Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/QDhkcH3--lX00OiUaJ2XzyO7RVA.roa
File: QDhkcH3--lX00OiUaJ2XzyO7RVA.roa (raw, json)
Hash identifier: BZrGV11Lf8/60IuB0wukSDqxXPW6mk+ys5TFKVCgevQ=
Subject key identifier: 40:38:64:70:7D:FE:FA:55:F4:D0:E8:94:68:9D:97:CF:23:BB:45:50
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 0188B82BE210CDAF5247E2050A2038447557
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/QDhkcH3--lX00OiUaJ2XzyO7RVA.roa
Signing time: Wed 14 Jun 2023 04:31:03 +0000
ROA not before: Wed 14 Jun 2023 04:31:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31363
IP address blocks: 86.62.84.0/24 maxlen: 24
86.62.96.0/24 maxlen: 24
86.62.92.0/24 maxlen: 24
86.62.102.0/24 maxlen: 24
86.62.125.0/24 maxlen: 24
195.91.254.0/24 maxlen: 24
195.91.255.0/24 maxlen: 24
195.91.208.0/24 maxlen: 24
195.91.209.0/24 maxlen: 24
195.91.210.0/24 maxlen: 24
195.91.211.0/24 maxlen: 24
195.91.213.0/24 maxlen: 24
195.91.215.0/24 maxlen: 24
195.91.217.0/24 maxlen: 24
195.91.218.0/24 maxlen: 24
195.91.219.0/24 maxlen: 24
195.91.222.0/24 maxlen: 24
195.91.223.0/24 maxlen: 24
195.91.224.0/24 maxlen: 24
195.91.220.0/24 maxlen: 24
195.91.221.0/24 maxlen: 24
195.91.225.0/24 maxlen: 24
195.91.226.0/24 maxlen: 24
195.91.232.0/24 maxlen: 24
195.91.233.0/24 maxlen: 24
195.91.229.0/24 maxlen: 24
195.91.230.0/24 maxlen: 24
195.91.231.0/24 maxlen: 24
195.91.228.0/24 maxlen: 24
195.91.236.0/24 maxlen: 24
195.91.237.0/24 maxlen: 24
195.91.238.0/24 maxlen: 24
195.91.234.0/24 maxlen: 24
195.91.235.0/24 maxlen: 24
195.91.239.0/24 maxlen: 24
195.91.240.0/24 maxlen: 24
195.91.246.0/24 maxlen: 24
195.91.243.0/24 maxlen: 24
195.91.244.0/24 maxlen: 24
195.91.245.0/24 maxlen: 24
195.91.241.0/24 maxlen: 24
195.91.242.0/24 maxlen: 24
195.91.247.0/24 maxlen: 24
86.62.75.0/24 maxlen: 24
195.91.149.0/24 maxlen: 24
195.91.148.0/24 maxlen: 24
195.91.156.0/24 maxlen: 24
195.91.160.0/24 maxlen: 24
195.91.168.0/24 maxlen: 24
195.91.169.0/24 maxlen: 24
195.91.170.0/24 maxlen: 24
195.91.171.0/24 maxlen: 24
195.91.172.0/24 maxlen: 24
195.91.173.0/24 maxlen: 24
195.91.174.0/24 maxlen: 24
195.91.175.0/24 maxlen: 24
195.91.181.0/24 maxlen: 24
195.91.184.0/24 maxlen: 24
195.91.191.0/24 maxlen: 24
195.91.187.0/24 maxlen: 24
195.91.138.0/24 maxlen: 24
195.91.133.0/24 maxlen: 24
2a02:2698:9800::/38 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b8:2b:e2:10:cd:af:52:47:e2:05:0a:20:38:44:75:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jun 14 04:31:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=403864707dfefa55f4d0e894689d97cf23bb4550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:64:42:d2:16:dd:2c:cf:b5:2b:03:8e:67:90:
93:6f:56:38:e4:23:28:20:c8:2a:6f:0e:74:84:0f:
2d:33:d2:e6:eb:69:7c:34:c8:d5:eb:c5:8a:fb:eb:
43:d3:6a:2b:6f:4c:b4:19:fb:5f:68:de:4c:11:c4:
6c:96:99:78:37:33:ad:ad:33:60:04:e3:81:5f:0c:
82:f4:37:42:89:be:a1:43:1e:f7:c3:58:0e:1e:67:
dd:fa:3d:e6:09:f1:a0:29:cd:3a:c6:7b:9e:6c:ab:
90:83:97:c9:01:5d:0c:86:f8:06:c1:2d:c9:6b:b3:
4d:85:7e:66:4b:66:62:39:ef:c8:69:d1:4a:5f:ba:
f0:81:6c:05:7d:e7:6e:e7:00:ec:9d:eb:23:bb:1f:
50:50:ca:22:a3:d6:4f:55:a0:c9:64:6f:84:9e:e7:
e8:87:45:ea:4d:71:29:ea:b7:f2:8c:c4:c0:f0:a7:
5b:c7:ed:53:09:23:1b:55:4c:d0:a1:66:4d:01:5f:
85:68:e0:31:54:70:3e:d7:e5:cd:9c:13:aa:ce:5a:
52:a6:ca:6f:db:96:d9:d0:21:b2:25:79:5e:b9:6d:
b3:ab:06:d0:d6:46:b2:8c:c4:69:56:4e:5a:ce:01:
5a:ae:52:ef:71:28:05:0b:50:fe:43:a7:3e:1f:f9:
5b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:38:64:70:7D:FE:FA:55:F4:D0:E8:94:68:9D:97:CF:23:BB:45:50
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/QDhkcH3--lX00OiUaJ2XzyO7RVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.62.75.0/24
86.62.84.0/24
86.62.92.0/24
86.62.96.0/24
86.62.102.0/24
86.62.125.0/24
195.91.133.0/24
195.91.138.0/24
195.91.148.0/23
195.91.156.0/24
195.91.160.0/24
195.91.168.0/21
195.91.181.0/24
195.91.184.0/24
195.91.187.0/24
195.91.191.0/24
195.91.208.0/22
195.91.213.0/24
195.91.215.0/24
195.91.217.0-195.91.226.255
195.91.228.0-195.91.247.255
195.91.254.0/23
IPv6:
2a02:2698:9800::/38
Signature Algorithm: sha256WithRSAEncryption
be:6f:80:0e:64:5c:3d:c5:20:dd:35:40:e5:b9:52:7f:51:90:
67:94:3d:7d:21:02:d0:ba:c9:5e:83:44:fd:e9:d1:93:e4:3e:
0c:4f:89:32:64:30:5f:31:b0:ca:24:12:14:d9:e2:7d:a6:1d:
ba:d6:a1:bd:ff:49:30:f2:44:89:9d:ce:4a:24:5d:5c:05:ad:
8e:7d:69:16:78:89:16:13:f7:42:a9:50:9d:2d:58:04:77:1e:
88:d3:f9:54:5f:8e:cc:77:de:01:03:39:97:c4:8c:84:07:26:
00:f6:6c:63:1a:ac:9f:82:65:ea:e8:ce:04:29:b6:d5:52:aa:
fa:af:a3:f0:3f:d3:ef:05:4a:c9:67:8c:db:14:5a:59:98:df:
16:f6:4f:3f:8f:c2:ed:a1:49:6c:4b:8b:aa:e1:97:2b:da:8d:
96:19:ed:81:51:b6:cb:14:ed:ff:96:4b:04:1f:7f:6a:c2:cc:
a2:18:dc:a3:47:d3:66:9c:28:34:00:8c:2a:f5:4b:ea:0b:5b:
e8:50:29:c9:aa:61:a7:28:37:e5:42:3a:f5:1f:2b:17:83:e5:
de:11:2c:0f:59:1f:22:0c:f4:9b:c4:97:36:09:f2:3c:ad:52:
31:13:c5:1a:e6:24:a6:55:7b:d9:e8:5c:70:06:80:dc:b6:d2:
42:42:ed:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:38 2025 by rpki-client