Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/_ZfQ6dJA6of97owenJCWnROIAZE.roa
File: _ZfQ6dJA6of97owenJCWnROIAZE.roa (raw, json)
Hash identifier: CDWd9PeFS0iUXnSBw0TM1e/3HBncYTs81yVTF6Ew178=
Subject key identifier: FD:97:D0:E9:D2:40:EA:87:FD:EE:8C:1E:9C:90:96:9D:13:88:01:91
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 019423D77699CFED1B5C1E380ED85FB70347
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/_ZfQ6dJA6of97owenJCWnROIAZE.roa
Signing time: Wed 01 Jan 2025 21:48:30 +0000
ROA not before: Wed 01 Jan 2025 21:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5518
IP address blocks: 62.63.128.0/21 maxlen: 24
62.63.136.0/22 maxlen: 24
62.63.144.0/20 maxlen: 24
62.63.159.0/24 maxlen: 24
62.63.160.0/19 maxlen: 24
62.63.190.0/24 maxlen: 24
62.63.191.0/24 maxlen: 24
78.28.192.0/18 maxlen: 24
78.28.195.0/24 maxlen: 24
78.28.197.0/24 maxlen: 24
78.28.211.0/24 maxlen: 24
78.28.212.0/24 maxlen: 24
78.28.223.0/24 maxlen: 24
78.28.228.0/24 maxlen: 24
78.28.229.0/24 maxlen: 24
78.28.234.0/24 maxlen: 24
78.28.240.0/24 maxlen: 24
78.28.244.0/24 maxlen: 24
78.28.250.0/24 maxlen: 24
78.28.252.0/24 maxlen: 24
78.154.128.0/19 maxlen: 24
80.233.128.0/17 maxlen: 24
80.233.140.0/24 maxlen: 24
80.233.168.0/24 maxlen: 24
80.233.200.0/21 maxlen: 24
80.233.232.0/24 maxlen: 24
80.233.244.0/24 maxlen: 24
185.87.204.0/22 maxlen: 24
185.87.204.0/24 maxlen: 24
194.19.224.0/19 maxlen: 24
194.19.224.0/24 maxlen: 24
194.19.246.0/24 maxlen: 24
213.175.64.0/18 maxlen: 24
213.175.75.0/24 maxlen: 24
213.175.117.0/24 maxlen: 24
2a02:16d8::/32 maxlen: 32
2a02:16d8:102::/48 maxlen: 48
2a02:16d8:104::/48 maxlen: 48
2a02:16d8:107::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:76:99:cf:ed:1b:5c:1e:38:0e:d8:5f:b7:03:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Jan 1 21:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd97d0e9d240ea87fdee8c1e9c90969d13880191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:93:c8:f5:f7:c4:0f:d1:e0:43:9d:13:75:fe:
b4:90:52:c7:be:5e:d3:98:02:10:f2:6f:35:b0:f3:
07:76:15:9d:38:0f:aa:ff:53:67:4b:31:87:9d:b0:
23:98:79:14:72:fb:18:e5:fd:7f:d3:26:ee:b4:95:
08:5d:40:ac:52:d4:74:96:12:31:93:d4:88:f6:5b:
3e:37:37:73:2d:6e:83:43:1f:6e:7e:f0:08:13:67:
4b:9b:89:74:94:ba:96:86:74:e3:d7:6f:e6:9f:c1:
4b:0f:31:29:7a:ce:48:f0:ae:ed:a6:59:b0:aa:9d:
0d:9c:a0:7b:05:f3:6a:73:df:b7:4b:13:72:31:e2:
be:8f:ce:e2:75:ca:81:03:28:2a:7f:1f:a1:cd:d2:
ca:df:21:05:50:3a:2b:a3:49:95:34:36:b1:9d:1f:
bb:ab:a4:b3:05:19:64:92:48:3c:4f:51:48:70:da:
8c:57:77:b6:d1:89:3d:72:ff:32:65:c3:c7:03:05:
f9:12:62:e6:c3:3f:34:5f:68:63:ba:da:ca:98:0b:
30:fe:c0:62:a6:4a:be:d8:fc:a9:54:94:11:1b:12:
47:c2:60:45:0b:f1:34:74:06:70:11:f2:4c:60:2b:
a8:9b:2a:d4:b2:74:1a:c5:01:a1:35:4d:05:c7:cd:
23:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:97:D0:E9:D2:40:EA:87:FD:EE:8C:1E:9C:90:96:9D:13:88:01:91
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/_ZfQ6dJA6of97owenJCWnROIAZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.63.128.0-62.63.139.255
62.63.144.0-62.63.191.255
78.28.192.0/18
78.154.128.0/19
80.233.128.0/17
185.87.204.0/22
194.19.224.0/19
213.175.64.0/18
IPv6:
2a02:16d8::/32
Signature Algorithm: sha256WithRSAEncryption
ae:b9:3d:9e:a8:42:18:f6:85:45:e0:9b:d3:80:b8:9f:a8:db:
a5:ab:8c:44:00:6b:ca:7b:ad:9a:96:85:ff:7c:83:ad:f4:10:
3e:2a:a4:67:07:44:e7:50:f1:35:62:a7:98:2f:46:f4:f9:31:
2c:b6:c6:ce:b7:96:0c:ba:87:60:c7:c0:e5:57:8d:d5:9b:4b:
54:f7:56:33:49:c1:f8:dc:57:41:ba:c1:86:f6:96:0c:10:fc:
af:81:e9:c9:aa:8c:43:3e:bc:e6:33:9c:aa:65:7c:80:88:bb:
48:0c:fd:f2:f8:67:f2:83:1f:b3:d5:6e:05:96:e4:64:99:7a:
d6:5e:7b:a0:0d:78:8a:0c:02:f9:5f:a0:67:9e:ab:f0:ed:c8:
4d:a9:df:ee:1f:4b:85:fc:63:d7:d9:90:0a:15:de:8c:2f:f7:
60:98:b9:d3:19:e9:0e:d1:e1:c7:37:aa:9d:78:c7:8c:5c:c7:
39:9d:2a:f1:00:c5:2f:b3:75:13:85:b7:2c:39:d3:97:73:50:
4b:9e:91:58:04:8e:f8:27:71:62:39:18:d3:d5:c1:de:81:a2:
63:a4:86:11:ce:3d:78:87:e3:8e:dc:2f:03:4f:a7:64:2b:e9:
a8:4a:38:a1:1c:4e:83:b1:22:29:15:6a:cb:05:f5:b8:60:e2:
39:7d:bb:31
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgISAZQj13aZz+0bXB44DthftwNHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzYmUwN2NiMWZkNGYxZTNjOTIyMzAzYjY3MGE4ODFiODJl
NjE0OTEwHhcNMjUwMTAxMjE0ODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDk3ZDBlOWQyNDBlYTg3ZmRlZThjMWU5YzkwOTY5ZDEzODgwMTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZPI9ffED9HgQ50Tdf60kFLHvl7T
mAIQ8m81sPMHdhWdOA+q/1NnSzGHnbAjmHkUcvsY5f1/0ybutJUIXUCsUtR0lhIx
k9SI9ls+NzdzLW6DQx9ufvAIE2dLm4l0lLqWhnTj12/mn8FLDzEpes5I8K7tplmw
qp0NnKB7BfNqc9+3SxNyMeK+j87idcqBAygqfx+hzdLK3yEFUDoro0mVNDaxnR+7
q6SzBRlkkkg8T1FIcNqMV3e20Yk9cv8yZcPHAwX5EmLmwz80X2hjutrKmAsw/sBi
pkq+2PypVJQRGxJHwmBFC/E0dAZwEfJMYCuomyrUsnQaxQGhNU0Fx80jYQIDAQAB
o4ICUjCCAk4wHQYDVR0OBBYEFP2X0OnSQOqH/e6MHpyQlp0TiAGRMB8GA1UdIwQY
MBaAFOO+B8sf1PHjySIwO2cKiBuC5hSRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMt
ZDRlZTFkMzg5ZTBkLzEvX1pmUTZkSkE2b2Y5N293ZW5KQ1duUk9JQVpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMtZDRlZTFkMzg5ZTBk
LzEvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGgGCCsGAQUFBwEHAQH/BFkwVzBGBAIAATBAMAwDBAc+P4AD
BAI+P4gwDAMEBD4/kAMEBj4/gAMEBk4cwAMEBU6agAMEB1DpgAMEArlXzAMEBcIT
4AMEBtWvQDANBAIAAjAHAwUAKgIW2DANBgkqhkiG9w0BAQsFAAOCAQEArrk9nqhC
GPaFReCb04C4n6jbpauMRABrynutmpaF/3yDrfQQPiqkZwdE51DxNWKnmC9G9Pkx
LLbGzreWDLqHYMfA5VeN1ZtLVPdWM0nB+NxXQbrBhvaWDBD8r4HpyaqMQz685jOc
qmV8gIi7SAz98vhn8oMfs9VuBZbkZJl61l57oA14igwC+V+gZ56r8O3ITanf7h9L
hfxj19mQChXejC/3YJi50xnpDtHhxzeqnXjHjFzHOZ0q8QDFL7N1E4W3LDnTl3NQ
S56RWASO+CdxYjkY09XB3oGiY6SGEc49eIfjjtwvA0+nZCvpqEo4oRxOg7EiKRVq
ywX1uGDiOX27MQ==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:47 2025 by rpki-client on console.sobornost.net