Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/Qdu0d9QLtNBsD5iH6QjOkHOjfR0.roa
File: Qdu0d9QLtNBsD5iH6QjOkHOjfR0.roa (raw, json)
Hash identifier: WIh4dCuUbUKwr5ezCX9dxWL5StxMpA6ugd95qMzqKA4=
Subject key identifier: 41:DB:B4:77:D4:0B:B4:D0:6C:0F:98:87:E9:08:CE:90:73:A3:7D:1D
Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Certificate serial: 0194228D36A2C88B04A574260ADF0F9F2A8C
Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/Qdu0d9QLtNBsD5iH6QjOkHOjfR0.roa
Signing time: Wed 01 Jan 2025 15:47:47 +0000
ROA not before: Wed 01 Jan 2025 15:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7155
IP address blocks: 46.164.152.0/23 maxlen: 23
46.164.160.0/22 maxlen: 22
77.222.136.0/24 maxlen: 24
91.204.95.0/24 maxlen: 24
93.183.197.0/24 maxlen: 24
93.183.215.0/24 maxlen: 24
93.183.228.0/24 maxlen: 24
93.183.229.0/24 maxlen: 24
185.8.40.0/24 maxlen: 24
185.8.41.0/24 maxlen: 24
185.8.42.0/23 maxlen: 23
188.0.64.0/23 maxlen: 23
188.0.66.0/24 maxlen: 24
193.108.50.0/24 maxlen: 24
193.108.51.0/24 maxlen: 24
194.146.197.0/24 maxlen: 24
195.69.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:36:a2:c8:8b:04:a5:74:26:0a:df:0f:9f:2a:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Validity
Not Before: Jan 1 15:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=41dbb477d40bb4d06c0f9887e908ce9073a37d1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0b:46:a5:f3:30:c6:20:b3:af:03:af:13:2f:
2b:90:a8:70:93:a5:92:45:b9:e2:b7:20:27:f4:71:
94:4c:41:b5:c5:28:cc:60:5d:8d:7a:6a:0c:a9:11:
cc:37:cd:e8:bc:e1:48:da:0d:45:41:a0:67:64:d5:
45:20:f9:bf:dd:5b:31:10:a9:81:5a:01:e7:b0:85:
ba:85:b0:7e:1d:0f:c0:7c:36:88:dc:b6:61:8a:03:
01:80:4b:12:af:70:81:79:5c:f9:d7:75:88:3c:34:
55:99:08:74:1b:04:c3:7a:35:d9:74:a8:29:72:8b:
40:fb:8c:53:d1:4b:74:ec:d1:f6:c4:a9:57:c8:9d:
56:5d:68:55:4f:ec:6d:73:25:ba:da:52:ba:df:ec:
65:03:cb:72:0c:0c:cd:f2:e4:7c:a1:f9:82:31:8a:
83:96:07:e3:eb:ad:2d:d2:73:da:a4:96:2c:57:29:
98:78:42:35:ab:fe:93:3b:f7:b4:64:f9:1d:41:35:
3a:71:47:af:43:1f:36:66:4d:d5:da:53:cd:d4:52:
bc:a9:b8:e8:ae:dd:5f:ca:fb:43:d7:dd:c0:70:43:
67:96:5d:c3:a1:b8:76:5c:ab:71:4d:de:42:5c:eb:
5c:ac:01:30:5d:53:31:7c:e5:ec:26:3e:1f:51:06:
66:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:DB:B4:77:D4:0B:B4:D0:6C:0F:98:87:E9:08:CE:90:73:A3:7D:1D
X509v3 Authority Key Identifier:
keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/Qdu0d9QLtNBsD5iH6QjOkHOjfR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.164.152.0/23
46.164.160.0/22
77.222.136.0/24
91.204.95.0/24
93.183.197.0/24
93.183.215.0/24
93.183.228.0/23
185.8.40.0/22
188.0.64.0-188.0.66.255
193.108.50.0/23
194.146.197.0/24
195.69.176.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:78:fb:4c:c1:3d:40:28:62:a8:04:c4:1c:f4:ff:db:44:01:
95:16:c6:92:22:56:1b:fa:8d:55:3f:6b:08:fa:f0:a1:24:76:
bd:83:c1:a3:00:d2:c6:07:80:ed:ee:9d:b3:22:d6:62:c2:57:
b3:6f:88:87:f8:dc:a8:d9:07:62:26:89:4c:dd:c9:e8:05:1b:
ab:82:02:68:1d:8c:01:6b:b1:a7:95:51:7b:ad:7e:7c:c8:3f:
61:28:5d:32:a4:9a:40:4b:79:00:47:ea:d7:fa:ea:2f:97:32:
1c:54:b5:5c:96:9a:97:58:5a:44:82:c3:4c:b0:fc:09:16:e2:
2c:4f:60:5c:dc:79:e9:39:4e:d5:56:4c:a5:87:d2:12:b0:6d:
95:56:cb:0f:ec:66:15:8f:d8:59:a4:8d:c4:f4:c0:97:b9:27:
28:7a:e2:84:85:ec:93:ac:12:f2:27:ab:2c:c4:a7:9f:5b:52:
c7:89:6d:36:f5:65:3f:5a:45:62:71:d0:0a:30:97:bf:bf:ac:
ba:9d:9e:9d:60:e3:62:5d:a0:77:7e:20:13:70:18:9b:e1:cc:
2b:4c:52:84:f9:0b:6c:e9:06:3e:dd:48:af:25:0d:d8:cd:b4:
3d:1b:49:46:ff:7a:e3:46:08:76:08:99:1d:38:3d:03:f0:71:
bd:79:af:f7
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgISAZQijTaiyIsEpXQmCt8PnyqMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYzhkYmU1MjA4M2FkMzM1YzlmMWZkZTYwMTZlYzhiNDky
OTMxNDAwHhcNMjUwMTAxMTU0NzQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MWRiYjQ3N2Q0MGJiNGQwNmMwZjk4ODdlOTA4Y2U5MDczYTM3ZDFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwtGpfMwxiCzrwOvEy8rkKhwk6WS
RbnityAn9HGUTEG1xSjMYF2NemoMqRHMN83ovOFI2g1FQaBnZNVFIPm/3VsxEKmB
WgHnsIW6hbB+HQ/AfDaI3LZhigMBgEsSr3CBeVz513WIPDRVmQh0GwTDejXZdKgp
cotA+4xT0Ut07NH2xKlXyJ1WXWhVT+xtcyW62lK63+xlA8tyDAzN8uR8ofmCMYqD
lgfj660t0nPapJYsVymYeEI1q/6TO/e0ZPkdQTU6cUevQx82Zk3V2lPN1FK8qbjo
rt1fyvtD193AcENnll3Dobh2XKtxTd5CXOtcrAEwXVMxfOXsJj4fUQZmswIDAQAB
o4ICUzCCAk8wHQYDVR0OBBYEFEHbtHfUC7TQbA+Yh+kIzpBzo30dMB8GA1UdIwQY
MBaAFKvI2+Ugg60zXJ8f3mAW7ItJKTFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2Qt
MzA1NmFmOWEzMzVlLzEvUWR1MGQ5UUx0TkJzRDVpSDZRak9rSE9qZlIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2QtMzA1NmFmOWEzMzVl
LzEvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGkGCCsGAQUFBwEHAQH/BFowWDBWBAIAATBQAwQBLqSYAwQC
LqSgAwQATd6IAwQAW8xfAwQAXbfFAwQAXbfXAwQBXbfkAwQCuQgoMAwDBAa8AEAD
BAC8AEIDBAHBbDIDBADCksUDBADDRbAwDQYJKoZIhvcNAQELBQADggEBAA94+0zB
PUAoYqgExBz0/9tEAZUWxpIiVhv6jVU/awj68KEkdr2DwaMA0sYHgO3unbMi1mLC
V7NviIf43KjZB2ImiUzdyegFG6uCAmgdjAFrsaeVUXutfnzIP2EoXTKkmkBLeQBH
6tf66i+XMhxUtVyWmpdYWkSCw0yw/AkW4ixPYFzceek5TtVWTKWH0hKwbZVWyw/s
ZhWP2FmkjcT0wJe5Jyh64oSF7JOsEvInqyzEp59bUseJbTb1ZT9aRWJx0Aowl7+/
rLqdnp1g42JdoHd+IBNwGJvhzCtMUoT5C2zpBj7dSK8lDdjNtD0bSUb/euNGCHYI
mR04PQPwcb15r/c=
-----END CERTIFICATE-----
Generated at Thu Apr 10 02:12:07 2025 by rpki-client