Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/qyD4qnaTsXkSQ8PXrtPsaJ0X-pE.roa
File: qyD4qnaTsXkSQ8PXrtPsaJ0X-pE.roa (raw, json)
Hash identifier: QxE42ChiZ03ZNPzS84F7yU1kLZoDWQAiFNL/cp1/Xvk=
Subject key identifier: AB:20:F8:AA:76:93:B1:79:12:43:C3:D7:AE:D3:EC:68:9D:17:FA:91
Certificate issuer: /CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Certificate serial: 01942B30B1D2BAFEC9564EE97B6415585359
Authority key identifier: 40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/qyD4qnaTsXkSQ8PXrtPsaJ0X-pE.roa
Signing time: Fri 03 Jan 2025 08:03:18 +0000
ROA not before: Fri 03 Jan 2025 08:03:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34358
IP address blocks: 37.251.128.0/19 maxlen: 19
37.251.160.0/20 maxlen: 20
37.251.248.0/21 maxlen: 24
37.251.255.0/24 maxlen: 24
77.81.164.0/23 maxlen: 23
86.105.192.0/24 maxlen: 24
89.32.44.0/22 maxlen: 22
89.32.44.0/24 maxlen: 24
89.35.173.0/24 maxlen: 24
89.36.128.0/23 maxlen: 23
89.36.128.0/24 maxlen: 24
89.36.129.0/24 maxlen: 24
89.36.130.0/24 maxlen: 24
89.36.131.0/24 maxlen: 24
89.36.132.0/23 maxlen: 24
89.36.134.0/24 maxlen: 24
89.36.135.0/24 maxlen: 24
89.38.248.0/24 maxlen: 24
89.38.249.0/24 maxlen: 24
89.38.250.0/23 maxlen: 23
89.38.252.0/22 maxlen: 22
89.42.11.0/24 maxlen: 24
89.45.192.0/21 maxlen: 21
89.45.192.0/23 maxlen: 23
91.200.120.0/22 maxlen: 22
91.200.120.0/23 maxlen: 23
91.200.122.0/23 maxlen: 23
91.208.142.0/24 maxlen: 24
93.119.227.0/24 maxlen: 24
94.24.29.0/24 maxlen: 24
94.24.48.0/21 maxlen: 21
94.24.72.0/22 maxlen: 22
94.24.76.0/23 maxlen: 23
94.24.78.0/24 maxlen: 24
109.95.8.0/21 maxlen: 21
128.0.46.0/23 maxlen: 23
185.171.184.0/24 maxlen: 24
185.171.185.0/24 maxlen: 24
185.171.187.0/24 maxlen: 24
188.214.142.0/24 maxlen: 24
188.215.48.0/21 maxlen: 21
193.239.130.0/23 maxlen: 23
193.242.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:2b:30:b1:d2:ba:fe:c9:56:4e:e9:7b:64:15:58:53:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Validity
Not Before: Jan 3 08:03:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab20f8aa7693b1791243c3d7aed3ec689d17fa91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:59:af:3a:af:66:aa:2b:d7:40:5b:7c:89:89:
52:da:77:98:06:c0:46:ed:91:51:51:75:6c:26:33:
cb:b4:eb:77:c7:85:53:02:ad:ca:b6:db:57:a8:92:
1a:2f:00:3d:91:3e:ee:30:ba:00:6f:90:98:7e:ac:
81:ad:d4:97:3d:bb:57:c5:d6:39:fb:90:1a:e0:e7:
0a:f1:41:f9:49:3a:2b:4a:56:23:dc:ee:02:86:01:
53:64:51:d7:c8:fa:82:4b:1f:a8:9a:50:ed:31:13:
58:af:ef:e9:13:a9:dd:17:ef:f9:4d:51:a8:00:da:
d4:5c:24:12:a1:3a:30:03:a9:8e:95:d1:17:df:1e:
f5:a6:fb:ca:a5:85:2b:98:1a:fd:50:ae:e3:be:41:
1f:bc:95:56:9d:e8:57:04:fc:83:8e:fe:12:fe:ab:
61:e4:82:34:47:e4:c7:bd:79:83:0f:b0:74:1b:6e:
b1:45:c2:68:c2:34:ea:5d:6b:bd:80:9f:46:df:38:
03:0b:61:2f:f9:3b:ef:de:17:b0:e2:e3:35:2f:c9:
1c:2b:10:9c:a2:62:99:99:76:90:d0:c4:6d:05:20:
e4:05:58:05:fd:ef:e3:60:de:34:54:42:12:99:8b:
7b:e7:d8:c2:8b:a0:8c:91:82:c2:70:b3:fa:16:6e:
e9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:20:F8:AA:76:93:B1:79:12:43:C3:D7:AE:D3:EC:68:9D:17:FA:91
X509v3 Authority Key Identifier:
keyid:40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/qyD4qnaTsXkSQ8PXrtPsaJ0X-pE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.251.128.0-37.251.175.255
37.251.248.0/21
77.81.164.0/23
86.105.192.0/24
89.32.44.0/22
89.35.173.0/24
89.36.128.0/21
89.38.248.0/21
89.42.11.0/24
89.45.192.0/21
91.200.120.0/22
91.208.142.0/24
93.119.227.0/24
94.24.29.0/24
94.24.48.0/21
94.24.72.0-94.24.78.255
109.95.8.0/21
128.0.46.0/23
185.171.184.0/23
185.171.187.0/24
188.214.142.0/24
188.215.48.0/21
193.239.130.0/23
193.242.120.0/24
Signature Algorithm: sha256WithRSAEncryption
51:8f:ed:ca:5c:ff:e6:14:4d:ab:e4:19:ad:cb:b7:32:ff:a3:
46:d2:00:1d:fd:02:27:3c:82:45:63:41:45:69:e5:e4:18:05:
c3:e4:30:f0:b8:2c:09:2d:a9:b9:b6:f0:e4:7a:06:01:f6:07:
94:58:b5:a9:67:de:22:3f:f7:f6:bb:f5:56:29:cb:b7:fd:20:
95:78:d7:83:77:4b:88:2a:4b:20:9d:a6:51:43:3e:8b:40:01:
6a:1c:e9:6e:90:6e:85:54:e5:e7:ae:25:7e:ae:10:c5:d6:db:
4b:43:a7:19:c2:1c:3e:78:aa:d6:57:63:ac:43:16:e8:c5:8f:
5b:95:06:a1:0b:40:7c:ff:a0:06:06:4b:6f:6d:a0:c3:fd:5b:
9b:91:60:59:7c:7c:7f:a2:c1:cd:a4:48:0f:b7:fa:12:bb:4d:
9e:60:56:58:78:6a:b1:c1:33:ad:c8:af:17:79:66:d7:88:9e:
3d:51:9e:67:55:39:51:b7:56:1c:b9:09:10:5d:98:d6:74:a5:
2e:bf:14:e7:41:17:46:37:c2:2c:ce:30:83:a2:cc:a6:64:f2:
5d:20:5d:00:2a:43:56:22:31:f5:85:e4:e0:27:08:ce:b5:5f:
e0:81:be:10:61:5e:ef:ea:67:89:bf:35:06:3f:f3:a4:97:3f:
6f:d9:12:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:27:03 2025 by rpki-client