Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/Qpzkmq2vsund0O7K7-PXr2h15Ik.roa
File: Qpzkmq2vsund0O7K7-PXr2h15Ik.roa (raw, json)
Hash identifier: EZ0hkX/4PqRcfKq2Cnk85fa6wLRiqUjwSy6wJoMjK8c=
Subject key identifier: 42:9C:E4:9A:AD:AF:B2:E9:DD:D0:EE:CA:EF:E3:D7:AF:68:75:E4:89
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 018C39C70B2FF4A6184D5072C83FF3425897
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/Qpzkmq2vsund0O7K7-PXr2h15Ik.roa
Signing time: Tue 05 Dec 2023 11:39:54 +0000
ROA not before: Tue 05 Dec 2023 11:39:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13194
IP address blocks: 91.190.45.0/24 maxlen: 24
85.254.71.0/24 maxlen: 24
85.254.75.0/24 maxlen: 24
85.254.76.0/24 maxlen: 24
85.254.73.0/24 maxlen: 24
85.254.74.0/24 maxlen: 24
85.254.76.0/22 maxlen: 22
85.254.74.0/23 maxlen: 23
85.254.141.0/24 maxlen: 24
85.254.151.0/24 maxlen: 24
85.254.149.0/24 maxlen: 24
85.254.152.0/22 maxlen: 22
85.254.159.0/24 maxlen: 24
85.254.161.0/24 maxlen: 24
85.254.168.0/24 maxlen: 24
85.254.169.0/24 maxlen: 24
85.254.170.0/24 maxlen: 24
85.254.176.0/23 maxlen: 23
80.81.61.0/24 maxlen: 24
85.254.84.0/23 maxlen: 23
85.254.80.0/22 maxlen: 22
85.254.94.0/24 maxlen: 24
85.254.98.0/23 maxlen: 23
85.254.96.0/22 maxlen: 22
85.254.96.0/23 maxlen: 23
85.254.92.0/22 maxlen: 22
85.254.92.0/23 maxlen: 23
85.254.95.0/24 maxlen: 24
85.254.92.0/24 maxlen: 24
85.254.93.0/24 maxlen: 24
85.254.104.0/21 maxlen: 21
159.148.73.0/24 maxlen: 24
85.254.101.0/24 maxlen: 24
85.254.102.0/24 maxlen: 24
85.254.100.0/24 maxlen: 24
85.254.112.0/21 maxlen: 21
85.254.124.0/23 maxlen: 23
159.148.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:39:c7:0b:2f:f4:a6:18:4d:50:72:c8:3f:f3:42:58:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Dec 5 11:39:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=429ce49aadafb2e9ddd0eecaefe3d7af6875e489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:49:cb:ea:1c:ca:dd:86:72:86:68:b8:ae:58:
06:5e:b9:86:8a:ed:a7:5d:c9:a5:3a:51:51:dd:5b:
be:20:67:8e:e1:61:6f:d2:8d:de:1e:62:44:66:0f:
00:81:d4:f5:14:4c:6f:e2:4f:1b:1f:92:01:97:da:
22:35:5e:4f:76:44:66:75:c3:00:06:39:3b:70:87:
24:37:27:10:c1:09:be:49:e4:6f:0d:e1:ae:3c:24:
ef:4c:a0:c4:66:40:d3:60:86:ce:97:48:81:e0:ae:
8e:7b:0f:07:c5:58:bb:53:e8:df:14:97:d4:d3:3c:
59:2f:8d:21:a7:d1:e6:02:97:e5:1e:32:06:1a:10:
8f:63:ee:ef:fd:24:af:e3:f4:ab:8d:d6:95:d3:7c:
57:64:10:2e:7c:f7:f6:60:42:fe:3e:a6:40:aa:fc:
92:9f:73:44:b4:0f:d9:76:3e:19:34:02:c4:4f:8b:
1b:39:68:08:7b:29:7b:5b:63:7e:10:af:6d:89:2c:
a3:c4:b8:4b:19:45:9a:a3:16:bd:96:98:b6:78:a1:
b8:32:1a:a0:c4:3b:5e:0b:1e:22:ab:a9:ec:b7:16:
6a:be:21:ad:3c:6c:1c:79:ba:da:74:2b:d2:56:d7:
2e:87:3d:31:0a:43:71:90:5a:ca:d0:29:d2:42:a4:
43:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:9C:E4:9A:AD:AF:B2:E9:DD:D0:EE:CA:EF:E3:D7:AF:68:75:E4:89
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/Qpzkmq2vsund0O7K7-PXr2h15Ik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.81.61.0/24
85.254.71.0/24
85.254.73.0-85.254.85.255
85.254.92.0-85.254.102.255
85.254.104.0-85.254.119.255
85.254.124.0/23
85.254.141.0/24
85.254.149.0/24
85.254.151.0-85.254.155.255
85.254.159.0/24
85.254.161.0/24
85.254.168.0-85.254.170.255
85.254.176.0/23
91.190.45.0/24
159.148.73.0/24
159.148.249.0/24
Signature Algorithm: sha256WithRSAEncryption
20:b3:87:9e:f9:f2:fe:17:7b:5f:a4:92:ec:8e:cd:01:00:6f:
a8:ff:99:e4:aa:70:6d:1b:57:c9:f7:da:ae:ba:6d:36:fe:d6:
c7:5f:4f:fc:05:fd:12:5b:41:ec:fc:03:26:2c:d6:6e:5b:bf:
a1:84:59:5b:f1:da:b7:2e:fe:0d:2d:4e:da:b0:c7:77:8b:e5:
ce:15:c8:5a:5a:65:0d:93:ec:4f:d5:54:49:16:d4:f4:3a:5e:
fc:c9:93:f3:2d:35:38:c3:1f:5c:7d:89:e5:2e:15:d5:6b:fd:
92:5d:ac:2d:89:d8:02:c2:59:3c:1b:f1:92:fa:7f:23:8d:58:
c5:7a:70:a4:b6:fa:d0:ed:a5:da:be:dd:6b:07:8c:a7:f6:dd:
b2:ee:10:d4:bf:a6:57:78:3e:8b:71:2e:6f:9e:a7:14:08:c1:
f9:89:cd:e7:aa:05:08:f8:47:d9:10:61:44:a2:83:07:8b:8e:
51:79:e5:f1:92:90:d9:b2:c3:a1:3e:35:8e:3b:74:84:93:72:
66:2c:36:3d:c9:d5:9d:14:1c:05:d7:68:ff:00:17:78:c5:be:
81:cc:0a:a1:d3:1b:0c:fc:16:79:3e:12:6e:81:a4:e5:ae:e3:
38:fb:5f:a4:f2:f8:fa:d4:d0:86:8e:87:cb:39:3e:a8:15:02:
f9:8b:0b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:46 2025 by rpki-client