Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/zpoKfpByhTXsEsiuyInACuPcOfg.roa
File: zpoKfpByhTXsEsiuyInACuPcOfg.roa (raw, json)
Hash identifier: 0FvCKrjX0iWxoVFTXATz6myqQtbOGfjhdIhKL1qGpes=
Subject key identifier: CE:9A:0A:7E:90:72:85:35:EC:12:C8:AE:C8:89:C0:0A:E3:DC:39:F8
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01962EA8D9AAF5A6A3563077CBE46C8A8627
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/zpoKfpByhTXsEsiuyInACuPcOfg.roa
Signing time: Sun 13 Apr 2025 10:18:59 +0000
ROA not before: Sun 13 Apr 2025 10:18:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21341
IP address blocks: 62.220.96.0/21 maxlen: 24
62.220.104.0/21 maxlen: 24
62.220.120.0/22 maxlen: 22
62.220.124.0/23 maxlen: 23
81.12.8.0/22 maxlen: 22
81.12.12.0/22 maxlen: 22
81.12.16.0/21 maxlen: 21
81.12.48.0/22 maxlen: 24
81.12.58.0/24 maxlen: 24
81.12.59.0/24 maxlen: 24
87.107.0.0/21 maxlen: 24
87.107.24.0/22 maxlen: 22
87.107.34.0/23 maxlen: 23
87.107.40.0/24 maxlen: 24
87.107.41.0/24 maxlen: 24
87.107.42.0/23 maxlen: 23
87.107.50.0/23 maxlen: 24
87.107.51.0/24 maxlen: 24
87.107.52.0/23 maxlen: 23
87.107.68.0/22 maxlen: 24
87.107.88.0/22 maxlen: 22
87.107.96.0/22 maxlen: 24
87.107.106.0/23 maxlen: 24
87.107.112.0/22 maxlen: 24
87.107.116.0/23 maxlen: 23
87.107.120.0/21 maxlen: 24
87.107.128.0/22 maxlen: 22
87.107.132.0/22 maxlen: 23
87.107.132.0/23 maxlen: 24
87.107.160.0/22 maxlen: 24
87.107.168.0/22 maxlen: 24
87.107.173.0/24 maxlen: 24
87.107.188.0/23 maxlen: 24
87.107.192.0/19 maxlen: 24
87.107.206.0/24 maxlen: 24
87.107.226.0/24 maxlen: 24
87.107.232.0/24 maxlen: 24
185.60.136.0/24 maxlen: 24
185.60.137.0/24 maxlen: 24
185.60.138.0/24 maxlen: 24
185.60.139.0/24 maxlen: 24
2a00:1198::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:a8:d9:aa:f5:a6:a3:56:30:77:cb:e4:6c:8a:86:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Apr 13 10:18:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce9a0a7e90728535ec12c8aec889c00ae3dc39f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:db:0d:e8:bd:4d:68:e7:7c:15:c9:bc:79:28:
64:40:49:40:10:d3:e3:01:c2:f9:83:51:a0:9d:64:
43:e5:57:46:74:97:29:5a:35:49:fc:a9:71:c0:4f:
05:7e:8f:91:3e:29:3e:4e:ca:9f:0d:22:2e:e0:c7:
2d:69:e9:17:77:4b:cb:27:c9:15:8e:9d:4b:14:56:
11:da:58:3c:4a:4e:07:35:e0:a8:66:2c:85:57:b8:
f6:2f:03:ad:1b:65:0d:25:cd:90:bf:78:66:26:95:
e7:2c:58:a0:88:95:29:92:b9:e2:e7:cc:f3:ca:8d:
44:2f:d5:0d:ce:e0:0a:14:c4:e0:6d:71:f5:8c:9d:
d3:c0:79:a1:36:3d:72:67:cf:b9:f4:0a:3b:e2:31:
93:ad:27:ef:f0:17:d1:76:02:27:f1:b4:4f:45:0d:
f1:88:0c:e0:69:a9:49:f9:15:7c:71:b1:14:74:94:
26:32:fe:f3:44:84:c5:98:2e:53:87:c3:63:92:bf:
4e:06:29:0d:27:5d:62:05:52:15:b8:91:15:b3:08:
f3:07:fe:94:78:66:4c:3a:59:eb:5f:2e:06:c7:29:
87:98:bf:15:e9:dd:c5:98:46:53:52:4a:f3:83:33:
2a:a4:74:cf:73:7e:83:68:44:53:7d:10:60:a2:36:
c0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:9A:0A:7E:90:72:85:35:EC:12:C8:AE:C8:89:C0:0A:E3:DC:39:F8
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/zpoKfpByhTXsEsiuyInACuPcOfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.96.0/20
62.220.120.0-62.220.125.255
81.12.8.0-81.12.23.255
81.12.48.0/22
81.12.58.0/23
87.107.0.0/21
87.107.24.0/22
87.107.34.0/23
87.107.40.0/22
87.107.50.0-87.107.53.255
87.107.68.0/22
87.107.88.0/22
87.107.96.0/22
87.107.106.0/23
87.107.112.0-87.107.117.255
87.107.120.0-87.107.135.255
87.107.160.0/22
87.107.168.0/22
87.107.173.0/24
87.107.188.0/23
87.107.192.0/19
87.107.226.0/24
87.107.232.0/24
185.60.136.0/22
IPv6:
2a00:1198::/32
Signature Algorithm: sha256WithRSAEncryption
13:34:27:3f:48:fd:73:b7:f2:cd:79:52:e5:a9:39:c2:f7:da:
c2:0a:54:bd:9c:15:07:10:0a:3e:e4:a9:64:ee:41:44:68:7d:
4f:cc:a1:eb:08:60:28:9a:81:68:e6:3a:20:02:ab:68:13:27:
f3:2f:34:69:d2:a1:0d:47:b6:9e:ef:38:88:44:37:af:89:17:
d6:1a:5f:55:46:35:85:fb:b7:c8:4f:a7:4f:6e:a1:59:cc:ce:
3d:cb:7b:b0:8d:20:34:16:9a:3d:a2:b6:b7:94:58:e0:05:aa:
4d:63:48:5e:36:ca:24:94:66:96:91:39:26:ae:b8:33:2b:5a:
ea:61:29:99:26:55:a7:a8:18:e3:a9:a4:ba:c0:1d:63:13:46:
bf:35:e3:74:e2:cc:b4:62:94:8c:03:23:02:c4:12:f6:24:97:
d9:68:35:3d:5e:29:23:90:79:81:d8:30:d3:58:eb:4a:48:ce:
5a:ee:f0:20:c3:c8:e6:77:48:45:49:0c:98:de:1b:e4:1f:12:
de:a6:48:62:67:8c:15:07:69:03:de:57:1d:98:01:49:be:53:
6a:87:61:f8:53:b8:04:a0:f4:30:8c:32:92:72:f1:96:c9:f7:
1d:aa:63:e1:8c:8e:e1:d6:ba:06:f0:c4:c1:28:00:89:6d:e6:
13:ac:84:98
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgISAZYuqNmq9aajVjB3y+RsioYnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk
ZDVjMjEwHhcNMjUwNDEzMTAxODU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZTlhMGE3ZTkwNzI4NTM1ZWMxMmM4YWVjODg5YzAwYWUzZGMzOWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdsN6L1NaOd8Fcm8eShkQElAENPj
AcL5g1GgnWRD5VdGdJcpWjVJ/KlxwE8Ffo+RPik+TsqfDSIu4MctaekXd0vLJ8kV
jp1LFFYR2lg8Sk4HNeCoZiyFV7j2LwOtG2UNJc2Qv3hmJpXnLFigiJUpkrni58zz
yo1EL9UNzuAKFMTgbXH1jJ3TwHmhNj1yZ8+59Ao74jGTrSfv8BfRdgIn8bRPRQ3x
iAzgaalJ+RV8cbEUdJQmMv7zRITFmC5Th8Njkr9OBikNJ11iBVIVuJEVswjzB/6U
eGZMOlnrXy4GxymHmL8V6d3FmEZTUkrzgzMqpHTPc36DaERTfRBgojbAvwIDAQAB
o4ICzzCCAsswHQYDVR0OBBYEFM6aCn6QcoU17BLIrsiJwArj3Dn4MB8GA1UdIwQY
MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt
NzZiMzNlNGNlODIxLzEvenBvS2ZwQnloVFhzRXNpdXlJbkFDdVBjT2ZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx
LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHkBggrBgEFBQcBBwEB/wSB1DCB0TCBvwQCAAEwgbgDBAQ+
3GAwDAMEAz7ceAMEAT7cfDAMAwQDUQwIAwQDUQwQAwQCUQwwAwQBUQw6AwQDV2sA
AwQCV2sYAwQBV2siAwQCV2soMAwDBAFXazIDBAFXazQDBAJXa0QDBAJXa1gDBAJX
a2ADBAFXa2owDAMEBFdrcAMEAVdrdDAMAwQDV2t4AwQDV2uAAwQCV2ugAwQCV2uo
AwQAV2utAwQBV2u8AwQFV2vAAwQAV2viAwQAV2voAwQCuTyIMA0EAgACMAcDBQAq
ABGYMA0GCSqGSIb3DQEBCwUAA4IBAQATNCc/SP1zt/LNeVLlqTnC99rCClS9nBUH
EAo+5Klk7kFEaH1PzKHrCGAomoFo5jogAqtoEyfzLzRp0qENR7ae7ziIRDeviRfW
Gl9VRjWF+7fIT6dPbqFZzM49y3uwjSA0Fpo9ora3lFjgBapNY0heNsoklGaWkTkm
rrgzK1rqYSmZJlWnqBjjqaS6wB1jE0a/NeN04sy0YpSMAyMCxBL2JJfZaDU9Xikj
kHmB2DDTWOtKSM5a7vAgw8jmd0hFSQyY3hvkHxLepkhiZ4wVB2kD3lcdmAFJvlNq
h2H4U7gEoPQwjDKScvGWyfcdqmPhjI7h1roG8MTBKACJbeYTrISY
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:43 2025 by rpki-client on console.sobornost.net