Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/626fa6-6eca-476e-a5af-afe63376c88f/1/qGGvUGy_c6YH-HrdjDML7VIWCY4.roa
File: qGGvUGy_c6YH-HrdjDML7VIWCY4.roa (raw, json)
Hash identifier: V/FLt2h/IwdgEahI4asuZlSTM3yWl3SXdGCi84N14U8=
Subject key identifier: A8:61:AF:50:6C:BF:73:A6:07:F8:7A:DD:8C:33:0B:ED:52:16:09:8E
Certificate issuer: /CN=eedde41f362e98ae37d1efc7caf3e7d3c1653ee2
Certificate serial: 018FC9E34E8C988DDC6FC0659F141CFCB90A
Authority key identifier: EE:DD:E4:1F:36:2E:98:AE:37:D1:EF:C7:CA:F3:E7:D3:C1:65:3E:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7t3kHzYumK430e_HyvPn08FlPuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/626fa6-6eca-476e-a5af-afe63376c88f/1/qGGvUGy_c6YH-HrdjDML7VIWCY4.roa
Signing time: Thu 30 May 2024 14:24:28 +0000
ROA not before: Thu 30 May 2024 14:24:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31103
IP address blocks: 62.141.48.0/20 maxlen: 24
84.19.160.0/19 maxlen: 24
84.19.167.0/24 maxlen: 24
84.19.188.0/24 maxlen: 24
87.118.64.0/18 maxlen: 24
87.118.67.0/24 maxlen: 24
87.118.83.0/24 maxlen: 24
87.118.86.0/24 maxlen: 24
87.118.92.0/24 maxlen: 24
87.118.120.0/24 maxlen: 24
95.169.160.0/24 maxlen: 24
95.169.161.0/24 maxlen: 24
95.169.169.0/24 maxlen: 24
95.169.170.0/24 maxlen: 24
95.169.181.0/24 maxlen: 24
95.169.182.0/24 maxlen: 24
95.169.183.0/24 maxlen: 24
95.169.184.0/22 maxlen: 24
95.169.186.0/24 maxlen: 24
95.169.187.0/24 maxlen: 24
95.169.188.0/24 maxlen: 24
95.169.189.0/24 maxlen: 24
95.169.190.0/23 maxlen: 24
217.114.208.0/20 maxlen: 24
2001:1b60::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c9:e3:4e:8c:98:8d:dc:6f:c0:65:9f:14:1c:fc:b9:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eedde41f362e98ae37d1efc7caf3e7d3c1653ee2
Validity
Not Before: May 30 14:24:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a861af506cbf73a607f87add8c330bed5216098e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d4:08:2e:c1:38:47:32:74:06:26:a6:6d:8d:
92:c3:7d:12:10:a3:11:6c:5f:19:7a:2b:9c:84:4c:
9d:e3:51:7e:ab:fa:cb:ca:3b:f3:24:97:38:89:28:
c5:7f:60:5b:4e:99:b5:e0:d3:c2:87:36:b8:18:a6:
9f:f2:11:ec:29:e1:dd:9e:f7:e0:d3:fd:a0:c0:f1:
98:06:a7:ad:55:77:91:3c:b4:92:9a:7f:c0:fc:8b:
fb:b6:3e:07:91:cd:b6:71:82:16:b1:b2:78:bc:e4:
73:dd:63:65:0c:da:10:d5:31:69:5c:4b:1d:a5:53:
26:56:cf:d8:c0:38:85:8d:8c:e8:29:73:24:b5:61:
65:36:19:22:7e:7e:df:23:bf:33:c5:ff:f6:e3:db:
2c:44:8b:bf:f4:b6:15:51:73:1b:b1:27:51:47:80:
af:62:98:28:0d:85:0c:5f:b8:af:9a:df:3e:9f:bf:
04:e9:03:bd:db:3b:a4:83:16:51:d4:41:d5:38:ff:
02:7f:e5:bc:91:13:a7:77:e8:df:61:17:a0:62:17:
37:9b:38:d7:e6:53:50:53:cd:bc:60:cc:1d:b9:60:
22:03:85:2e:fc:9c:10:e2:f5:2b:55:a4:52:93:73:
ed:65:1f:cc:9b:08:cd:a7:ca:b5:dd:2d:fd:82:f7:
00:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:61:AF:50:6C:BF:73:A6:07:F8:7A:DD:8C:33:0B:ED:52:16:09:8E
X509v3 Authority Key Identifier:
keyid:EE:DD:E4:1F:36:2E:98:AE:37:D1:EF:C7:CA:F3:E7:D3:C1:65:3E:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7t3kHzYumK430e_HyvPn08FlPuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/626fa6-6eca-476e-a5af-afe63376c88f/1/qGGvUGy_c6YH-HrdjDML7VIWCY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/626fa6-6eca-476e-a5af-afe63376c88f/1/7t3kHzYumK430e_HyvPn08FlPuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.141.48.0/20
84.19.160.0/19
87.118.64.0/18
95.169.160.0/23
95.169.169.0-95.169.170.255
95.169.181.0-95.169.191.255
217.114.208.0/20
IPv6:
2001:1b60::/29
Signature Algorithm: sha256WithRSAEncryption
4f:81:e3:b3:f7:29:08:07:7c:e1:f7:5b:7a:9b:8b:e9:d6:f6:
bc:43:22:93:c7:d4:cf:a0:65:8f:37:1a:95:b0:89:5a:57:e0:
32:a6:34:12:53:c0:f2:8f:bc:4c:27:9c:df:23:27:1b:ce:2a:
7a:0a:dd:25:47:53:66:57:18:6c:92:f8:5e:7e:8a:b2:ef:96:
5a:00:48:8a:e8:55:0f:00:bf:d9:5b:fe:8f:36:65:c6:3d:f1:
05:d5:46:2a:64:cd:e1:27:1b:fc:5b:a9:be:ef:46:ad:d7:c6:
2a:29:24:d8:fe:d2:cf:32:77:57:a9:1f:da:24:6e:ba:90:cc:
cc:0e:17:c3:26:7c:58:b6:30:39:0b:af:21:73:87:f0:ed:59:
13:c3:94:34:b9:2a:17:d9:a6:be:95:57:bc:2f:e7:e3:99:b1:
a1:3e:b6:fe:9b:2d:8e:db:4a:f3:88:26:76:79:b2:73:6a:87:
92:f1:45:94:99:f2:e8:e4:c3:81:7a:c7:20:fe:d9:83:df:77:
a5:6f:f9:67:47:18:7d:c7:95:f4:6f:c4:fc:b7:cd:c2:2b:4e:
7e:1a:a4:5a:00:ca:d6:b8:a7:06:fc:5d:82:da:b2:45:0c:c6:
4e:ab:45:04:94:48:90:af:31:59:13:2d:31:94:66:a8:03:77:
8e:2d:91:ba
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgISAY/J406MmI3cb8BlnxQc/LkKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlZGRlNDFmMzYyZTk4YWUzN2QxZWZjN2NhZjNlN2QzYzE2
NTNlZTIwHhcNMjQwNTMwMTQyNDI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODYxYWY1MDZjYmY3M2E2MDdmODdhZGQ4YzMzMGJlZDUyMTYwOThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntQILsE4RzJ0BiambY2Sw30SEKMR
bF8ZeiuchEyd41F+q/rLyjvzJJc4iSjFf2BbTpm14NPChza4GKaf8hHsKeHdnvfg
0/2gwPGYBqetVXeRPLSSmn/A/Iv7tj4Hkc22cYIWsbJ4vORz3WNlDNoQ1TFpXEsd
pVMmVs/YwDiFjYzoKXMktWFlNhkifn7fI78zxf/249ssRIu/9LYVUXMbsSdRR4Cv
YpgoDYUMX7ivmt8+n78E6QO92zukgxZR1EHVOP8Cf+W8kROnd+jfYRegYhc3mzjX
5lNQU828YMwduWAiA4Uu/JwQ4vUrVaRSk3PtZR/MmwjNp8q13S39gvcAmQIDAQAB
o4ICTDCCAkgwHQYDVR0OBBYEFKhhr1Bsv3OmB/h63YwzC+1SFgmOMB8GA1UdIwQY
MBaAFO7d5B82LpiuN9Hvx8rz59PBZT7iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3Qza0h6WXVtSzQzMGVfSHl2UG4wOEZsUHVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My82MjZmYTYtNmVjYS00NzZlLWE1YWYt
YWZlNjMzNzZjODhmLzEvcUdHdlVHeV9jNllILUhyZGpETUw3VklXQ1k0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My82MjZmYTYtNmVjYS00NzZlLWE1YWYtYWZlNjMzNzZjODhm
LzEvN3Qza0h6WXVtSzQzMGVfSHl2UG4wOEZsUHVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGIGCCsGAQUFBwEHAQH/BFMwUTBABAIAATA6AwQEPo0wAwQF
VBOgAwQGV3ZAAwQBX6mgMAwDBABfqakDBABfqaowDAMEAF+ptQMEBl+pgAMEBNly
0DANBAIAAjAHAwUDIAEbYDANBgkqhkiG9w0BAQsFAAOCAQEAT4Hjs/cpCAd84fdb
epuL6db2vEMik8fUz6BljzcalbCJWlfgMqY0ElPA8o+8TCec3yMnG84qegrdJUdT
ZlcYbJL4Xn6Ksu+WWgBIiuhVDwC/2Vv+jzZlxj3xBdVGKmTN4Scb/Fupvu9GrdfG
Kikk2P7SzzJ3V6kf2iRuupDMzA4XwyZ8WLYwOQuvIXOH8O1ZE8OUNLkqF9mmvpVX
vC/n45mxoT62/pstjttK84gmdnmyc2qHkvFFlJny6OTDgXrHIP7Zg993pW/5Z0cY
fceV9G/E/LfNwitOfhqkWgDK1rinBvxdgtqyRQzGTqtFBJRIkK8xWRMtMZRmqAN3
ji2Rug==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:34 2024 by rpki-client on console-ams.rpki-client.org