Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/tqvpdX3qlB1PGKvTIJhSqoa1Uik.roa
File: tqvpdX3qlB1PGKvTIJhSqoa1Uik.roa (raw, json)
Hash identifier: 3iiH8KMVNMIrbaa7ON8Wrvtf43td38RWp8okQgSJ2sc=
Subject key identifier: B6:AB:E9:75:7D:EA:94:1D:4F:18:AB:D3:20:98:52:AA:86:B5:52:29
Certificate issuer: /CN=42f48f7fae012916a775d5e3b6fa231098343ea0
Certificate serial: 043A0961
Authority key identifier: 42:F4:8F:7F:AE:01:29:16:A7:75:D5:E3:B6:FA:23:10:98:34:3E:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvSPf64BKRanddXjtvojEJg0PqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/tqvpdX3qlB1PGKvTIJhSqoa1Uik.roa
Signing time: Mon 23 May 2022 08:03:29 +0000
ROA not before: Mon 23 May 2022 08:03:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34304
IP address blocks: 86.107.58.0/23 maxlen: 23
86.107.57.0/24 maxlen: 24
188.211.164.0/23 maxlen: 23
86.107.63.0/24 maxlen: 24
86.107.60.0/23 maxlen: 23
193.138.192.0/22 maxlen: 22
89.47.0.0/24 maxlen: 24
89.47.14.0/24 maxlen: 24
89.47.12.0/24 maxlen: 24
89.35.224.0/24 maxlen: 24
89.35.229.0/24 maxlen: 24
89.35.232.0/24 maxlen: 24
89.35.236.0/24 maxlen: 24
89.35.234.0/23 maxlen: 23
89.35.238.0/23 maxlen: 23
2a05:8880::/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70912353 (0x43a0961)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f48f7fae012916a775d5e3b6fa231098343ea0
Validity
Not Before: May 23 08:03:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b6abe9757dea941d4f18abd3209852aa86b55229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c5:72:1c:49:85:07:f6:f0:ba:e6:fe:cb:52:
bc:57:1a:b3:52:cc:4c:6b:53:b6:8a:05:ab:36:19:
43:11:b5:77:2d:df:b6:4c:d2:ae:74:44:56:d0:db:
0f:f7:b4:1e:10:9e:a6:27:7c:f9:9b:af:f1:98:06:
7c:c2:3a:52:53:91:65:d3:ea:4a:1a:b7:ae:8f:1e:
da:d0:f4:92:75:62:9b:77:68:eb:94:22:be:23:f0:
a8:ea:42:3b:81:0e:21:68:26:fc:6e:3b:9d:66:12:
5f:52:21:84:4b:b0:f0:d8:3e:c0:1c:7c:0a:1a:b7:
1d:78:11:d5:39:fc:27:af:ef:ca:b7:ef:d3:b8:1c:
d4:bc:73:93:ec:21:1b:1f:1c:7f:fd:82:85:7f:fc:
6c:b4:52:e5:28:c5:5c:b2:f6:d5:59:cc:9e:07:31:
c4:7d:23:62:3c:ea:5b:f8:3f:ec:a3:f9:c9:0c:a1:
2f:d0:8a:b7:7c:b9:00:1b:10:f3:6e:88:51:04:14:
4a:90:1a:aa:31:70:82:9d:d8:ab:4e:84:8f:ab:10:
2d:b0:1d:76:fa:c7:bb:e6:e8:c3:a9:97:06:a1:1c:
44:34:4f:3c:a7:db:40:f9:0e:e0:44:96:9a:38:61:
69:51:4d:ef:5e:55:89:4f:c5:b7:fc:46:21:8f:14:
67:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:AB:E9:75:7D:EA:94:1D:4F:18:AB:D3:20:98:52:AA:86:B5:52:29
X509v3 Authority Key Identifier:
keyid:42:F4:8F:7F:AE:01:29:16:A7:75:D5:E3:B6:FA:23:10:98:34:3E:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvSPf64BKRanddXjtvojEJg0PqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/tqvpdX3qlB1PGKvTIJhSqoa1Uik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/QvSPf64BKRanddXjtvojEJg0PqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.57.0-86.107.61.255
86.107.63.0/24
89.35.224.0/24
89.35.229.0/24
89.35.232.0/24
89.35.234.0-89.35.236.255
89.35.238.0/23
89.47.0.0/24
89.47.12.0/24
89.47.14.0/24
188.211.164.0/23
193.138.192.0/22
IPv6:
2a05:8880::/30
Signature Algorithm: sha256WithRSAEncryption
7f:88:bd:bd:ef:23:c4:00:7f:f5:52:4a:a5:2e:3e:13:1d:49:
6e:b6:80:6a:2e:0b:0e:26:6d:9c:e4:95:de:ff:0b:fd:47:bc:
4b:ea:a8:32:97:21:72:01:1a:6a:89:9c:75:83:3b:cc:ed:cb:
33:b9:32:16:d9:ec:31:27:67:48:0b:a5:e3:7c:d6:45:34:3b:
a7:01:d1:fd:12:fb:6b:bb:71:c6:c7:9d:bf:ef:88:db:76:1e:
1e:8b:e1:34:1d:45:f1:ba:2b:87:65:4f:ea:3d:ef:19:a5:86:
f3:ec:44:37:98:bc:ee:74:d6:4f:44:9b:29:04:e9:f6:d5:ec:
b3:b6:07:ca:da:e5:6e:96:8c:5e:20:63:9a:d9:ad:1d:43:37:
37:ce:a9:59:75:2c:33:3e:5e:bf:5f:c2:70:be:7d:aa:13:2c:
77:0d:30:dd:76:21:c7:ea:79:fd:24:60:38:76:b5:ca:f3:22:
77:bc:89:27:9d:31:8d:4f:74:36:b5:89:00:ed:25:d1:5d:53:
01:fc:f2:4d:4d:89:4a:7f:62:22:7d:74:97:09:2f:7b:ce:44:
f4:f2:28:64:8b:22:fa:b4:06:24:86:d5:c1:3f:0d:94:b5:a8:
d3:64:6c:c2:27:62:6c:0a:24:6b:c6:d0:f1:38:e5:b7:4f:5a:
a0:62:34:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:56:22 2025 by rpki-client