce90473434455982defcea2471335b067c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:96:f2:02:fc:ed:26:a3:ea:b8:a4:83:e3:f5:
bf:c8:cc:45:72:df:26:ae:13:1a:8f:61:e4:b7:98:
55:b8:e2:c2:79:95:56:7f:29:b8:a0:4f:b4:02:3e:
9e:5d:2d:e0:1c:af:a9:6a:03:8e:c0:f5:9b:b8:0d:
d2:8c:e7:94:ac:e0:3c:c9:94:3b:18:76:65:59:b1:
ae:a3:73:87:43:60:a5:22:5a:1c:c9:b4:13:ba:6d:
ed:8c:0a:a4:5e:2b:66:fd:b5:1c:67:ee:d6:1c:3b:
0f:11:9b:b7:f6:54:5f:78:b6:e2:89:5f:61:f1:42:
5d:44:eb:70:ab:bd:9f:d6:d3:14:9d:bd:d8:7a:fd:
ba:8a:a7:98:4e:f5:73:8e:b5:17:42:d5:d0:64:ac:
29:e6:1d:ec:d9:0e:dd:5f:03:4e:26:91:5f:78:97:
bc:ae:64:de:c5:a7:b6:b5:0c:3b:67:7f:dd:71:d9:
89:35:dc:02:fb:1d:09:b6:3b:60:19:9c:26:44:40:
e0:8a:03:11:e8:b8:ee:7b:c3:5d:b8:80:b6:fd:86:
cf:cf:15:1b:26:85:bf:f5:6c:88:9b:28:b1:b7:f8:
67:c2:4a:8c:df:39:1d:e8:36:fb:c8:6d:e3:07:ec:
eb:5a:61:6b:c8:86:a6:ac:8a:5f:97:6d:0c:e1:e0:
29:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:9E:C8:CE:90:47:34:34:45:59:82:DE:FC:EA:24:71:33:5B:06:7C
X509v3 Authority Key Identifier:
keyid:66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/7Z7IzpBHNDRFWYLe_OokcTNbBnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.69.52.0/24
80.69.54.0/23
80.69.58.0/23
80.69.61.0-80.69.63.255
91.135.245.0-91.135.251.255
91.135.254.0/23
92.39.88.0/23
92.39.95.0/24
158.181.32.0/23
158.181.35.0-158.181.36.255
158.181.40.0/21
212.47.128.0-212.47.152.255
212.47.159.0/24
Signature Algorithm: sha256WithRSAEncryption
01:af:59:79:6c:79:b4:3c:5a:32:c1:bb:c3:af:19:64:c8:19:
8d:e1:06:37:c3:d9:f7:86:ab:25:66:f5:c2:3e:a9:47:d9:21:
8b:1a:50:be:0e:c5:eb:a5:b3:96:f5:d3:ef:d3:e6:de:6a:f0:
b1:03:7b:aa:82:69:75:7d:4e:f3:aa:5e:5f:36:3a:4e:24:b3:
78:52:98:dd:d6:2d:28:37:fd:4a:6a:16:58:03:43:d1:61:30:
db:11:31:6f:27:fb:15:fa:22:c4:cd:a7:d1:02:63:4b:3a:03:
2b:13:53:ba:0f:5a:62:9b:65:22:ea:cb:6b:77:77:d7:4d:2c:
d4:13:42:b8:09:1b:c9:2c:55:7d:78:70:cc:be:be:38:ff:d8:
65:3e:3c:68:db:48:3c:cd:96:b7:a6:87:ec:ad:15:17:40:4a:
9f:29:0e:7d:f5:57:0a:e4:d5:f3:56:91:23:07:a7:bb:cf:dc:
6a:1c:37:0e:59:23:93:3a:62:36:f7:f5:3b:dc:b5:7b:f5:0a:
73:5e:0a:18:80:c1:7a:b7:d7:d6:54:43:f1:e1:34:7e:a7:49:
dd:73:30:8b:80:bb:86:00:d3:69:99:f8:c1:e7:fd:94:23:06:
9f:95:75:13:ee:13:c2:70:ea:3e:84:d6:57:eb:80:bf:5b:f8:
c5:2f:24:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:40:54 2025 by rpki-client