Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/QynL3O0nVSOKhu4HXq0P2IntLdk.roa
File: QynL3O0nVSOKhu4HXq0P2IntLdk.roa (raw, json)
Hash identifier: jX22PorcTG8ESILtnKCZMufxms+9UAjmrh3mi/Y57K4=
Subject key identifier: 43:29:CB:DC:ED:27:55:23:8A:86:EE:07:5E:AD:0F:D8:89:ED:2D:D9
Certificate issuer: /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial: 03C84EA5
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/QynL3O0nVSOKhu4HXq0P2IntLdk.roa
Signing time: Wed 04 May 2022 00:25:06 +0000
ROA not before: Wed 04 May 2022 00:25:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 31.11.40.0/21 maxlen: 24
84.247.4.0/22 maxlen: 24
213.159.136.0/21 maxlen: 24
37.251.200.0/21 maxlen: 24
46.19.104.0/21 maxlen: 24
62.122.40.0/21 maxlen: 24
94.26.64.0/23 maxlen: 24
37.251.240.0/21 maxlen: 24
193.17.225.0/24 maxlen: 24
91.245.216.0/23 maxlen: 24
84.247.40.0/22 maxlen: 24
141.136.16.0/20 maxlen: 24
176.223.172.0/22 maxlen: 24
86.104.20.0/22 maxlen: 24
176.223.176.0/22 maxlen: 24
109.94.144.0/20 maxlen: 24
192.109.205.0/24 maxlen: 24
185.200.204.0/22 maxlen: 24
88.135.96.0/20 maxlen: 24
46.231.104.0/21 maxlen: 24
94.24.64.0/21 maxlen: 24
37.251.176.0/20 maxlen: 24
89.40.220.0/23 maxlen: 24
86.106.152.0/22 maxlen: 24
94.24.24.0/22 maxlen: 24
195.128.136.0/24 maxlen: 24
86.104.248.0/22 maxlen: 24
91.227.240.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63458981 (0x3c84ea5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Validity
Not Before: May 4 00:25:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4329cbdced2755238a86ee075ead0fd889ed2dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9c:0d:e9:1f:8b:a7:80:23:de:66:6d:d3:e5:
3e:04:16:9e:36:fd:d7:b2:28:47:c7:26:54:45:4d:
ba:a4:98:e4:dd:ca:02:76:ec:ae:ef:39:53:5d:98:
8a:c2:e2:86:ea:28:66:f3:a0:6e:c6:c5:6c:3a:a0:
e2:14:e3:6e:39:58:51:4d:cf:36:92:f2:55:32:81:
1b:50:14:83:0a:4d:76:ac:14:cc:b4:7f:d8:a8:11:
dc:ee:c9:0f:63:52:d6:31:58:0f:34:10:cb:3c:8b:
ae:22:4b:91:6c:94:a2:61:d1:14:11:31:b3:3f:44:
56:67:18:e5:16:79:08:6c:8b:73:12:22:de:46:82:
1b:0a:72:ca:e4:5e:5d:0f:81:7c:2a:70:e9:42:6c:
2d:d0:bc:65:41:26:e6:59:ac:7c:82:90:e5:b0:57:
ad:12:dd:af:dd:f3:3c:1b:19:f6:b9:ed:5b:07:5f:
81:2d:90:a5:e7:43:22:0f:7e:93:3a:ef:db:ba:fa:
b0:ec:c5:4b:c0:bb:ae:a0:71:b6:82:0a:5c:e4:3a:
59:14:bb:f8:e4:39:56:ea:6b:e5:9d:ce:69:7b:4d:
63:2b:1d:3e:86:db:b4:f3:ec:ab:80:8b:1e:c1:d4:
64:56:ef:56:a5:c9:17:d5:67:5c:63:b6:34:26:11:
b8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:29:CB:DC:ED:27:55:23:8A:86:EE:07:5E:AD:0F:D8:89:ED:2D:D9
X509v3 Authority Key Identifier:
keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/QynL3O0nVSOKhu4HXq0P2IntLdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.11.40.0/21
37.251.176.0/20
37.251.200.0/21
37.251.240.0/21
46.19.104.0/21
46.231.104.0/21
62.122.40.0/21
84.247.4.0/22
84.247.40.0/22
86.104.20.0/22
86.104.248.0/22
86.106.152.0/22
88.135.96.0/20
89.40.220.0/23
91.227.240.0/23
91.245.216.0/23
94.24.24.0/22
94.24.64.0/21
94.26.64.0/23
109.94.144.0/20
141.136.16.0/20
176.223.172.0-176.223.179.255
185.200.204.0/22
192.109.205.0/24
193.17.225.0/24
195.128.136.0/24
213.159.136.0/21
Signature Algorithm: sha256WithRSAEncryption
a8:2a:25:18:99:af:5d:71:70:77:d3:9e:6f:7d:1d:b9:fe:66:
09:40:19:a4:c3:c0:9f:be:fa:df:5c:22:02:ac:dc:b0:ce:41:
f3:a6:74:a9:ea:7d:9c:1e:ce:ab:f4:22:ba:33:62:a8:da:8b:
47:f9:5f:43:d5:43:66:1d:fc:8f:f5:c8:c7:59:9c:cd:0f:ae:
f8:81:0d:28:94:25:09:31:93:9c:80:98:77:8b:f4:0d:07:95:
ed:be:41:37:89:f8:34:4c:77:04:8e:89:07:80:66:44:64:74:
84:9e:ce:66:8e:ac:a9:45:ec:08:c0:a6:c6:c7:36:02:49:1d:
e7:50:b8:44:ff:52:ed:e6:f0:f3:a9:1b:de:c4:30:ee:8c:65:
5f:15:23:02:de:c8:ed:43:c4:2d:dd:0c:41:b7:0d:a4:b5:d4:
c2:88:f9:b8:08:9f:c3:8e:5b:e4:03:a7:bf:b5:81:74:e2:ea:
b9:e7:bf:73:24:cb:dd:b9:dc:a0:35:3a:87:84:be:21:4c:fa:
ef:72:2b:ac:05:af:7a:f3:85:9f:31:32:af:a7:fd:98:ed:3f:
d6:97:4b:af:95:1e:21:05:17:a9:fa:5c:78:80:94:7b:31:19:
f6:c9:b9:4d:2b:4a:1a:15:c2:18:90:c5:64:27:b0:8a:ce:c2:
bc:81:77:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 07:05:43 2025 by rpki-client