Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wq3zgGz3QIgYrJbaedU6WMHURp8.roa
File: wq3zgGz3QIgYrJbaedU6WMHURp8.roa (raw, json)
Hash identifier: mUWEuuXgHtA+ba3xhKdL+60IgTVnwPQ3Gb0DHRWHTzs=
Subject key identifier: C2:AD:F3:80:6C:F7:40:88:18:AC:96:DA:79:D5:3A:58:C1:D4:46:9F
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0195606E5C117D41DF274CB364CE00E33C88
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wq3zgGz3QIgYrJbaedU6WMHURp8.roa
Signing time: Tue 04 Mar 2025 09:13:20 +0000
ROA not before: Tue 04 Mar 2025 09:13:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 81.168.126.0/24 maxlen: 24
82.152.8.0/24 maxlen: 24
82.152.176.0/23 maxlen: 23
82.153.136.0/22 maxlen: 22
82.153.241.0/24 maxlen: 24
82.153.243.0/24 maxlen: 24
89.213.44.0/23 maxlen: 24
89.213.50.0/23 maxlen: 23
89.213.56.0/22 maxlen: 22
89.213.129.0/24 maxlen: 24
89.213.132.0/24 maxlen: 24
89.213.139.0/24 maxlen: 24
89.213.143.0/24 maxlen: 24
89.213.145.0/24 maxlen: 24
89.213.146.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.154.0/24 maxlen: 24
89.213.155.0/24 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.159.0/24 maxlen: 24
89.213.162.0/24 maxlen: 24
89.213.164.0/24 maxlen: 24
89.213.167.0/24 maxlen: 24
89.213.169.0/24 maxlen: 24
89.213.171.0/24 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.181.0/24 maxlen: 24
89.213.191.0/24 maxlen: 24
89.213.196.0/22 maxlen: 24
89.213.200.0/22 maxlen: 24
89.213.204.0/22 maxlen: 24
89.213.228.0/22 maxlen: 22
89.213.228.0/23 maxlen: 24
89.213.232.0/22 maxlen: 24
89.213.236.0/22 maxlen: 24
109.176.16.0/21 maxlen: 24
109.176.204.0/22 maxlen: 24
109.176.242.0/23 maxlen: 24
109.176.252.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
185.101.47.0/24 maxlen: 24
194.105.80.0/20 maxlen: 20
194.105.88.0/24 maxlen: 24
194.105.90.0/23 maxlen: 24
212.38.79.0/24 maxlen: 24
212.38.88.0/23 maxlen: 24
213.152.43.0/24 maxlen: 24
213.210.52.0/22 maxlen: 22
213.218.211.0/24 maxlen: 24
213.218.226.0/24 maxlen: 24
217.145.65.0/24 maxlen: 24
217.145.66.0/24 maxlen: 24
217.145.72.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:60:6e:5c:11:7d:41:df:27:4c:b3:64:ce:00:e3:3c:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 4 09:13:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2adf3806cf7408818ac96da79d53a58c1d4469f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:46:89:79:02:ee:03:65:7f:fd:52:6a:f3:03:
b4:dd:44:5d:48:d4:63:d3:ab:2c:91:3f:b7:ed:ec:
38:e4:da:0d:d0:d3:e6:2d:49:23:1a:9d:4d:5a:41:
8d:ea:7a:26:d3:62:fe:84:67:ba:89:c6:b6:ec:4e:
07:a7:80:2b:33:9d:34:2a:14:47:80:62:1c:96:34:
9a:e1:94:e0:1e:d3:92:45:b1:df:19:59:31:0e:8f:
bb:10:f9:6f:2b:5a:d8:e2:db:95:e3:f1:7d:6f:58:
eb:cf:8e:03:f2:42:e9:f0:b6:2c:3c:f2:ce:b2:26:
70:9f:94:42:ef:21:b2:dd:fe:1f:49:cb:96:12:bc:
06:f2:1b:59:79:d5:5c:a2:a5:40:b5:c2:ff:c9:d6:
66:37:49:95:54:02:35:c5:f0:8f:28:5a:74:80:24:
c7:19:07:9a:c3:e9:da:81:d8:28:be:f2:79:43:9e:
be:b0:f2:bc:5a:3c:5b:59:f3:7e:ba:9c:69:b6:27:
63:cd:23:9f:7e:78:27:d6:89:14:93:0b:ea:15:33:
15:cd:cc:ab:8c:0f:ed:40:ce:2c:88:35:cf:a5:27:
92:8a:a5:4c:82:bc:e0:b5:0f:7f:e4:7a:89:26:e2:
2d:b0:87:34:24:fd:25:1e:28:5a:59:b1:7e:99:53:
32:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:AD:F3:80:6C:F7:40:88:18:AC:96:DA:79:D5:3A:58:C1:D4:46:9F
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wq3zgGz3QIgYrJbaedU6WMHURp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.126.0/24
82.152.8.0/24
82.152.176.0/23
82.153.136.0/22
82.153.241.0/24
82.153.243.0/24
89.213.44.0/23
89.213.50.0/23
89.213.56.0/22
89.213.129.0/24
89.213.132.0/24
89.213.139.0/24
89.213.143.0/24
89.213.145.0-89.213.146.255
89.213.148.0-89.213.159.255
89.213.162.0/24
89.213.164.0/24
89.213.167.0/24
89.213.169.0/24
89.213.171.0-89.213.175.255
89.213.181.0/24
89.213.191.0/24
89.213.196.0-89.213.207.255
89.213.228.0-89.213.239.255
109.176.16.0/21
109.176.204.0/22
109.176.242.0/23
109.176.252.0/24
185.49.126.0/23
185.101.47.0/24
194.105.80.0/20
212.38.79.0/24
212.38.88.0/23
213.152.43.0/24
213.210.52.0/22
213.218.211.0/24
213.218.226.0/24
217.145.65.0-217.145.66.255
217.145.72.0/21
Signature Algorithm: sha256WithRSAEncryption
1b:0f:6e:ab:db:ea:3e:00:67:52:1b:b0:18:ce:96:21:a4:90:
07:18:57:06:a0:f2:f4:f2:7a:46:0e:82:8f:f8:ac:18:a2:d6:
26:e3:f6:7c:8a:65:3b:a0:77:5a:9b:b3:78:17:48:74:d6:a2:
a6:bb:88:a0:eb:c0:b8:ee:74:e6:e7:76:b3:eb:0c:99:20:3e:
8f:a4:de:a7:f2:d7:04:50:d3:e4:1e:de:26:40:02:2b:86:2e:
c7:eb:bc:6e:db:44:9d:cf:54:a9:27:92:a5:8e:42:89:2d:b1:
6c:d7:5f:b3:e8:29:0c:cb:5e:b0:31:dc:7a:d6:fc:0b:71:5d:
b8:18:f5:1a:4a:6c:1f:89:f6:31:41:44:8d:90:b1:d0:18:ba:
b9:11:3e:e6:2b:f5:9f:44:88:88:13:52:d0:e6:99:2f:92:f5:
25:e4:d3:e3:03:a1:92:7e:9a:5e:e7:4b:74:16:29:69:b4:4b:
ce:4b:7b:e5:89:c9:3e:fd:72:4f:84:74:2b:73:cd:42:12:d3:
83:d4:47:ad:e5:36:9b:c4:73:c8:72:8b:af:62:a4:94:b9:3c:
44:d1:a4:49:85:1c:f8:5f:89:10:23:72:e5:47:81:cd:cb:71:
8b:41:26:17:94:4f:ba:55:2e:5c:f1:f8:89:b1:24:39:65:ff:
03:75:1e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:34:15 2025 by rpki-client