Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/zuoKD31gcVRQUR2NG9ebmxdQlUY.roa
File: zuoKD31gcVRQUR2NG9ebmxdQlUY.roa (raw, json)
Hash identifier: 6Yq+wArquNdBN7wmHKv+2fAgO8zmiD+Zj0gA9mY9jzw=
Subject key identifier: CE:EA:0A:0F:7D:60:71:54:50:51:1D:8D:1B:D7:9B:9B:17:50:95:46
Certificate issuer: /CN=07560e3e72c6079a04e7d1f6103b9df78979a522
Certificate serial: 019423D7F6E6FA706263635A00C55F490015
Authority key identifier: 07:56:0E:3E:72:C6:07:9A:04:E7:D1:F6:10:3B:9D:F7:89:79:A5:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/zuoKD31gcVRQUR2NG9ebmxdQlUY.roa
Signing time: Wed 01 Jan 2025 21:49:03 +0000
ROA not before: Wed 01 Jan 2025 21:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49635
IP address blocks: 27.0.172.0/22 maxlen: 24
46.183.112.0/21 maxlen: 24
79.143.88.0/21 maxlen: 24
80.240.126.0/23 maxlen: 24
85.208.20.0/22 maxlen: 24
93.189.88.0/21 maxlen: 24
103.23.60.0/23 maxlen: 24
161.22.40.0/21 maxlen: 24
185.166.212.0/22 maxlen: 24
185.253.152.0/22 maxlen: 24
185.254.204.0/22 maxlen: 24
187.33.144.0/20 maxlen: 24
200.234.224.0/20 maxlen: 24
217.71.200.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:f6:e6:fa:70:62:63:63:5a:00:c5:5f:49:00:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07560e3e72c6079a04e7d1f6103b9df78979a522
Validity
Not Before: Jan 1 21:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ceea0a0f7d60715450511d8d1bd79b9b17509546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4b:4e:83:53:c4:a7:2c:8c:62:d6:15:da:3e:
43:23:1d:29:ee:fc:1e:e0:ef:52:92:94:ce:1f:b4:
9a:84:ba:f8:d4:66:48:46:23:ea:99:7c:f3:db:f2:
fa:86:2e:23:f4:8e:23:21:ea:6c:28:af:d0:95:97:
79:89:66:d9:e9:77:e7:53:85:05:fc:a2:13:50:b3:
c8:45:dd:b4:e2:00:29:12:f4:ea:db:c1:64:ae:4c:
ce:16:47:51:17:30:25:08:13:4f:9a:0d:e5:5d:d1:
76:c0:72:69:56:ef:24:49:28:15:35:7c:ab:db:5b:
cc:37:a3:b0:9a:82:cf:44:39:49:bb:d1:26:8d:22:
61:62:19:31:c4:ff:17:09:77:e6:50:70:88:c2:73:
b5:93:85:04:9d:0e:94:23:76:4f:77:42:63:9a:44:
37:b4:86:2c:5e:f6:96:c4:80:21:09:3d:28:8c:e2:
5b:40:93:ca:74:04:2e:97:00:71:5f:f9:68:85:60:
cc:b3:00:b6:9f:42:a2:ca:57:65:97:e7:87:4a:6d:
d3:f1:5c:10:4c:84:c0:c7:7f:eb:27:b0:a6:ce:68:
ef:55:98:e7:09:60:8f:bc:82:c0:23:8f:9e:27:a6:
23:f2:b8:f3:d0:e4:c7:db:ee:ac:68:22:f1:a9:67:
31:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:EA:0A:0F:7D:60:71:54:50:51:1D:8D:1B:D7:9B:9B:17:50:95:46
X509v3 Authority Key Identifier:
keyid:07:56:0E:3E:72:C6:07:9A:04:E7:D1:F6:10:3B:9D:F7:89:79:A5:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/zuoKD31gcVRQUR2NG9ebmxdQlUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.0.172.0/22
46.183.112.0/21
79.143.88.0/21
80.240.126.0/23
85.208.20.0/22
93.189.88.0/21
103.23.60.0/23
161.22.40.0/21
185.166.212.0/22
185.253.152.0/22
185.254.204.0/22
187.33.144.0/20
200.234.224.0/20
217.71.200.0/21
Signature Algorithm: sha256WithRSAEncryption
83:dd:aa:ee:8d:76:f2:e6:8c:e9:e7:88:bc:80:ea:27:6b:27:
6e:22:ec:1d:3c:3f:fb:1e:fe:d0:c4:44:7e:0c:8d:08:6d:8c:
0e:ae:b2:9c:2b:5e:0b:30:83:ff:f8:57:f8:68:19:4e:95:ba:
54:f6:c7:f3:f6:ec:c9:64:03:fa:7d:c9:c6:3b:b4:99:5d:cd:
7c:65:1f:d5:26:5f:64:63:ff:36:cc:1a:e6:52:8b:24:ec:7e:
38:34:e4:ac:2d:69:cf:ab:38:f1:47:d5:6c:fc:5c:51:10:9b:
b6:32:bb:43:0b:78:e4:1e:83:99:ce:9d:85:d0:ba:f7:d5:3a:
2c:20:15:64:e2:a5:6c:38:57:06:a8:94:76:68:63:d4:fa:12:
ed:62:09:45:a1:d2:70:4c:7d:dd:7d:16:55:87:f4:52:dc:b3:
b9:c9:48:70:bc:3f:8c:aa:bc:c9:df:21:31:ff:20:a1:2d:cf:
e7:4c:a5:31:65:db:c6:65:ff:67:20:1c:11:d7:92:81:f7:76:
ca:5d:7e:e1:10:d1:cd:c4:fe:ee:ba:26:f6:f0:78:1e:7f:30:
08:12:f8:d0:75:09:5f:f8:a2:d2:b4:57:31:ee:80:23:a2:1a:
a1:cc:52:58:0e:09:55:cc:23:67:19:72:0c:e7:c5:f0:e2:c0:
56:c1:30:3a
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgISAZQj1/bm+nBiY2NaAMVfSQAVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NTYwZTNlNzJjNjA3OWEwNGU3ZDFmNjEwM2I5ZGY3ODk3
OWE1MjIwHhcNMjUwMTAxMjE0OTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZWVhMGEwZjdkNjA3MTU0NTA1MTFkOGQxYmQ3OWI5YjE3NTA5NTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEtOg1PEpyyMYtYV2j5DIx0p7vwe
4O9SkpTOH7SahLr41GZIRiPqmXzz2/L6hi4j9I4jIepsKK/QlZd5iWbZ6XfnU4UF
/KITULPIRd204gApEvTq28FkrkzOFkdRFzAlCBNPmg3lXdF2wHJpVu8kSSgVNXyr
21vMN6OwmoLPRDlJu9EmjSJhYhkxxP8XCXfmUHCIwnO1k4UEnQ6UI3ZPd0JjmkQ3
tIYsXvaWxIAhCT0ojOJbQJPKdAQulwBxX/lohWDMswC2n0Kiyldll+eHSm3T8VwQ
TITAx3/rJ7CmzmjvVZjnCWCPvILAI4+eJ6Yj8rjz0OTH2+6saCLxqWcx7QIDAQAB
o4ICVzCCAlMwHQYDVR0OBBYEFM7qCg99YHFUUFEdjRvXm5sXUJVGMB8GA1UdIwQY
MBaAFAdWDj5yxgeaBOfR9hA7nfeJeaUiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjFZT1BuTEdCNW9FNTlIMkVEdWQ5NGw1cFNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8wNjk5OGQtOGNkOS00OTkzLTlmZTct
ODIyMWQyMTQzNzk2LzEvenVvS0QzMWdjVlJRVVIyTkc5ZWJteGRRbFVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8wNjk5OGQtOGNkOS00OTkzLTlmZTctODIyMWQyMTQzNzk2
LzEvQjFZT1BuTEdCNW9FNTlIMkVEdWQ5NGw1cFNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQCGwCsAwQD
LrdwAwQDT49YAwQBUPB+AwQCVdAUAwQDXb1YAwQBZxc8AwQDoRYoAwQCuabUAwQC
uf2YAwQCuf7MAwQEuyGQAwQEyOrgAwQD2UfIMA0GCSqGSIb3DQEBCwUAA4IBAQCD
3arujXby5ozp54i8gOonayduIuwdPD/7Hv7QxER+DI0IbYwOrrKcK14LMIP/+Ff4
aBlOlbpU9sfz9uzJZAP6fcnGO7SZXc18ZR/VJl9kY/82zBrmUosk7H44NOSsLWnP
qzjxR9Vs/FxREJu2MrtDC3jkHoOZzp2F0Lr31TosIBVk4qVsOFcGqJR2aGPU+hLt
YglFodJwTH3dfRZVh/RS3LO5yUhwvD+MqrzJ3yEx/yChLc/nTKUxZdvGZf9nIBwR
15KB93bKXX7hENHNxP7uuib28HgefzAIEvjQdQlf+KLStFcx7oAjohqhzFJYDglV
zCNnGXIM58Xw4sBWwTA6
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:14:15 2025 by rpki-client