Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/qpC98OMwkizZ7TpQLUexCbJXHrU.roa
File: qpC98OMwkizZ7TpQLUexCbJXHrU.roa (raw, json)
Hash identifier: aXm8lULFZZGFSLX8FbSJW769EcqD4P9zb+ThJHg0uLA=
Subject key identifier: AA:90:BD:F0:E3:30:92:2C:D9:ED:3A:50:2D:47:B1:09:B2:57:1E:B5
Certificate issuer: /CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Certificate serial: 0194DF807AD2800A035A5586D685D840F1A9
Authority key identifier: 40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/qpC98OMwkizZ7TpQLUexCbJXHrU.roa
Signing time: Fri 07 Feb 2025 08:22:06 +0000
ROA not before: Fri 07 Feb 2025 08:22:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44043
IP address blocks: 31.14.12.0/24 maxlen: 24
31.14.13.0/24 maxlen: 24
31.14.14.0/24 maxlen: 24
31.14.15.0/24 maxlen: 24
31.14.22.0/24 maxlen: 24
31.14.23.0/24 maxlen: 24
46.102.249.0/24 maxlen: 24
89.36.131.0/24 maxlen: 24
89.44.47.0/24 maxlen: 24
89.44.120.0/24 maxlen: 24
89.44.138.0/24 maxlen: 24
89.44.139.0/24 maxlen: 24
89.46.7.0/24 maxlen: 24
91.195.28.0/24 maxlen: 24
91.195.29.0/24 maxlen: 24
92.114.94.0/24 maxlen: 24
92.114.95.0/24 maxlen: 24
94.176.104.0/24 maxlen: 24
94.176.105.0/24 maxlen: 24
176.126.200.0/24 maxlen: 24
176.126.201.0/24 maxlen: 24
176.126.202.0/24 maxlen: 24
176.126.203.0/24 maxlen: 24
176.223.120.0/23 maxlen: 23
176.223.122.0/23 maxlen: 23
176.223.124.0/23 maxlen: 23
176.223.126.0/23 maxlen: 23
185.92.192.0/24 maxlen: 24
185.92.193.0/24 maxlen: 24
185.92.194.0/24 maxlen: 24
185.92.195.0/24 maxlen: 24
188.212.156.0/24 maxlen: 24
188.213.20.0/23 maxlen: 23
188.215.244.0/23 maxlen: 23
188.215.250.0/23 maxlen: 23
188.240.2.0/23 maxlen: 23
188.240.235.0/24 maxlen: 24
188.241.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:df:80:7a:d2:80:0a:03:5a:55:86:d6:85:d8:40:f1:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Validity
Not Before: Feb 7 08:22:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa90bdf0e330922cd9ed3a502d47b109b2571eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ac:75:59:b2:0d:ef:49:a8:f6:17:01:bf:43:
b0:8f:e0:59:78:0f:3b:50:bf:47:95:61:20:f4:b5:
63:33:77:9b:ad:ed:34:09:d7:39:2b:69:14:12:b8:
6c:de:4f:89:52:8f:91:9c:1f:97:23:27:73:be:7d:
ae:d4:82:3e:75:6d:b9:57:98:2b:fa:30:4c:c7:ae:
4b:44:6c:5b:94:31:e8:3c:1c:46:6b:cd:14:6c:2a:
b3:16:7f:d7:72:e0:45:26:78:e5:e2:cd:65:2b:af:
23:35:1e:2b:1d:81:d8:2d:d6:21:70:0a:ef:3a:24:
0b:67:4f:27:04:bf:f1:00:54:74:cd:7f:78:29:a1:
7f:18:36:c8:2d:48:14:27:e7:22:ea:26:33:51:ef:
b8:b8:35:ae:4b:eb:25:91:de:9d:01:aa:48:ec:16:
1f:26:6f:df:27:74:cb:71:49:ba:62:b8:a1:06:d7:
9f:d7:e1:4f:6d:3f:9f:d7:27:46:2d:a8:ce:00:cf:
72:c0:4f:85:7c:8a:40:4a:48:1b:d5:c6:ea:e2:97:
e6:35:a3:0e:44:d6:eb:0e:02:d1:01:68:e3:94:b7:
10:18:21:78:f5:e3:db:4f:77:ad:fa:37:c1:6c:50:
1e:ef:94:a2:d9:99:40:7d:68:c4:be:c9:ac:50:f9:
a2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:90:BD:F0:E3:30:92:2C:D9:ED:3A:50:2D:47:B1:09:B2:57:1E:B5
X509v3 Authority Key Identifier:
keyid:40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/qpC98OMwkizZ7TpQLUexCbJXHrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.12.0/22
31.14.22.0/23
46.102.249.0/24
89.36.131.0/24
89.44.47.0/24
89.44.120.0/24
89.44.138.0/23
89.46.7.0/24
91.195.28.0/23
92.114.94.0/23
94.176.104.0/23
176.126.200.0/22
176.223.120.0/21
185.92.192.0/22
188.212.156.0/24
188.213.20.0/23
188.215.244.0/23
188.215.250.0/23
188.240.2.0/23
188.240.235.0/24
188.241.183.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:de:1a:89:55:9b:8f:7a:80:d8:69:33:3f:fa:7e:ab:cd:56:
2e:6b:fe:fd:51:5e:f1:37:bd:27:4b:10:1f:05:35:d2:bc:09:
7e:a2:16:b0:f9:bf:01:4e:a8:d3:d7:c6:9d:ab:ea:0c:2a:89:
52:a7:97:cf:0b:64:25:1b:e5:a1:6e:88:c4:15:77:94:01:64:
68:b6:1b:ab:7b:b9:53:e5:26:5b:dc:1f:36:98:42:f4:2e:ef:
f1:4a:2b:8d:66:cd:40:ec:7e:63:c2:d5:41:27:4f:54:ee:50:
c0:d8:cf:f9:8b:3c:f7:8f:25:58:c6:d8:07:ac:34:e8:37:66:
57:ef:d6:22:dc:1a:73:d3:ea:56:0b:cc:70:ef:25:21:cd:89:
e7:f6:ef:1e:dd:9f:22:73:a0:c0:94:0f:23:04:7f:03:f4:7c:
87:bf:4e:5d:25:b9:8a:f4:cf:ae:a0:39:62:37:87:02:2f:6f:
d1:fc:c8:f1:16:b7:51:68:3b:a1:fb:55:b5:67:90:77:ef:70:
d8:25:94:fb:06:8d:6e:0a:ca:44:0f:95:5c:b5:9d:ca:0b:16:
cc:67:af:4f:21:a5:ca:c6:17:59:52:cb:01:e9:03:88:e7:bb:
c2:3d:22:33:07:fe:20:73:bd:b2:ff:c8:72:bf:be:99:c3:ad:
c4:4d:32:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:29:28 2025 by rpki-client