Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/Qpbo_I7gRSVi3FkPxtMjGeaSRKs.roa
File: Qpbo_I7gRSVi3FkPxtMjGeaSRKs.roa (raw, json)
Hash identifier: YJI0iDlFkfQcYtN080++xPLYzvIvksaZRcxWcCxYnO0=
Subject key identifier: 42:96:E8:FC:8E:E0:45:25:62:DC:59:0F:C6:D3:23:19:E6:92:44:AB
Certificate issuer: /CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Certificate serial: 0181F732CD4673EA78A514915BCCDE061839
Authority key identifier: 8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/Qpbo_I7gRSVi3FkPxtMjGeaSRKs.roa
Signing time: Wed 13 Jul 2022 10:55:10 +0000
ROA not before: Wed 13 Jul 2022 10:55:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209372
IP address blocks: 193.160.68.0/24 maxlen: 24
176.118.189.0/24 maxlen: 24
176.118.188.0/24 maxlen: 24
176.118.191.0/24 maxlen: 24
185.177.76.0/24 maxlen: 24
185.177.77.0/24 maxlen: 24
84.252.64.0/22 maxlen: 24
77.83.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f7:32:cd:46:73:ea:78:a5:14:91:5b:cc:de:06:18:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e747481f2c98fbb70dca8d65c23de4fca37583d
Validity
Not Before: Jul 13 10:55:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4296e8fc8ee0452562dc590fc6d32319e69244ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fe:2a:03:75:01:55:31:7c:61:fc:90:4f:6d:
d6:34:c1:22:da:0a:4f:56:33:ad:d0:82:bd:8c:1c:
55:67:05:18:63:0e:6a:c5:3b:73:b5:6a:79:52:43:
32:01:29:ce:6b:b6:e1:33:e3:06:8e:5c:0d:5e:8e:
fc:3d:f7:fe:13:9f:e3:bf:16:88:13:3b:81:b4:53:
83:2b:c4:aa:b0:ac:0a:7e:ca:9d:09:72:63:2a:9c:
69:ac:d8:3d:a2:39:91:ec:5b:78:d6:e1:d3:62:9e:
50:bf:b6:61:60:6b:30:dc:8c:52:79:1b:3a:3b:c2:
e8:27:9a:18:45:d0:9d:79:00:49:47:f8:e3:c1:84:
28:21:2c:ef:82:2c:2f:01:7d:bc:a7:7f:c6:f2:c5:
ff:5a:a2:da:f5:a7:49:e8:57:70:57:51:61:e6:a5:
0a:37:1b:a8:8a:49:56:37:c8:b0:eb:46:28:fb:a8:
7a:c5:0f:c7:06:c6:90:fc:f3:c2:88:01:64:27:f5:
0a:b9:39:48:0a:e9:e2:68:12:02:ec:65:f1:45:7f:
d0:4e:e8:fb:e2:f8:14:41:a4:ee:88:ab:65:2f:45:
15:67:99:3e:46:ab:00:ca:c6:0d:e9:7a:1e:3c:b2:
2f:30:09:46:98:1d:38:e8:c5:48:a8:65:db:e1:2b:
5e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:96:E8:FC:8E:E0:45:25:62:DC:59:0F:C6:D3:23:19:E6:92:44:AB
X509v3 Authority Key Identifier:
keyid:8E:74:74:81:F2:C9:8F:BB:70:DC:A8:D6:5C:23:DE:4F:CA:37:58:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnR0gfLJj7tw3KjWXCPeT8o3WD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/Qpbo_I7gRSVi3FkPxtMjGeaSRKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/40db6b-da85-4c9d-a948-6521d395f132/1/jnR0gfLJj7tw3KjWXCPeT8o3WD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.20.0/22
84.252.64.0/22
176.118.188.0/23
176.118.191.0/24
185.177.76.0/23
193.160.68.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:ec:a8:a9:7f:b5:2f:25:87:01:8d:7b:8f:64:d1:51:7d:f7:
db:be:29:ce:24:2b:79:ac:7d:be:cc:18:f0:dc:81:69:89:49:
c0:37:00:9a:32:9b:46:77:6a:6e:1d:5b:ea:a0:85:ed:04:70:
35:8e:a0:eb:d2:c9:0c:da:07:c9:c4:d6:37:bd:6e:71:6e:bc:
f2:9c:7e:cf:23:d1:04:5e:11:bd:9b:56:2f:8d:75:08:d8:66:
a7:11:f2:d6:b5:7f:67:a5:40:f3:13:d3:16:12:fc:92:20:db:
68:da:18:bd:fe:43:36:bc:c4:4a:d9:99:ba:a4:d7:a1:de:05:
44:e6:c3:6e:ea:b9:77:e7:7b:b2:0e:8f:40:7e:0d:4c:dd:49:
c0:af:1c:e3:da:24:05:c7:cb:37:90:20:ac:96:94:ba:8f:6f:
93:4c:d0:5a:b1:1c:5c:27:55:ee:5e:e7:a1:0b:28:67:1d:29:
bf:4e:c5:4a:6a:65:ac:4d:4e:db:a5:0f:ab:56:9a:32:a9:7b:
00:fe:ea:54:3d:2f:08:06:58:62:df:d2:99:9c:ec:a4:93:44:
29:53:74:38:27:cd:a6:1c:25:8a:89:e3:5e:31:84:ec:47:32:
5d:47:e3:10:6b:7b:3b:c8:3e:87:ae:a7:7e:70:d3:b7:1f:4d:
24:d0:8f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:45:30 2025 by rpki-client