Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/ZSBBy6W5L8TTtnlSf_uUrt4Z7AI.roa
File: ZSBBy6W5L8TTtnlSf_uUrt4Z7AI.roa (raw, json)
Hash identifier: jFdtASpUm3buRvq9o0f0zIeX/wlw5jgk9wy5omlh1/w=
Subject key identifier: 65:20:41:CB:A5:B9:2F:C4:D3:B6:79:52:7F:FB:94:AE:DE:19:EC:02
Certificate issuer: /CN=f5daf0ba21e90202597ee47e09f6877fe23c2a9f
Certificate serial: 019425FD46906F8A8EE8105E268A1FE1B63E
Authority key identifier: F5:DA:F0:BA:21:E9:02:02:59:7E:E4:7E:09:F6:87:7F:E2:3C:2A:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9drwuiHpAgJZfuR-CfaHf-I8Kp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/ZSBBy6W5L8TTtnlSf_uUrt4Z7AI.roa
Signing time: Thu 02 Jan 2025 07:49:03 +0000
ROA not before: Thu 02 Jan 2025 07:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206262
IP address blocks: 5.206.232.0/21 maxlen: 21
5.206.232.0/24 maxlen: 24
5.206.233.0/24 maxlen: 24
5.206.234.0/24 maxlen: 24
5.206.235.0/24 maxlen: 24
5.206.236.0/24 maxlen: 24
5.206.237.0/24 maxlen: 24
5.206.238.0/24 maxlen: 24
5.206.239.0/24 maxlen: 24
37.26.64.0/21 maxlen: 21
37.26.64.0/24 maxlen: 24
37.26.65.0/24 maxlen: 24
37.26.66.0/24 maxlen: 24
37.26.67.0/24 maxlen: 24
37.26.68.0/24 maxlen: 24
37.26.69.0/24 maxlen: 24
37.26.70.0/24 maxlen: 24
37.26.71.0/24 maxlen: 24
87.238.208.0/21 maxlen: 21
87.238.208.0/24 maxlen: 24
87.238.209.0/24 maxlen: 24
87.238.210.0/24 maxlen: 24
87.238.211.0/24 maxlen: 24
87.238.212.0/24 maxlen: 24
87.238.213.0/24 maxlen: 24
87.238.214.0/24 maxlen: 24
87.238.215.0/24 maxlen: 24
95.86.40.0/22 maxlen: 22
95.86.40.0/24 maxlen: 24
95.86.41.0/24 maxlen: 24
95.86.42.0/24 maxlen: 24
95.86.43.0/24 maxlen: 24
95.86.56.0/22 maxlen: 24
95.86.56.0/24 maxlen: 24
95.86.57.0/24 maxlen: 24
95.86.58.0/24 maxlen: 24
95.86.59.0/24 maxlen: 24
147.78.160.0/22 maxlen: 22
147.78.160.0/24 maxlen: 24
147.78.161.0/24 maxlen: 24
147.78.162.0/24 maxlen: 24
147.78.163.0/24 maxlen: 24
185.171.60.0/22 maxlen: 22
185.171.60.0/24 maxlen: 24
185.171.61.0/24 maxlen: 24
185.171.62.0/24 maxlen: 24
185.171.63.0/24 maxlen: 24
185.174.208.0/22 maxlen: 22
185.174.208.0/24 maxlen: 24
185.174.209.0/24 maxlen: 24
185.174.210.0/24 maxlen: 24
185.174.211.0/24 maxlen: 24
185.179.28.0/22 maxlen: 22
185.179.28.0/24 maxlen: 24
185.179.29.0/24 maxlen: 24
185.179.30.0/24 maxlen: 24
185.179.31.0/24 maxlen: 24
185.186.80.0/22 maxlen: 22
185.186.80.0/24 maxlen: 24
185.186.81.0/24 maxlen: 24
185.186.82.0/24 maxlen: 24
185.186.83.0/24 maxlen: 24
185.191.164.0/22 maxlen: 22
185.191.164.0/24 maxlen: 24
185.191.165.0/24 maxlen: 24
185.191.166.0/24 maxlen: 24
185.191.167.0/24 maxlen: 24
2a0c:b340::/29 maxlen: 29
2a0c:b340::/32 maxlen: 32
2a0c:b340::/48 maxlen: 48
2a0c:b340:1::/48 maxlen: 48
2a0c:b341::/32 maxlen: 32
2a0c:b342::/32 maxlen: 32
2a0c:b343::/32 maxlen: 32
2a0c:b344::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:46:90:6f:8a:8e:e8:10:5e:26:8a:1f:e1:b6:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5daf0ba21e90202597ee47e09f6877fe23c2a9f
Validity
Not Before: Jan 2 07:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=652041cba5b92fc4d3b679527ffb94aede19ec02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3c:6e:e0:c0:cd:5c:ff:86:7c:d6:fb:9b:88:
70:35:7a:81:75:88:a7:4c:93:ff:18:0f:76:8f:b5:
c9:3f:73:33:60:18:a9:2f:eb:30:f2:e0:7d:01:f2:
8a:d9:5c:05:01:36:67:68:b1:10:a6:f3:8d:5c:b7:
9b:72:6c:21:d5:da:f5:bc:30:b6:28:10:80:01:44:
48:8b:09:65:b1:bd:0a:35:72:bd:ca:cf:b7:80:d5:
58:70:6d:23:ad:05:f5:e0:0e:51:48:81:fe:b2:c7:
31:e1:78:c5:0a:4e:25:ba:f1:a8:02:97:c0:7e:a3:
3f:dd:b9:7d:94:18:29:8b:ea:33:75:43:60:61:aa:
9f:40:8e:d9:ea:dd:7a:58:46:17:42:79:07:9c:53:
ee:4f:2e:b1:a8:d5:6f:1a:40:9a:e7:95:bb:a0:6c:
ed:06:60:61:2a:02:40:2e:cc:50:13:9c:88:5c:95:
51:1c:d9:d8:ba:ac:af:da:54:26:c5:fa:da:0b:94:
86:f1:00:cf:bd:21:ec:a9:30:83:7a:55:c3:0c:49:
d5:68:44:5a:45:b1:a9:78:da:31:3e:42:0d:ff:d1:
18:38:02:58:84:1f:04:f3:dc:41:44:02:3e:a4:7c:
32:11:29:76:c6:1f:50:45:fd:6a:21:fd:47:9c:79:
cd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:20:41:CB:A5:B9:2F:C4:D3:B6:79:52:7F:FB:94:AE:DE:19:EC:02
X509v3 Authority Key Identifier:
keyid:F5:DA:F0:BA:21:E9:02:02:59:7E:E4:7E:09:F6:87:7F:E2:3C:2A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9drwuiHpAgJZfuR-CfaHf-I8Kp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/ZSBBy6W5L8TTtnlSf_uUrt4Z7AI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.206.232.0/21
37.26.64.0/21
87.238.208.0/21
95.86.40.0/22
95.86.56.0/22
147.78.160.0/22
185.171.60.0/22
185.174.208.0/22
185.179.28.0/22
185.186.80.0/22
185.191.164.0/22
IPv6:
2a0c:b340::/29
Signature Algorithm: sha256WithRSAEncryption
5f:ca:2a:28:e0:05:4b:ee:62:5a:9d:9a:5b:1d:13:b3:37:e8:
27:47:ee:ca:c8:37:ad:17:0a:03:ff:a8:76:5a:fa:83:7f:a7:
c0:d9:7b:4a:2d:af:40:07:52:e3:92:9a:09:f1:c3:13:44:b8:
f9:f6:4c:9b:7d:de:4a:44:8a:3d:92:e2:e3:cc:6b:cf:8c:6c:
cc:3b:ab:2c:de:c4:83:4b:b7:7b:44:d6:59:ba:0d:4c:b6:c6:
9a:69:be:1d:98:ab:94:6c:2f:e6:0a:4b:c8:c1:6f:18:9f:22:
ed:74:4a:b5:7b:7f:31:a0:35:9c:c4:3d:49:fc:5f:11:83:cc:
8b:24:26:2c:48:fc:83:5b:87:86:4a:07:e7:c5:8c:e3:61:b8:
76:21:bd:6b:7e:b0:6a:16:c9:e7:ff:8d:05:70:1c:c8:56:6e:
2e:04:30:06:59:ac:a2:b0:73:cf:1e:29:36:15:27:ae:d7:05:
51:2d:dd:bf:aa:fe:57:0d:ad:39:18:00:3a:9d:c3:27:a2:fa:
cc:12:a1:f8:5d:74:f7:fb:1c:05:24:1b:d4:9f:9c:2a:dd:23:
d1:a9:af:77:6d:8a:40:a5:63:1d:45:da:75:6d:88:88:9e:7b:
96:0f:e4:93:e1:65:dc:f0:fd:a0:2f:71:42:7f:51:6f:ca:b3:
aa:95:35:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:35:26 2025 by rpki-client