Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/zali-bov7HFFLbfBOBgJXF4t6bU.roa
File: zali-bov7HFFLbfBOBgJXF4t6bU.roa (raw, json)
Hash identifier: dMS72OeHlCDHUEYo3R6ryEOeZcjQmmvAQbx1Qbcq+GE=
Subject key identifier: CD:A9:62:F9:BA:2F:EC:71:45:2D:B7:C1:38:18:09:5C:5E:2D:E9:B5
Certificate issuer: /CN=715b885c3b302fd50e6c22647a33dc47727fea95
Certificate serial: 0197C0322B5BEB5011B499A9CD86BCD77888
Authority key identifier: 71:5B:88:5C:3B:30:2F:D5:0E:6C:22:64:7A:33:DC:47:72:7F:EA:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cVuIXDswL9UObCJkejPcR3J_6pU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/zali-bov7HFFLbfBOBgJXF4t6bU.roa
Signing time: Mon 30 Jun 2025 09:36:42 +0000
ROA not before: Mon 30 Jun 2025 09:36:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198605
IP address blocks: 5.62.16.0/24 maxlen: 24
5.62.17.0/24 maxlen: 24
5.62.18.0/24 maxlen: 24
5.62.19.0/24 maxlen: 24
5.62.20.0/24 maxlen: 24
5.62.24.0/24 maxlen: 24
5.62.25.0/24 maxlen: 24
5.62.30.0/24 maxlen: 24
5.62.32.0/24 maxlen: 24
5.62.36.0/23 maxlen: 23
5.62.38.0/23 maxlen: 24
5.62.38.0/24 maxlen: 24
5.62.40.0/23 maxlen: 23
5.62.42.0/23 maxlen: 23
5.62.44.0/23 maxlen: 23
5.62.46.0/23 maxlen: 23
5.62.46.0/24 maxlen: 24
5.62.47.0/24 maxlen: 24
5.62.48.0/23 maxlen: 23
5.62.50.0/24 maxlen: 24
5.62.52.0/24 maxlen: 24
5.62.53.0/24 maxlen: 24
5.62.54.0/24 maxlen: 24
5.62.55.0/24 maxlen: 24
5.62.56.0/23 maxlen: 23
5.62.56.0/24 maxlen: 24
5.62.57.0/24 maxlen: 24
5.62.58.0/23 maxlen: 23
5.62.60.0/23 maxlen: 23
5.62.62.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:32:2b:5b:eb:50:11:b4:99:a9:cd:86:bc:d7:78:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=715b885c3b302fd50e6c22647a33dc47727fea95
Validity
Not Before: Jun 30 09:36:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cda962f9ba2fec71452db7c13818095c5e2de9b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d1:0a:52:12:b2:b8:5c:dc:a5:46:81:43:62:
88:b7:77:86:d8:b0:c2:ad:c2:1f:2c:cd:4d:3d:7b:
e2:a1:24:05:61:09:52:62:7d:56:4a:65:8c:c5:9d:
7b:08:9b:19:ec:25:fe:c4:b4:76:21:0e:90:89:9a:
5e:91:8a:16:55:e2:b0:97:8e:74:d1:4b:07:29:1e:
1a:b7:cc:e1:60:93:0f:ff:17:ee:f8:10:1f:d2:83:
e1:e3:14:2f:e2:d4:9a:6d:98:07:d2:2e:22:fb:03:
3e:ae:26:af:4f:d3:2e:5b:ee:cc:b0:b9:2e:6c:97:
6e:d6:ec:ec:30:f3:6f:b0:5c:38:2b:d5:dc:76:08:
34:cc:7e:f6:4d:15:0f:b7:78:c1:f2:d8:3b:ef:11:
49:14:92:e6:23:b0:50:4c:5f:b8:7a:51:d7:d1:f1:
eb:4d:73:de:f5:8a:53:56:2b:c7:24:8f:d9:e6:16:
0e:ff:3c:a2:1c:92:4b:d2:11:ac:88:b8:82:36:e9:
38:65:cc:2b:db:ce:6b:fd:98:05:2a:28:d4:1e:c4:
67:56:13:b6:96:81:53:d2:a6:97:7c:5c:0f:ca:04:
a8:0e:67:5a:fa:94:15:3b:11:ad:2e:8e:1c:3e:a3:
b4:4c:60:f4:bb:93:29:8e:e4:09:2c:77:81:4b:91:
92:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A9:62:F9:BA:2F:EC:71:45:2D:B7:C1:38:18:09:5C:5E:2D:E9:B5
X509v3 Authority Key Identifier:
keyid:71:5B:88:5C:3B:30:2F:D5:0E:6C:22:64:7A:33:DC:47:72:7F:EA:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVuIXDswL9UObCJkejPcR3J_6pU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/zali-bov7HFFLbfBOBgJXF4t6bU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/cVuIXDswL9UObCJkejPcR3J_6pU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.62.16.0-5.62.20.255
5.62.24.0/23
5.62.30.0/24
5.62.32.0/24
5.62.36.0-5.62.50.255
5.62.52.0-5.62.63.255
Signature Algorithm: sha256WithRSAEncryption
1a:91:39:50:f9:e9:59:41:aa:34:69:86:c7:cc:e7:ac:50:8a:
f0:e7:07:89:2f:22:db:25:46:d0:ed:72:4e:c1:63:db:b2:9e:
1a:bd:ce:4a:7e:5d:f9:c1:00:e7:27:7c:8b:34:98:5d:c9:2b:
df:f7:52:7b:1d:87:6c:78:83:10:3a:bd:a1:9b:50:4a:79:ed:
bf:c6:b1:c4:c2:b3:93:db:34:06:be:32:b3:bb:2e:86:2b:5f:
d5:81:b2:3d:59:55:d4:86:b6:e7:72:ad:e4:09:e1:eb:24:b6:
b4:1f:4a:8f:17:df:ac:73:e0:12:21:27:23:f0:31:41:44:14:
8a:49:ad:ac:7f:31:41:c2:f1:01:52:fe:91:10:22:42:24:27:
57:dc:a8:64:38:15:74:d7:f1:b5:91:83:a6:b4:70:5a:91:3f:
72:db:82:6f:e3:87:dc:7d:c0:ea:7a:6a:94:09:dc:9b:01:66:
f3:46:16:df:4d:48:18:cb:2f:53:fb:75:5d:cc:3f:a2:45:ac:
7e:3f:9a:8b:cd:e9:1a:8b:54:26:43:04:ab:7e:eb:ee:e2:30:
60:6c:25:84:9f:87:65:3e:37:d0:c2:83:93:30:6d:24:b6:78:
b1:f6:5c:45:dc:74:89:78:95:37:41:f3:d6:06:6b:38:24:37:
6f:3e:7a:60
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISAZfAMitb61ARtJmpzYa813iIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxNWI4ODVjM2IzMDJmZDUwZTZjMjI2NDdhMzNkYzQ3NzI3
ZmVhOTUwHhcNMjUwNjMwMDkzNjQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZGE5NjJmOWJhMmZlYzcxNDUyZGI3YzEzODE4MDk1YzVlMmRlOWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdEKUhKyuFzcpUaBQ2KIt3eG2LDC
rcIfLM1NPXvioSQFYQlSYn1WSmWMxZ17CJsZ7CX+xLR2IQ6QiZpekYoWVeKwl450
0UsHKR4at8zhYJMP/xfu+BAf0oPh4xQv4tSabZgH0i4i+wM+riavT9MuW+7MsLku
bJdu1uzsMPNvsFw4K9Xcdgg0zH72TRUPt3jB8tg77xFJFJLmI7BQTF+4elHX0fHr
TXPe9YpTVivHJI/Z5hYO/zyiHJJL0hGsiLiCNuk4Zcwr285r/ZgFKijUHsRnVhO2
loFT0qaXfFwPygSoDmda+pQVOxGtLo4cPqO0TGD0u5MpjuQJLHeBS5GS2wIDAQAB
o4ICPzCCAjswHQYDVR0OBBYEFM2pYvm6L+xxRS23wTgYCVxeLem1MB8GA1UdIwQY
MBaAFHFbiFw7MC/VDmwiZHoz3Edyf+qVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1Z1SVhEc3dMOVVPYkNKa2VqUGNSM0pfNnBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9mODk5OWMtMDQwYS00MjRhLTg4OTYt
MmE5MjMzM2Y5ZGY2LzEvemFsaS1ib3Y3SEZGTGJmQk9CZ0pYRjR0NmJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9mODk5OWMtMDQwYS00MjRhLTg4OTYtMmE5MjMzM2Y5ZGY2
LzEvY1Z1SVhEc3dMOVVPYkNKa2VqUGNSM0pfNnBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8MAwDBAQFPhAD
BAAFPhQDBAEFPhgDBAAFPh4DBAAFPiAwDAMEAgU+JAMEAAU+MjAMAwQCBT40AwQG
BT4AMA0GCSqGSIb3DQEBCwUAA4IBAQAakTlQ+elZQao0aYbHzOesUIrw5weJLyLb
JUbQ7XJOwWPbsp4avc5Kfl35wQDnJ3yLNJhdySvf91J7HYdseIMQOr2hm1BKee2/
xrHEwrOT2zQGvjKzuy6GK1/VgbI9WVXUhrbncq3kCeHrJLa0H0qPF9+sc+ASIScj
8DFBRBSKSa2sfzFBwvEBUv6RECJCJCdX3KhkOBV01/G1kYOmtHBakT9y24Jv44fc
fcDqemqUCdybAWbzRhbfTUgYyy9T+3VdzD+iRax+P5qLzekai1QmQwSrfuvu4jBg
bCWEn4dlPjfQwoOTMG0ktnix9lxF3HSJeJU3QfPWBms4JDdvPnpg
-----END CERTIFICATE-----
Generated at Sat Jul 5 08:13:19 2025 by rpki-client