Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Q59NLjYJibMhYMVguI_EEs5mjw4.roa
File: Q59NLjYJibMhYMVguI_EEs5mjw4.roa (raw, json)
Hash identifier: WE8NBkINtyNeucGviKD6wB6jN0Wlr21fRjVDTNMJj2U=
Subject key identifier: 43:9F:4D:2E:36:09:89:B3:21:60:C5:60:B8:8F:C4:12:CE:66:8F:0E
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 018CC7943D96F22D976B13FAFA1C4136F782
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Q59NLjYJibMhYMVguI_EEs5mjw4.roa
Signing time: Tue 02 Jan 2024 00:30:30 +0000
ROA not before: Tue 02 Jan 2024 00:30:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3257
IP address blocks: 193.141.0.0/23 maxlen: 23
193.141.2.0/24 maxlen: 24
46.33.64.0/19 maxlen: 24
194.120.112.0/22 maxlen: 22
194.120.120.0/22 maxlen: 22
193.242.80.0/20 maxlen: 20
194.121.52.0/22 maxlen: 22
192.16.202.0/24 maxlen: 24
77.67.0.0/17 maxlen: 24
193.141.40.0/22 maxlen: 22
193.141.44.0/23 maxlen: 23
134.222.0.0/16 maxlen: 16
212.222.0.0/16 maxlen: 24
194.45.182.0/23 maxlen: 23
212.221.0.0/17 maxlen: 24
194.122.248.0/22 maxlen: 22
213.251.0.0/18 maxlen: 24
185.160.40.0/22 maxlen: 22
194.123.164.0/24 maxlen: 24
194.120.0.0/24 maxlen: 24
213.254.192.0/18 maxlen: 24
194.123.122.0/24 maxlen: 24
194.120.43.0/24 maxlen: 24
194.122.80.0/21 maxlen: 21
62.132.114.0/23 maxlen: 23
62.132.116.0/23 maxlen: 23
192.129.36.0/24 maxlen: 24
62.132.132.0/23 maxlen: 23
192.129.32.0/23 maxlen: 23
192.129.43.0/24 maxlen: 24
192.129.44.0/24 maxlen: 24
192.129.46.0/23 maxlen: 23
192.129.48.0/23 maxlen: 23
194.45.4.0/23 maxlen: 23
192.129.54.0/24 maxlen: 24
194.122.120.0/21 maxlen: 21
62.41.160.0/24 maxlen: 24
192.129.56.0/23 maxlen: 24
62.41.80.0/22 maxlen: 24
62.41.84.0/23 maxlen: 24
62.41.102.0/24 maxlen: 24
212.115.128.0/18 maxlen: 24
212.1.0.0/19 maxlen: 19
194.122.76.0/22 maxlen: 22
213.200.64.0/18 maxlen: 18
195.143.0.0/16 maxlen: 24
194.45.98.0/23 maxlen: 23
194.122.224.0/20 maxlen: 20
141.136.96.0/20 maxlen: 20
194.45.12.0/23 maxlen: 23
89.149.128.0/18 maxlen: 24
87.119.64.0/18 maxlen: 24
194.45.47.0/24 maxlen: 24
194.121.123.0/24 maxlen: 24
92.71.0.0/17 maxlen: 17
192.67.190.0/23 maxlen: 23
192.67.192.0/22 maxlen: 22
212.189.0.0/17 maxlen: 17
192.67.196.0/24 maxlen: 24
77.77.128.0/18 maxlen: 24
193.141.140.0/23 maxlen: 23
194.121.104.0/23 maxlen: 23
62.41.16.0/21 maxlen: 24
62.132.0.0/22 maxlen: 22
62.41.24.0/22 maxlen: 24
62.132.16.0/22 maxlen: 22
62.132.24.0/23 maxlen: 23
62.41.32.0/24 maxlen: 24
62.41.37.0/24 maxlen: 24
62.132.28.0/24 maxlen: 24
92.71.128.0/18 maxlen: 18
62.41.56.0/21 maxlen: 24
62.132.42.0/23 maxlen: 23
194.41.62.0/24 maxlen: 24
62.41.64.0/20 maxlen: 24
192.54.104.0/24 maxlen: 24
194.121.203.0/24 maxlen: 24
62.41.0.0/20 maxlen: 24
194.121.220.0/22 maxlen: 22
2a00:1750::/32 maxlen: 32
2001:680:12::/48 maxlen: 48
2001:680:19::/48 maxlen: 48
2001:680::/32 maxlen: 32
2001:680:20::/48 maxlen: 48
2001:680:16::/48 maxlen: 48
2001:668::/29 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:3d:96:f2:2d:97:6b:13:fa:fa:1c:41:36:f7:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jan 2 00:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=439f4d2e360989b32160c560b88fc412ce668f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:62:54:b9:48:a0:4f:5e:db:f5:d9:97:2d:1c:
27:4e:cd:a1:cd:41:87:be:a7:ca:40:c1:e2:67:5b:
ba:52:84:e3:3a:63:d2:8d:5a:18:38:4c:0e:c3:19:
c9:cd:15:9f:db:07:33:be:8f:3f:70:9d:a0:76:f7:
2a:8f:ad:a9:80:77:35:02:91:18:59:13:69:d3:ef:
af:30:7d:3b:26:36:da:4d:ce:22:21:23:fe:c4:43:
51:80:47:c9:51:45:d9:68:bb:8b:3c:54:17:30:19:
78:4f:b6:c9:ed:47:92:ba:84:cf:5a:92:cc:83:10:
c4:f4:ac:86:cb:98:b9:26:0a:97:db:59:ac:ea:f1:
fd:13:18:8b:60:fc:15:08:5c:8b:d5:29:0a:75:4f:
93:31:61:f3:b4:aa:f9:5b:2c:46:6f:cc:bc:d5:3d:
b5:dd:1c:4a:df:d7:b7:7e:37:94:d6:99:f1:b0:8e:
b4:42:67:9d:58:7a:1a:1a:f7:09:20:8c:80:cc:27:
89:0f:d7:02:68:1d:23:b1:34:d7:23:80:8f:65:00:
76:b8:74:c8:11:b6:da:c4:2e:76:ee:8c:43:21:71:
90:05:55:17:02:48:94:38:0f:37:e4:f9:6a:f2:22:
60:cf:27:03:6e:a0:66:93:cf:01:ed:a3:3e:f2:83:
ba:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:9F:4D:2E:36:09:89:B3:21:60:C5:60:B8:8F:C4:12:CE:66:8F:0E
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Q59NLjYJibMhYMVguI_EEs5mjw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.33.64.0/19
62.41.0.0-62.41.27.255
62.41.32.0/24
62.41.37.0/24
62.41.56.0-62.41.85.255
62.41.102.0/24
62.41.160.0/24
62.132.0.0/22
62.132.16.0/22
62.132.24.0/23
62.132.28.0/24
62.132.42.0/23
62.132.114.0-62.132.117.255
62.132.132.0/23
77.67.0.0/17
77.77.128.0/18
87.119.64.0/18
89.149.128.0/18
92.71.0.0-92.71.191.255
134.222.0.0/16
141.136.96.0/20
185.160.40.0/22
192.16.202.0/24
192.54.104.0/24
192.67.190.0-192.67.196.255
192.129.32.0/23
192.129.36.0/24
192.129.43.0-192.129.44.255
192.129.46.0-192.129.49.255
192.129.54.0/24
192.129.56.0/23
193.141.0.0-193.141.2.255
193.141.40.0-193.141.45.255
193.141.140.0/23
193.242.80.0/20
194.41.62.0/24
194.45.4.0/23
194.45.12.0/23
194.45.47.0/24
194.45.98.0/23
194.45.182.0/23
194.120.0.0/24
194.120.43.0/24
194.120.112.0/22
194.120.120.0/22
194.121.52.0/22
194.121.104.0/23
194.121.123.0/24
194.121.203.0/24
194.121.220.0/22
194.122.76.0-194.122.87.255
194.122.120.0/21
194.122.224.0/20
194.122.248.0/22
194.123.122.0/24
194.123.164.0/24
195.143.0.0/16
212.1.0.0/19
212.115.128.0/18
212.189.0.0/17
212.221.0.0/17
212.222.0.0/16
213.200.64.0/18
213.251.0.0/18
213.254.192.0/18
IPv6:
2001:668::/29
2001:680::/32
2a00:1750::/32
Signature Algorithm: sha256WithRSAEncryption
38:ff:ae:e4:46:95:78:89:88:8d:7f:91:95:2a:bb:66:2e:cc:
f3:07:da:d3:46:c3:58:4a:5f:b8:7d:67:57:45:21:ef:c7:7c:
28:c4:bc:93:52:f2:b4:0d:55:dc:d2:db:6e:3c:7a:63:8b:fd:
c4:de:b0:b7:1a:42:be:48:f3:1c:a9:84:67:a2:aa:ad:86:c5:
b7:53:c7:8b:09:f1:14:ec:dc:54:a1:43:ee:1e:58:75:29:43:
a0:6b:63:3d:69:73:c9:ce:ee:a3:52:e0:e1:78:ab:60:ae:bf:
78:12:19:61:42:74:68:75:eb:30:ab:66:3e:37:60:4a:7c:4b:
d5:78:07:11:b8:7f:84:01:23:35:bd:c6:3c:3e:44:a2:e6:11:
b8:8c:99:c9:af:e9:88:a5:a9:6e:4c:f4:b0:ed:9a:f7:5f:39:
8c:a4:40:a2:c0:bc:83:79:75:d5:8e:33:2f:30:87:7a:60:70:
d8:d3:b1:b7:0e:95:aa:3e:d1:9c:97:29:04:ef:26:b6:52:0c:
fe:ba:58:52:e0:75:d4:3e:19:a0:37:e9:3a:ec:64:5a:e6:5c:
a8:62:8d:ac:29:93:f9:08:8d:b9:31:1d:76:18:50:cb:46:4b:
b5:55:70:9f:2a:92:09:6e:8f:b9:13:20:6c:12:57:4e:c0:fb:
6d:60:62:f8
-----BEGIN CERTIFICATE-----
MIIG7jCCBdagAwIBAgISAYzHlD2W8i2XaxP6+hxBNveCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjQwMTAyMDAzMDMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MzlmNGQyZTM2MDk4OWIzMjE2MGM1NjBiODhmYzQxMmNlNjY4ZjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmJUuUigT17b9dmXLRwnTs2hzUGH
vqfKQMHiZ1u6UoTjOmPSjVoYOEwOwxnJzRWf2wczvo8/cJ2gdvcqj62pgHc1ApEY
WRNp0++vMH07JjbaTc4iISP+xENRgEfJUUXZaLuLPFQXMBl4T7bJ7UeSuoTPWpLM
gxDE9KyGy5i5JgqX21ms6vH9ExiLYPwVCFyL1SkKdU+TMWHztKr5WyxGb8y81T21
3RxK39e3fjeU1pnxsI60QmedWHoaGvcJIIyAzCeJD9cCaB0jsTTXI4CPZQB2uHTI
EbbaxC527oxDIXGQBVUXAkiUOA835Plq8iJgzycDbqBmk88B7aM+8oO6fwIDAQAB
o4ID+jCCA/YwHQYDVR0OBBYEFEOfTS42CYmzIWDFYLiPxBLOZo8OMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvUTU5TkxqWUppYk1oWU1WZ3VJX0VFczVtanc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICDgYIKwYBBQUHAQcBAf8EggH9MIIB+TCCAdgEAgABMIIB
0AMEBS4hQDALAwMAPikDBAI+KRgDBAA+KSADBAA+KSUwDAMEAz4pOAMEAT4pVAME
AD4pZgMEAD4poAMEAj6EAAMEAj6EEAMEAT6EGAMEAD6EHAMEAT6EKjAMAwQBPoRy
AwQBPoR0AwQBPoSEAwQHTUMAAwQGTU2AAwQGV3dAAwQGWZWAMAsDAwBcRwMEBlxH
gAMDAIbeAwQEjYhgAwQCuaAoAwQAwBDKAwQAwDZoMAwDBAHAQ74DBADAQ8QDBAHA
gSADBADAgSQwDAMEAMCBKwMEAMCBLDAMAwQBwIEuAwQBwIEwAwQAwIE2AwQBwIE4
MAsDAwDBjQMEAMGNAjAMAwQDwY0oAwQBwY0sAwQBwY2MAwQEwfJQAwQAwik+AwQB
wi0EAwQBwi0MAwQAwi0vAwQBwi1iAwQBwi22AwQAwngAAwQAwngrAwQCwnhwAwQC
wnh4AwQCwnk0AwQBwnloAwQAwnl7AwQAwnnLAwQCwnncMAwDBALCekwDBAPCelAD
BAPCengDBATCeuADBALCevgDBADCe3oDBADCe6QDAwDDjwMEBdQBAAMEBtRzgAME
B9S9AAMEB9TdAAMDANTeAwQG1chAAwQG1fsAAwQG1f7AMBsEAgACMBUDBQMgAQZo
AwUAIAEGgAMFACoAF1AwDQYJKoZIhvcNAQELBQADggEBADj/ruRGlXiJiI1/kZUq
u2YuzPMH2tNGw1hKX7h9Z1dFIe/HfCjEvJNS8rQNVdzS2248emOL/cTesLcaQr5I
8xyphGeiqq2GxbdTx4sJ8RTs3FShQ+4eWHUpQ6BrYz1pc8nO7qNS4OF4q2Cuv3gS
GWFCdGh16zCrZj43YEp8S9V4BxG4f4QBIzW9xjw+RKLmEbiMmcmv6YilqW5M9LDt
mvdfOYykQKLAvIN5ddWOMy8wh3pgcNjTsbcOlao+0ZyXKQTvJrZSDP66WFLgddQ+
GaA36TrsZFrmXKhijawpk/kIjbkxHXYYUMtGS7VVcJ8qkgluj7kTIGwSV07A+21g
Yvg=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:18:55 2025 by rpki-client