Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/QRvqjOpbm1bsYYXVNYJCdsL2K9c.roa
File: QRvqjOpbm1bsYYXVNYJCdsL2K9c.roa (raw, json)
Hash identifier: gbsaPykuhKfA/rXSneeYnuzsVzL0kGuorXD/sYaSjK8=
Subject key identifier: 41:1B:EA:8C:EA:5B:9B:56:EC:61:85:D5:35:82:42:76:C2:F6:2B:D7
Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Certificate serial: 019422FC3AF5926DA4D5999ABB56ADD5FCB8
Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/QRvqjOpbm1bsYYXVNYJCdsL2K9c.roa
Signing time: Wed 01 Jan 2025 17:49:03 +0000
ROA not before: Wed 01 Jan 2025 17:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25773
IP address blocks: 92.61.228.0/24 maxlen: 24
92.61.230.0/24 maxlen: 24
92.61.231.0/24 maxlen: 24
92.61.232.0/24 maxlen: 24
92.61.236.0/24 maxlen: 24
92.61.237.0/24 maxlen: 24
92.61.238.0/24 maxlen: 24
94.188.137.0/24 maxlen: 24
94.188.194.0/24 maxlen: 24
94.188.201.0/24 maxlen: 24
94.188.202.0/24 maxlen: 24
94.188.203.0/24 maxlen: 24
94.188.205.0/24 maxlen: 24
94.188.206.0/24 maxlen: 24
94.188.207.0/24 maxlen: 24
94.188.208.0/24 maxlen: 24
94.188.209.0/24 maxlen: 24
94.188.210.0/24 maxlen: 24
94.188.211.0/24 maxlen: 24
94.188.212.0/24 maxlen: 24
94.188.214.0/24 maxlen: 24
94.188.215.0/24 maxlen: 24
94.188.216.0/24 maxlen: 24
94.188.222.0/24 maxlen: 24
94.188.223.0/24 maxlen: 24
94.188.224.0/24 maxlen: 24
94.188.225.0/24 maxlen: 24
94.188.226.0/24 maxlen: 24
94.188.227.0/24 maxlen: 24
94.188.228.0/24 maxlen: 24
94.188.229.0/24 maxlen: 24
94.188.230.0/24 maxlen: 24
94.188.231.0/24 maxlen: 24
94.188.232.0/24 maxlen: 24
94.188.233.0/24 maxlen: 24
94.188.234.0/24 maxlen: 24
94.188.235.0/24 maxlen: 24
94.188.236.0/24 maxlen: 24
94.188.237.0/24 maxlen: 24
94.188.239.0/24 maxlen: 24
94.188.240.0/24 maxlen: 24
94.188.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:3a:f5:92:6d:a4:d5:99:9a:bb:56:ad:d5:fc:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Validity
Not Before: Jan 1 17:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=411bea8cea5b9b56ec6185d535824276c2f62bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:14:b3:e2:aa:c2:fb:5c:7e:ee:9b:aa:a4:56:
e1:70:6c:75:69:5a:68:fd:b4:de:68:e1:69:3a:28:
f1:0b:a7:7e:d7:78:e0:52:d3:d7:36:92:41:8e:b8:
ff:80:59:16:66:7f:1b:51:55:66:fb:32:e7:cf:ce:
8a:0a:ac:77:07:53:8d:b0:4a:b3:24:e8:0c:96:92:
b2:49:6a:a9:fe:09:40:8f:f1:a2:5b:12:9b:47:0e:
45:43:0d:19:43:7c:57:ad:51:6a:b9:41:e3:2f:8c:
bc:9e:db:db:93:04:63:d3:94:c7:b3:4e:61:2c:6b:
08:73:db:5b:f8:56:80:6a:5f:66:b0:15:99:48:cc:
2a:79:21:60:da:89:e6:82:be:e9:81:28:be:bc:f0:
d8:03:0c:9c:5d:f9:cb:cf:b7:aa:6f:ab:1c:33:67:
14:9d:83:d4:8a:c1:6e:f3:57:1a:a4:64:1e:a8:ad:
b9:d1:7a:47:5a:47:49:80:a7:2e:3b:43:5b:61:b2:
34:de:b3:46:05:34:e5:18:9f:ba:91:33:e4:84:c6:
14:7b:34:68:bb:a8:aa:3d:8a:a9:da:e3:c4:35:5e:
02:3f:a4:97:bb:91:c8:49:14:38:d6:de:54:4b:62:
ad:3b:7b:d6:b0:e7:fb:5c:4f:77:aa:61:c1:15:f3:
9e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:1B:EA:8C:EA:5B:9B:56:EC:61:85:D5:35:82:42:76:C2:F6:2B:D7
X509v3 Authority Key Identifier:
keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/QRvqjOpbm1bsYYXVNYJCdsL2K9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.228.0/24
92.61.230.0-92.61.232.255
92.61.236.0-92.61.238.255
94.188.137.0/24
94.188.194.0/24
94.188.201.0-94.188.203.255
94.188.205.0-94.188.212.255
94.188.214.0-94.188.216.255
94.188.222.0-94.188.237.255
94.188.239.0-94.188.241.255
Signature Algorithm: sha256WithRSAEncryption
2b:83:c3:36:76:59:2d:8c:40:d4:6d:af:59:a3:bc:6e:b8:5d:
ab:21:dd:df:18:c7:6c:97:c7:e7:10:f3:e7:e2:34:37:0e:ec:
9e:0e:e4:e5:92:ea:2b:75:a2:65:ff:ea:dc:a5:f8:a0:01:56:
59:53:71:e3:89:be:de:65:65:7c:f2:03:63:fe:36:f1:eb:00:
a9:dc:94:fa:7a:24:20:11:81:06:ce:b4:16:44:74:b5:c8:3f:
4a:c6:1d:ef:4e:e6:c8:5c:d4:0c:b2:80:b8:17:6a:5b:ee:42:
07:86:b2:9e:55:1c:e5:75:bb:6d:40:37:c3:23:ec:9a:62:a2:
3b:51:5c:36:73:24:ea:d5:e8:aa:35:94:10:4d:e7:4f:bf:11:
10:8d:58:5f:be:8f:95:4e:2e:79:09:13:fd:eb:de:cf:83:c1:
22:c3:76:b8:87:f1:13:66:e7:70:36:15:f2:d5:c5:8e:e5:9d:
22:6f:c2:2d:d3:eb:7e:4e:f7:30:b5:a2:72:be:1b:34:74:62:
50:9d:62:ce:1c:d5:31:ec:13:dd:dc:96:4f:73:89:91:69:50:
02:6d:ef:2a:a8:03:2e:da:2f:eb:1c:77:bc:8d:fb:f0:95:72:
98:b6:d2:aa:81:92:67:52:cf:c3:c9:49:6f:0c:ba:03:64:a5:
11:01:4e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:13:57 2025 by rpki-client