Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/qKbaW6paA9nM7mKbe1Gi3HIpSc0.roa
File: qKbaW6paA9nM7mKbe1Gi3HIpSc0.roa (raw, json)
Hash identifier: p79PEtAPHcfCWWeyuTEVKLT8qloDHu5ZzhEZuZqW9EA=
Subject key identifier: A8:A6:DA:5B:AA:5A:03:D9:CC:EE:62:9B:7B:51:A2:DC:72:29:49:CD
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 019421B26349E4C900309E118307D77CDFAE
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/qKbaW6paA9nM7mKbe1Gi3HIpSc0.roa
Signing time: Wed 01 Jan 2025 11:48:46 +0000
ROA not before: Wed 01 Jan 2025 11:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56534
IP address blocks: 82.179.248.0/22 maxlen: 22
85.142.164.0/22 maxlen: 22
85.142.168.0/21 maxlen: 21
85.142.176.0/22 maxlen: 22
85.142.208.0/22 maxlen: 22
85.143.144.0/22 maxlen: 22
85.143.160.0/21 maxlen: 21
85.143.176.0/22 maxlen: 22
85.143.184.0/22 maxlen: 22
85.143.203.0/24 maxlen: 24
85.143.204.0/22 maxlen: 22
85.143.250.0/24 maxlen: 24
85.143.252.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:63:49:e4:c9:00:30:9e:11:83:07:d7:7c:df:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 11:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8a6da5baa5a03d9ccee629b7b51a2dc722949cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f0:de:9c:65:4e:19:33:09:5d:a0:13:5f:59:
a3:8b:8e:1f:ec:cc:5c:30:2f:40:1f:29:68:45:00:
20:da:a6:6d:49:05:16:c1:cd:3f:32:ba:30:60:bc:
09:f7:87:a7:c1:09:b0:9e:ba:fd:14:ca:c5:3d:43:
3c:fa:1c:e8:b2:d8:fc:7c:46:2c:44:b0:bf:a1:b8:
8d:da:2c:9f:ee:78:b2:a3:ef:99:39:e8:7b:63:ff:
9e:7b:2b:bc:5e:c5:e0:e4:ad:8d:ec:ab:b5:07:f8:
c1:92:a3:07:c8:33:85:6b:18:a5:7f:15:8b:c3:ad:
10:6b:5c:5e:1c:4d:44:c7:82:54:5b:4f:d4:12:02:
60:0c:b7:61:03:4c:16:05:b3:7e:e0:c5:cf:6f:ee:
b2:42:20:f4:a1:9d:c8:3a:46:0f:c8:90:f9:0e:da:
b7:42:fc:22:59:ae:c4:f5:55:f9:cc:63:20:3c:92:
d3:11:c5:09:e9:ec:82:67:23:66:38:7e:bd:88:0c:
05:3f:28:e7:16:31:39:17:ea:eb:6c:c8:c0:16:94:
e9:b1:ce:9f:8b:b9:c9:39:a6:5d:a1:af:3c:4b:0c:
fc:51:29:b7:e3:1c:1a:ed:79:eb:0e:f2:50:00:8f:
6b:9e:87:5f:c8:ff:5a:56:c9:25:19:6e:a4:a5:59:
80:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A6:DA:5B:AA:5A:03:D9:CC:EE:62:9B:7B:51:A2:DC:72:29:49:CD
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/qKbaW6paA9nM7mKbe1Gi3HIpSc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.179.248.0/22
85.142.164.0-85.142.179.255
85.142.208.0/22
85.143.144.0/22
85.143.160.0/21
85.143.176.0/22
85.143.184.0/22
85.143.203.0-85.143.207.255
85.143.250.0/24
85.143.252.0/22
Signature Algorithm: sha256WithRSAEncryption
13:28:d4:de:02:0a:9a:ba:71:6e:82:11:4b:25:e7:34:a7:77:
50:bc:28:81:57:69:49:00:c8:54:7b:84:2b:95:3d:5d:f3:54:
52:87:d7:ed:04:00:a2:1e:21:dc:30:8d:55:63:b0:fd:9e:53:
eb:71:b8:e7:9f:5f:de:8b:0f:9f:1d:b7:86:e7:5e:de:01:2c:
73:a2:17:56:18:7f:d4:02:dc:99:a4:12:26:db:76:01:e1:e2:
28:65:7e:9d:33:f5:ea:7c:62:e0:91:19:92:b6:e0:69:d7:d0:
f2:7b:0d:94:55:28:db:0a:52:74:54:7d:8c:bb:7c:15:04:99:
ea:6d:ef:92:d9:8e:d8:1b:a4:9d:da:ae:45:e2:ec:30:71:22:
6d:61:1c:52:b7:33:cd:ad:b6:7c:1c:0c:10:bc:c7:c2:62:cd:
c3:a3:f4:51:9b:bc:8f:89:f6:05:1a:10:9c:db:3d:1f:f8:28:
6c:95:88:d9:e4:d1:f6:d7:23:6a:43:58:88:6a:38:ad:4c:0b:
46:17:4c:0c:4d:a1:6a:db:3a:e6:00:da:12:12:62:0f:f3:f7:
b9:19:96:6f:22:41:aa:6e:43:6f:d1:10:d3:53:8d:59:85:a2:
fd:18:59:c9:eb:8f:7f:d6:0b:d0:bd:12:3e:06:a4:99:45:9b:
16:c2:12:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:45:33 2025 by rpki-client