Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/QqwjYi9tcHOngN9yrHO5y3rwFB8.roa
File: QqwjYi9tcHOngN9yrHO5y3rwFB8.roa (raw, json)
Hash identifier: vSSWn7/sv/BaTL/HvWh6nDrnDOrhML3eIVlvBjnTEBI=
Subject key identifier: 42:AC:23:62:2F:6D:70:73:A7:80:DF:72:AC:73:B9:CB:7A:F0:14:1F
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 01941F8C588227AF811C8CDF72FB1A423ED1
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/QqwjYi9tcHOngN9yrHO5y3rwFB8.roa
Signing time: Wed 01 Jan 2025 01:47:58 +0000
ROA not before: Wed 01 Jan 2025 01:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31363
IP address blocks: 80.90.250.0/24 maxlen: 24
86.62.75.0/24 maxlen: 24
86.62.79.0/24 maxlen: 24
86.62.84.0/24 maxlen: 24
86.62.92.0/24 maxlen: 24
86.62.94.0/24 maxlen: 24
86.62.96.0/24 maxlen: 24
86.62.98.0/24 maxlen: 24
86.62.99.0/24 maxlen: 24
86.62.102.0/24 maxlen: 24
86.62.103.0/24 maxlen: 24
86.62.110.0/24 maxlen: 24
86.62.112.0/24 maxlen: 24
86.62.113.0/24 maxlen: 24
86.62.114.0/24 maxlen: 24
86.62.115.0/24 maxlen: 24
86.62.116.0/24 maxlen: 24
86.62.117.0/24 maxlen: 24
86.62.118.0/24 maxlen: 24
86.62.119.0/24 maxlen: 24
86.62.125.0/24 maxlen: 24
195.54.207.0/24 maxlen: 24
195.54.209.0/24 maxlen: 24
195.54.210.0/24 maxlen: 24
195.54.211.0/24 maxlen: 24
195.91.133.0/24 maxlen: 24
195.91.138.0/24 maxlen: 24
195.91.144.0/24 maxlen: 24
195.91.145.0/24 maxlen: 24
195.91.146.0/24 maxlen: 24
195.91.147.0/24 maxlen: 24
195.91.148.0/24 maxlen: 24
195.91.149.0/24 maxlen: 24
195.91.150.0/24 maxlen: 24
195.91.151.0/24 maxlen: 24
195.91.153.0/24 maxlen: 24
195.91.156.0/24 maxlen: 24
195.91.160.0/24 maxlen: 24
195.91.165.0/24 maxlen: 24
195.91.166.0/24 maxlen: 24
195.91.168.0/24 maxlen: 24
195.91.169.0/24 maxlen: 24
195.91.170.0/24 maxlen: 24
195.91.171.0/24 maxlen: 24
195.91.172.0/24 maxlen: 24
195.91.173.0/24 maxlen: 24
195.91.174.0/24 maxlen: 24
195.91.175.0/24 maxlen: 24
195.91.178.0/24 maxlen: 24
195.91.179.0/24 maxlen: 24
195.91.180.0/24 maxlen: 24
195.91.181.0/24 maxlen: 24
195.91.182.0/24 maxlen: 24
195.91.184.0/24 maxlen: 24
195.91.187.0/24 maxlen: 24
195.91.188.0/24 maxlen: 24
195.91.191.0/24 maxlen: 24
195.91.192.0/24 maxlen: 24
195.91.195.0/24 maxlen: 24
195.91.196.0/24 maxlen: 24
195.91.197.0/24 maxlen: 24
195.91.204.0/24 maxlen: 24
195.91.207.0/24 maxlen: 24
195.91.208.0/24 maxlen: 24
195.91.209.0/24 maxlen: 24
195.91.210.0/24 maxlen: 24
195.91.211.0/24 maxlen: 24
195.91.213.0/24 maxlen: 24
195.91.215.0/24 maxlen: 24
195.91.217.0/24 maxlen: 24
195.91.218.0/24 maxlen: 24
195.91.219.0/24 maxlen: 24
195.91.220.0/24 maxlen: 24
195.91.221.0/24 maxlen: 24
195.91.222.0/24 maxlen: 24
195.91.223.0/24 maxlen: 24
195.91.224.0/24 maxlen: 24
195.91.225.0/24 maxlen: 24
195.91.226.0/24 maxlen: 24
195.91.227.0/24 maxlen: 24
195.91.228.0/24 maxlen: 24
195.91.229.0/24 maxlen: 24
195.91.230.0/24 maxlen: 24
195.91.231.0/24 maxlen: 24
195.91.232.0/24 maxlen: 24
195.91.233.0/24 maxlen: 24
195.91.234.0/24 maxlen: 24
195.91.235.0/24 maxlen: 24
195.91.236.0/24 maxlen: 24
195.91.237.0/24 maxlen: 24
195.91.238.0/24 maxlen: 24
195.91.239.0/24 maxlen: 24
195.91.240.0/24 maxlen: 24
195.91.241.0/24 maxlen: 24
195.91.242.0/24 maxlen: 24
195.91.243.0/24 maxlen: 24
195.91.244.0/24 maxlen: 24
195.91.245.0/24 maxlen: 24
195.91.246.0/24 maxlen: 24
195.91.247.0/24 maxlen: 24
195.91.252.0/24 maxlen: 24
195.91.254.0/24 maxlen: 24
195.91.255.0/24 maxlen: 24
2a02:2698:9800::/38 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:58:82:27:af:81:1c:8c:df:72:fb:1a:42:3e:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 01:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42ac23622f6d7073a780df72ac73b9cb7af0141f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:03:37:e2:b1:2f:36:8b:11:4f:72:d3:a3:d9:
9c:05:06:97:0b:27:66:2a:36:00:b0:59:f6:cd:bd:
db:d8:07:54:0f:73:62:b3:86:02:d8:09:2e:b8:af:
a9:2f:6d:bc:93:55:36:c0:59:ef:2b:7e:12:ae:a6:
cd:3c:89:5c:f8:95:2e:c9:c3:42:4d:ef:fc:5f:66:
10:40:70:7c:e9:a8:aa:7d:d5:a4:81:14:bf:ad:83:
13:f4:a6:5e:14:e8:5d:45:17:ba:c7:7b:5c:15:eb:
db:83:36:87:f0:df:b2:e3:5a:ec:c3:93:d8:4d:cc:
aa:29:12:7c:1c:fe:ce:b2:03:6f:83:f0:9c:a3:f5:
44:18:78:a1:f0:df:48:36:12:42:2b:e9:e7:49:c8:
20:e6:03:cd:e0:76:81:38:53:b4:1f:73:79:17:33:
a2:10:ed:9c:95:5a:d7:c4:a3:2b:ba:73:ef:51:32:
08:cd:c0:da:9e:66:1f:29:31:2c:12:93:3d:e8:c7:
70:93:01:d8:d4:02:a2:fa:3e:42:ed:6a:e2:75:53:
d3:84:2c:a7:da:a4:23:81:70:f6:f8:08:b6:8c:77:
bf:65:5a:1c:9d:ca:19:6d:0e:06:d3:59:49:0f:d6:
29:7e:76:63:ae:68:97:35:d7:0c:22:34:e2:2a:67:
4a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:AC:23:62:2F:6D:70:73:A7:80:DF:72:AC:73:B9:CB:7A:F0:14:1F
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/QqwjYi9tcHOngN9yrHO5y3rwFB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.90.250.0/24
86.62.75.0/24
86.62.79.0/24
86.62.84.0/24
86.62.92.0/24
86.62.94.0/24
86.62.96.0/24
86.62.98.0/23
86.62.102.0/23
86.62.110.0/24
86.62.112.0/21
86.62.125.0/24
195.54.207.0/24
195.54.209.0-195.54.211.255
195.91.133.0/24
195.91.138.0/24
195.91.144.0/21
195.91.153.0/24
195.91.156.0/24
195.91.160.0/24
195.91.165.0-195.91.166.255
195.91.168.0/21
195.91.178.0-195.91.182.255
195.91.184.0/24
195.91.187.0-195.91.188.255
195.91.191.0-195.91.192.255
195.91.195.0-195.91.197.255
195.91.204.0/24
195.91.207.0-195.91.211.255
195.91.213.0/24
195.91.215.0/24
195.91.217.0-195.91.247.255
195.91.252.0/24
195.91.254.0/23
IPv6:
2a02:2698:9800::/38
Signature Algorithm: sha256WithRSAEncryption
3f:8e:d1:86:06:6f:52:5a:02:ae:a6:69:7f:b0:10:65:5d:e3:
a7:dc:ce:d7:14:e5:83:ce:77:ac:db:6e:c6:79:de:36:b0:24:
58:9e:f5:dc:cf:e8:55:4a:00:8c:26:cb:3f:a7:c7:12:37:e2:
15:ee:bd:89:49:8c:24:7d:3f:99:15:8d:04:3f:68:95:5a:1b:
85:10:f8:e1:8e:eb:25:4a:b9:ff:6f:cc:ee:55:f3:b1:aa:6b:
46:3b:82:83:e2:93:1e:71:62:36:1d:92:eb:fc:57:25:39:f2:
9b:7c:c0:7b:ef:5f:b0:7f:66:97:b2:a3:84:6f:03:ac:f3:7a:
b2:c1:b4:47:65:53:6b:ca:4e:b7:05:50:1f:30:2d:8d:07:03:
41:db:fe:65:d1:0c:61:47:f8:0d:15:91:99:c2:19:b2:34:4b:
a6:e0:7e:42:6c:5c:27:9f:46:03:6b:8d:fa:b8:a1:6e:e1:77:
6c:d4:f6:69:29:6b:50:2e:43:e3:06:5a:b2:f1:77:e2:5b:b3:
a0:95:60:25:22:a6:2d:dc:00:30:f3:f7:25:3b:5b:45:b2:42:
fd:40:68:76:25:2d:37:4d:ef:0d:32:8a:45:53:95:9c:17:0b:
2f:f2:99:8a:2e:2c:ad:86:7b:b7:10:6a:2f:1c:12:31:83:0d:
14:a1:5f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:50 2025 by rpki-client