Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/ZT9B9tNXRU8FWuertgPw13h16Xk.roa
File: ZT9B9tNXRU8FWuertgPw13h16Xk.roa (raw, json)
Hash identifier: 6Xo+gMjKVgARvSeIM+HakBpfnwiy5S2ZtZ1dnsf1HiU=
Subject key identifier: 65:3F:41:F6:D3:57:45:4F:05:5A:E7:AB:B6:03:F0:D7:78:75:E9:79
Certificate issuer: /CN=69507f066f2bb0389dd88436074e1426114f2d92
Certificate serial: 0194252238DBDB7ECC423777D9E424F3C49D
Authority key identifier: 69:50:7F:06:6F:2B:B0:38:9D:D8:84:36:07:4E:14:26:11:4F:2D:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/ZT9B9tNXRU8FWuertgPw13h16Xk.roa
Signing time: Thu 02 Jan 2025 03:49:47 +0000
ROA not before: Thu 02 Jan 2025 03:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216139
IP address blocks: 2.56.90.0/24 maxlen: 24
46.30.40.0/24 maxlen: 24
46.30.41.0/24 maxlen: 24
46.30.42.0/24 maxlen: 24
46.30.43.0/24 maxlen: 24
46.30.44.0/24 maxlen: 24
46.30.45.0/24 maxlen: 24
46.30.46.0/24 maxlen: 24
46.30.47.0/24 maxlen: 24
95.142.32.0/24 maxlen: 24
95.142.41.0/24 maxlen: 24
109.234.32.0/24 maxlen: 24
178.208.64.0/24 maxlen: 24
178.208.65.0/24 maxlen: 24
178.208.66.0/24 maxlen: 24
178.208.67.0/24 maxlen: 24
178.208.72.0/24 maxlen: 24
178.208.73.0/24 maxlen: 24
178.208.74.0/24 maxlen: 24
178.208.75.0/24 maxlen: 24
178.208.76.0/24 maxlen: 24
178.208.77.0/24 maxlen: 24
178.208.78.0/24 maxlen: 24
178.208.79.0/24 maxlen: 24
178.208.80.0/24 maxlen: 24
178.208.81.0/24 maxlen: 24
178.208.82.0/24 maxlen: 24
178.208.83.0/24 maxlen: 24
178.208.84.0/24 maxlen: 24
178.208.85.0/24 maxlen: 24
178.208.86.0/24 maxlen: 24
178.208.88.0/24 maxlen: 24
178.208.89.0/24 maxlen: 24
178.208.90.0/24 maxlen: 24
178.208.91.0/24 maxlen: 24
178.208.93.0/24 maxlen: 24
185.105.108.0/24 maxlen: 24
2a09:c140:feed::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:38:db:db:7e:cc:42:37:77:d9:e4:24:f3:c4:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69507f066f2bb0389dd88436074e1426114f2d92
Validity
Not Before: Jan 2 03:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=653f41f6d357454f055ae7abb603f0d77875e979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:20:04:a0:e8:81:40:87:83:33:af:fc:66:26:
18:1a:87:84:79:f0:31:db:8a:99:a0:b1:8c:01:13:
a3:b7:c1:01:bc:84:54:d6:9f:44:c5:d3:23:db:e3:
ce:8b:66:33:5c:01:2f:40:23:c3:35:dc:cb:28:ae:
8e:d5:a9:ce:be:43:6a:11:2f:9f:6a:7c:e1:99:bc:
4b:d1:7f:61:3e:54:08:8a:b7:5a:a0:6d:2a:65:27:
54:3c:5c:8f:54:49:fd:53:79:43:af:2f:45:16:e2:
42:d7:5a:25:36:77:db:1a:36:8d:22:fc:76:69:32:
6d:47:2a:eb:65:78:fd:d6:fe:c0:b6:f5:88:85:a8:
a4:c7:ae:60:32:7a:10:15:c0:e7:81:91:ab:59:ed:
11:7e:d5:aa:53:fa:b2:41:25:2d:ec:55:9f:c5:d7:
bc:2b:48:fe:f5:39:f5:e6:ab:95:9b:f1:9f:76:19:
35:a7:57:71:1a:65:b6:18:8e:7a:9e:ba:6b:96:1e:
4a:57:f9:0c:b7:69:a5:2f:d7:a9:32:2f:d4:5d:58:
b2:f3:40:b7:1c:46:82:30:ce:a8:09:3b:b3:43:13:
62:ae:4b:e0:e7:59:55:48:d7:a1:da:f0:f6:14:eb:
99:15:8a:86:92:81:c7:5e:fa:3a:01:eb:1a:00:9f:
1a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:3F:41:F6:D3:57:45:4F:05:5A:E7:AB:B6:03:F0:D7:78:75:E9:79
X509v3 Authority Key Identifier:
keyid:69:50:7F:06:6F:2B:B0:38:9D:D8:84:36:07:4E:14:26:11:4F:2D:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/ZT9B9tNXRU8FWuertgPw13h16Xk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.90.0/24
46.30.40.0/21
95.142.32.0/24
95.142.41.0/24
109.234.32.0/24
178.208.64.0/22
178.208.72.0-178.208.86.255
178.208.88.0/22
178.208.93.0/24
185.105.108.0/24
IPv6:
2a09:c140:feed::/48
Signature Algorithm: sha256WithRSAEncryption
93:a6:6b:23:6a:c3:db:5f:6d:5f:42:de:7b:81:bb:3e:ea:4e:
cf:84:1f:99:de:cd:bc:4a:f0:0f:18:ba:ce:89:f7:60:e4:5e:
69:56:49:86:31:36:fa:55:f0:3d:64:36:f7:83:6c:2c:ed:0a:
47:d8:10:ef:64:19:10:70:50:fd:cf:c8:70:37:6d:40:c9:fd:
38:e3:bf:f7:4c:4c:d1:5f:4a:bd:df:bc:fb:b7:77:8b:2b:d0:
15:3c:20:29:07:0e:d9:2b:b7:87:fd:7f:30:04:1f:85:eb:b8:
77:89:76:0e:12:05:b1:2f:fc:1c:30:81:76:d4:1d:8e:73:8a:
82:1c:a3:45:47:7e:46:7d:7e:52:fc:38:c4:6b:1a:72:4b:29:
c7:55:82:b3:4a:bb:64:84:71:b0:bb:e2:e0:58:c6:15:b6:2d:
5f:93:71:e2:93:25:5d:00:c0:4f:89:4a:dd:76:98:b8:98:60:
18:ba:0f:85:c2:87:42:7c:fc:c1:24:67:1e:e8:32:17:e2:a3:
08:9e:25:b2:2d:74:3e:f4:e0:47:f7:ed:8d:e3:d5:e0:67:3e:
1c:4e:97:9e:d6:98:6c:2d:ae:b4:6c:11:01:6d:34:f4:9f:ae:
37:2d:94:a6:d4:ba:81:fc:08:0d:f0:ac:93:bc:06:83:fc:87:
52:31:dc:eb
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgISAZQlIjjb237MQjd32eQk88SdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NTA3ZjA2NmYyYmIwMzg5ZGQ4ODQzNjA3NGUxNDI2MTE0
ZjJkOTIwHhcNMjUwMTAyMDM0OTQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTNmNDFmNmQzNTc0NTRmMDU1YWU3YWJiNjAzZjBkNzc4NzVlOTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyAEoOiBQIeDM6/8ZiYYGoeEefAx
24qZoLGMAROjt8EBvIRU1p9ExdMj2+POi2YzXAEvQCPDNdzLKK6O1anOvkNqES+f
anzhmbxL0X9hPlQIirdaoG0qZSdUPFyPVEn9U3lDry9FFuJC11olNnfbGjaNIvx2
aTJtRyrrZXj91v7AtvWIhaikx65gMnoQFcDngZGrWe0RftWqU/qyQSUt7FWfxde8
K0j+9Tn15quVm/Gfdhk1p1dxGmW2GI56nrprlh5KV/kMt2mlL9epMi/UXViy80C3
HEaCMM6oCTuzQxNirkvg51lVSNeh2vD2FOuZFYqGkoHHXvo6AesaAJ8aHwIDAQAB
o4ICWDCCAlQwHQYDVR0OBBYEFGU/QfbTV0VPBVrnq7YD8Nd4del5MB8GA1UdIwQY
MBaAFGlQfwZvK7A4ndiENgdOFCYRTy2SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVZCX0JtOHJzRGlkMklRMkIwNFVKaEZQTFpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9iZjgzMzgtODc1Mi00ZDU1LTljMzEt
MGUxYjhmZWE4OTEzLzEvWlQ5Qjl0TlhSVThGV3VlcnRnUHcxM2gxNlhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9iZjgzMzgtODc1Mi00ZDU1LTljMzEtMGUxYjhmZWE4OTEz
LzEvYVZCX0JtOHJzRGlkMklRMkIwNFVKaEZQTFpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG4GCCsGAQUFBwEHAQH/BF8wXTBKBAIAATBEAwQAAjhaAwQD
Lh4oAwQAX44gAwQAX44pAwQAbeogAwQCstBAMAwDBAOy0EgDBACy0FYDBAKy0FgD
BACy0F0DBAC5aWwwDwQCAAIwCQMHACoJwUD+7TANBgkqhkiG9w0BAQsFAAOCAQEA
k6ZrI2rD219tX0Lee4G7PupOz4Qfmd7NvErwDxi6zon3YOReaVZJhjE2+lXwPWQ2
94NsLO0KR9gQ72QZEHBQ/c/IcDdtQMn9OOO/90xM0V9Kvd+8+7d3iyvQFTwgKQcO
2Su3h/1/MAQfheu4d4l2DhIFsS/8HDCBdtQdjnOKghyjRUd+Rn1+Uvw4xGsacksp
x1WCs0q7ZIRxsLvi4FjGFbYtX5Nx4pMlXQDAT4lK3XaYuJhgGLoPhcKHQnz8wSRn
HugyF+KjCJ4lsi10PvTgR/ftjePV4Gc+HE6XntaYbC2utGwRAW009J+uNy2UptS6
gfwIDfCsk7wGg/yHUjHc6w==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:57:43 2025 by rpki-client