Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Z_qsjjBoeR5ivBQpx8DY2ZfExwo.roa
File: Z_qsjjBoeR5ivBQpx8DY2ZfExwo.roa (raw, json)
Hash identifier: QEu2zwh+JWTYsllClp/GCXeP526RJCLPM6eV+WepNCA=
Subject key identifier: 67:FA:AC:8E:30:68:79:1E:62:BC:14:29:C7:C0:D8:D9:97:C4:C7:0A
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0194698E6499331A822211505267498B88F7
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Z_qsjjBoeR5ivBQpx8DY2ZfExwo.roa
Signing time: Wed 15 Jan 2025 10:42:07 +0000
ROA not before: Wed 15 Jan 2025 10:42:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202766
IP address blocks: 45.80.80.0/24 maxlen: 24
45.80.82.0/23 maxlen: 23
45.80.82.0/24 maxlen: 24
45.80.83.0/24 maxlen: 24
45.83.50.0/23 maxlen: 23
45.83.50.0/24 maxlen: 24
45.83.51.0/24 maxlen: 24
80.66.112.0/20 maxlen: 20
80.66.112.0/23 maxlen: 23
80.66.114.0/24 maxlen: 24
80.66.115.0/24 maxlen: 24
80.66.117.0/24 maxlen: 24
80.66.118.0/24 maxlen: 24
80.66.119.0/24 maxlen: 24
80.66.120.0/23 maxlen: 23
80.66.120.0/24 maxlen: 24
80.66.121.0/24 maxlen: 24
80.66.122.0/24 maxlen: 24
80.66.123.0/24 maxlen: 24
80.66.124.0/24 maxlen: 24
80.66.125.0/24 maxlen: 24
80.66.126.0/24 maxlen: 24
80.66.127.0/24 maxlen: 24
89.42.70.0/24 maxlen: 24
89.44.150.0/24 maxlen: 24
89.44.151.0/24 maxlen: 24
91.132.28.0/23 maxlen: 23
91.132.31.0/24 maxlen: 24
94.198.47.0/24 maxlen: 24
178.19.44.0/24 maxlen: 24
178.19.47.0/24 maxlen: 24
185.203.20.0/22 maxlen: 22
185.203.20.0/24 maxlen: 24
185.203.21.0/24 maxlen: 24
185.203.22.0/24 maxlen: 24
185.203.23.0/24 maxlen: 24
185.229.212.0/22 maxlen: 22
185.229.212.0/24 maxlen: 24
185.229.213.0/24 maxlen: 24
185.229.214.0/24 maxlen: 24
185.229.215.0/24 maxlen: 24
185.242.175.0/24 maxlen: 24
193.178.212.0/24 maxlen: 24
193.178.218.0/24 maxlen: 24
193.186.1.0/24 maxlen: 24
193.186.11.0/24 maxlen: 24
194.15.146.0/24 maxlen: 24
194.15.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:69:8e:64:99:33:1a:82:22:11:50:52:67:49:8b:88:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 15 10:42:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67faac8e3068791e62bc1429c7c0d8d997c4c70a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b6:1a:63:8c:ef:74:13:c7:c1:89:59:0f:32:
41:de:2c:ed:4b:1f:a5:d7:b5:2f:52:9a:67:ed:2a:
73:36:80:0e:a3:ae:aa:dc:87:21:2d:0f:3e:7e:d4:
46:e9:1f:f3:94:fa:a9:e7:3b:16:fc:94:61:19:a0:
47:c2:7e:24:af:35:e9:5d:84:3e:c4:b4:a7:a1:45:
46:09:b4:74:ac:db:e8:f0:b0:74:64:dd:21:a9:95:
74:9c:95:a4:cb:33:22:38:41:88:1d:65:51:ff:dc:
31:1a:bf:aa:29:9d:a2:93:8e:28:4f:bf:af:05:fe:
57:a4:d9:e9:55:b7:ad:24:81:38:89:5e:97:c5:e0:
83:2b:2c:35:7d:24:ca:8a:b6:4a:75:c4:8a:be:1d:
24:0e:5d:d5:15:4b:99:6f:d0:02:b6:09:02:a1:87:
03:11:e4:6a:bd:94:f6:04:6f:68:18:0e:96:1c:cf:
54:d4:41:54:77:09:d2:9b:ca:d7:66:5c:fa:6c:a9:
66:36:41:0f:cd:60:c4:b2:83:d4:20:a7:08:8e:08:
12:6a:ca:00:54:06:07:b9:27:bc:ea:c7:c9:d9:b3:
8b:33:7b:d7:fc:92:c1:11:f3:cb:dd:01:26:4a:72:
59:e9:a8:30:a8:07:8b:e7:20:b4:6c:ca:ac:98:63:
58:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:FA:AC:8E:30:68:79:1E:62:BC:14:29:C7:C0:D8:D9:97:C4:C7:0A
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Z_qsjjBoeR5ivBQpx8DY2ZfExwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.80.0/24
45.80.82.0/23
45.83.50.0/23
80.66.112.0/20
89.42.70.0/24
89.44.150.0/23
91.132.28.0/23
91.132.31.0/24
94.198.47.0/24
178.19.44.0/24
178.19.47.0/24
185.203.20.0/22
185.229.212.0/22
185.242.175.0/24
193.178.212.0/24
193.178.218.0/24
193.186.1.0/24
193.186.11.0/24
194.15.146.0/24
194.15.195.0/24
Signature Algorithm: sha256WithRSAEncryption
27:9b:ea:4a:06:09:48:26:9d:42:9c:6a:7c:f8:25:e1:ec:ce:
8b:ad:57:f3:a1:d9:66:d5:4c:a9:c0:02:ed:22:29:ff:69:9d:
05:50:aa:2d:a6:ef:16:ae:26:f5:33:d5:af:a5:a9:3a:9d:29:
f2:bb:ff:81:c5:de:fe:14:ac:ba:ac:7c:a0:53:f8:c9:d6:3e:
5c:18:b1:55:fd:74:ad:fa:ba:1c:de:68:a3:c2:f5:03:78:fa:
ae:82:be:ee:11:74:89:e0:6c:76:b5:27:20:4f:66:cd:8d:9c:
12:e6:c8:a1:12:7a:5a:a0:d3:c8:ba:43:5a:bd:e7:83:85:5f:
50:3b:04:32:0a:82:30:4d:44:2a:6b:77:19:ef:cd:c0:6f:ee:
d7:6e:7a:f3:9b:91:af:de:69:fa:5b:93:95:41:94:44:51:90:
ac:ca:74:55:0c:bd:45:3d:1f:69:a8:2f:3b:ca:92:a8:12:03:
2a:28:ca:14:72:92:ae:9a:4a:00:f9:7e:f3:8b:d0:0c:7e:15:
c3:51:38:70:e1:e9:f0:d6:69:26:49:68:9a:83:2d:45:96:53:
af:27:4a:09:f1:12:f0:c6:da:63:d6:d5:96:f5:cb:83:09:bf:
e0:fe:7c:48:a8:7b:53:ca:9c:77:0f:72:e6:99:7c:f8:37:00:
27:ef:84:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:48:36 2025 by rpki-client