Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/qf_820DSn3EJOyQRyYbLilQS0ds.roa
File: qf_820DSn3EJOyQRyYbLilQS0ds.roa (raw, json)
Hash identifier: wPmXRFDgVECQ/Q74gc5/HEv2fvGjx4+gk/wIvEAerD0=
Subject key identifier: A9:FF:FC:DB:40:D2:9F:71:09:3B:24:11:C9:86:CB:8A:54:12:D1:DB
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01955AD0110EFFE19219F64EA81D45B3300E
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/qf_820DSn3EJOyQRyYbLilQS0ds.roa
Signing time: Mon 03 Mar 2025 07:02:20 +0000
ROA not before: Mon 03 Mar 2025 07:02:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 62.72.162.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.164.0/23 maxlen: 23
62.72.172.0/24 maxlen: 24
62.72.184.0/24 maxlen: 24
62.72.185.0/24 maxlen: 24
62.72.191.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.4.0/22 maxlen: 24
81.21.5.0/24 maxlen: 24
81.21.6.0/24 maxlen: 24
81.21.7.0/24 maxlen: 24
176.57.51.0/24 maxlen: 24
176.57.56.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5a:d0:11:0e:ff:e1:92:19:f6:4e:a8:1d:45:b3:30:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Mar 3 07:02:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9fffcdb40d29f71093b2411c986cb8a5412d1db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:62:6a:98:f0:36:34:c2:fc:5d:0f:6d:97:46:
aa:d0:f3:cd:e7:9e:38:bf:b2:8b:78:f0:be:75:53:
68:f9:91:14:ea:ee:43:f1:f8:f9:df:1d:cb:e5:7b:
87:02:6a:09:b7:9a:b9:05:71:eb:82:4a:06:67:2a:
1c:1c:4f:9a:cb:b2:d0:3d:b3:32:c5:ea:d5:7f:b2:
e8:af:a2:a8:bb:f6:e4:3a:59:fa:c0:46:19:41:4d:
21:ff:a2:66:9d:c4:a5:e8:fd:95:66:6f:2b:3d:9d:
a2:90:3f:2f:3e:5a:3a:a5:9e:38:c8:ed:cf:44:55:
97:f9:3c:4a:03:bd:61:6a:b7:f1:ea:78:05:3b:ea:
4e:72:f8:02:a9:e3:c9:02:d0:e0:08:9b:4c:3d:6f:
fd:00:e0:6b:9b:40:5b:f7:7f:4c:fb:f8:e7:4b:79:
e2:4f:f4:d9:00:c9:dd:2e:7e:6a:a5:0c:03:38:d0:
36:2f:1d:14:04:b0:71:5d:09:4c:a8:7f:cc:1a:04:
59:89:7a:ad:c9:0b:05:f8:80:28:a0:05:d1:b4:50:
ae:70:13:ba:c3:c2:89:07:27:2a:5c:c0:4f:86:d8:
28:6d:00:d8:91:87:dc:6d:6a:8e:4e:f6:90:15:46:
0e:33:14:5a:f0:b3:47:4d:83:1e:ee:0f:06:fa:ce:
6c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FF:FC:DB:40:D2:9F:71:09:3B:24:11:C9:86:CB:8A:54:12:D1:DB
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/qf_820DSn3EJOyQRyYbLilQS0ds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.162.0-62.72.167.255
62.72.172.0/24
62.72.184.0/23
62.72.191.0/24
81.21.2.0-81.21.7.255
176.57.51.0/24
176.57.56.0/24
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
87:bf:2f:04:4b:31:34:47:19:91:54:1d:51:34:cc:06:ee:7b:
35:48:22:cc:0b:15:ae:b5:5e:8c:65:6a:1f:44:d8:34:a4:7b:
d8:13:93:86:af:45:3a:6e:fa:65:fd:58:02:ca:dc:fe:01:ea:
6c:c6:bb:da:20:43:3e:a3:13:c3:07:37:b3:ea:9d:e5:f9:1f:
71:99:f9:6d:86:f1:d5:eb:dd:1c:7b:18:82:74:c5:a6:06:6b:
5a:a9:b0:6c:f0:30:e1:2f:e0:4a:2b:35:04:39:c6:2c:9d:9f:
40:7e:d1:40:de:d4:9d:97:2a:c8:f5:e8:d5:df:9e:4c:56:de:
13:95:14:0e:64:d4:68:ce:e4:66:c3:5c:ab:b2:3b:32:0d:09:
1b:9b:34:1e:cc:32:42:65:d9:a0:93:e2:7c:7c:07:2f:fd:49:
55:c7:d4:39:a3:72:56:8c:f4:60:98:61:74:98:2a:50:14:8d:
9a:a5:6f:e0:5c:0d:91:d3:02:db:af:d6:96:1d:37:f7:6a:5f:
36:89:0e:19:7c:95:e2:d9:1d:1a:22:20:00:c0:72:c7:c4:a6:
e9:ed:38:d3:24:f3:cd:da:83:97:53:90:a8:66:b3:89:cf:53:
d2:ce:7e:a7:45:d9:54:35:8c:c3:61:7b:4f:85:2b:23:0c:e0:
42:51:bc:01
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgISAZVa0BEO/+GSGfZOqB1FszAOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjUwMzAzMDcwMjIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOWZmZmNkYjQwZDI5ZjcxMDkzYjI0MTFjOTg2Y2I4YTU0MTJkMWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12JqmPA2NML8XQ9tl0aq0PPN5544
v7KLePC+dVNo+ZEU6u5D8fj53x3L5XuHAmoJt5q5BXHrgkoGZyocHE+ay7LQPbMy
xerVf7Lor6Kou/bkOln6wEYZQU0h/6JmncSl6P2VZm8rPZ2ikD8vPlo6pZ44yO3P
RFWX+TxKA71harfx6ngFO+pOcvgCqePJAtDgCJtMPW/9AOBrm0Bb939M+/jnS3ni
T/TZAMndLn5qpQwDONA2Lx0UBLBxXQlMqH/MGgRZiXqtyQsF+IAooAXRtFCucBO6
w8KJBycqXMBPhtgobQDYkYfcbWqOTvaQFUYOMxRa8LNHTYMe7g8G+s5sMwIDAQAB
o4ICQzCCAj8wHQYDVR0OBBYEFKn//NtA0p9xCTskEcmGy4pUEtHbMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvcWZfODIwRFNuM0VKT3lRUnlZYkxpbFFTMGRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDBGBAIAATBAMAwDBAE+SKID
BAM+SKADBAA+SKwDBAE+SLgDBAA+SL8wDAMEAVEVAgMEA1EVAAMEALA5MwMEALA5
OAMEALA5PzANBgkqhkiG9w0BAQsFAAOCAQEAh78vBEsxNEcZkVQdUTTMBu57NUgi
zAsVrrVejGVqH0TYNKR72BOThq9FOm76Zf1YAsrc/gHqbMa72iBDPqMTwwc3s+qd
5fkfcZn5bYbx1evdHHsYgnTFpgZrWqmwbPAw4S/gSis1BDnGLJ2fQH7RQN7UnZcq
yPXo1d+eTFbeE5UUDmTUaM7kZsNcq7I7Mg0JG5s0HswyQmXZoJPifHwHL/1JVcfU
OaNyVoz0YJhhdJgqUBSNmqVv4FwNkdMC26/Wlh0392pfNokOGXyV4tkdGiIgAMBy
x8Sm6e040yTzzdqDl1OQqGazic9T0s5+p0XZVDWMw2F7T4UrIwzgQlG8AQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:53:21 2025 by rpki-client