Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7a936c-d6e2-4cc1-9e4b-d237a9e6ab14/1/Qx377X1XCCsEeHCrMiKLFoXR71c.roa
File: Qx377X1XCCsEeHCrMiKLFoXR71c.roa (raw, json)
Hash identifier: N04KOXK6jKK2umpCCRszEDlnzPPaBPD98xuBwtklQSo=
Subject key identifier: 43:1D:FB:ED:7D:57:08:2B:04:78:70:AB:32:22:8B:16:85:D1:EF:57
Certificate issuer: /CN=caf2488824b714a1f30c2c809fbdb68575652b4a
Certificate serial: 3DA259
Authority key identifier: CA:F2:48:88:24:B7:14:A1:F3:0C:2C:80:9F:BD:B6:85:75:65:2B:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvJIiCS3FKHzDCyAn722hXVlK0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/7a936c-d6e2-4cc1-9e4b-d237a9e6ab14/1/Qx377X1XCCsEeHCrMiKLFoXR71c.roa
Signing time: Sat 01 Jan 2022 01:00:49 +0000
ROA not before: Sat 01 Jan 2022 01:00:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60672
IP address blocks: 31.24.106.0/24 maxlen: 24
31.24.110.0/24 maxlen: 24
31.24.109.0/24 maxlen: 24
31.24.108.0/24 maxlen: 24
31.24.107.0/24 maxlen: 24
31.24.111.0/24 maxlen: 24
94.126.41.0/24 maxlen: 24
94.126.44.0/24 maxlen: 24
94.126.42.0/24 maxlen: 24
94.126.46.0/24 maxlen: 24
94.126.45.0/24 maxlen: 24
178.18.118.0/24 maxlen: 24
178.18.123.0/24 maxlen: 24
178.18.122.0/24 maxlen: 24
178.18.121.0/24 maxlen: 24
178.18.120.0/24 maxlen: 24
31.28.64.0/24 maxlen: 24
31.28.66.0/24 maxlen: 24
31.28.69.0/24 maxlen: 24
31.28.71.0/24 maxlen: 24
31.28.73.0/24 maxlen: 24
31.28.76.0/23 maxlen: 23
31.28.74.0/24 maxlen: 24
31.28.78.0/24 maxlen: 24
31.28.79.0/24 maxlen: 24
31.28.91.0/24 maxlen: 24
31.28.87.0/24 maxlen: 24
31.28.90.0/24 maxlen: 24
31.28.89.0/24 maxlen: 24
31.28.88.0/24 maxlen: 24
31.28.92.0/22 maxlen: 22
193.192.2.0/24 maxlen: 24
31.24.105.0/24 maxlen: 24
31.24.104.0/24 maxlen: 24
2a01:8000:4::/48 maxlen: 48
2a01:8000::/48 maxlen: 48
2a01:8000:1ffb::/48 maxlen: 48
2a01:8000:5::/48 maxlen: 48
2a10:6740::/32 maxlen: 32
2a01:8000::/32 maxlen: 32
2a01:8000:1ffd::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4039257 (0x3da259)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf2488824b714a1f30c2c809fbdb68575652b4a
Validity
Not Before: Jan 1 01:00:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=431dfbed7d57082b047870ab32228b1685d1ef57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:08:4d:cd:29:3e:bf:e9:f3:e5:71:00:fb:cd:
a5:ef:ff:63:f7:82:26:72:26:13:87:85:9b:c6:91:
af:f0:39:f2:37:40:d9:f5:97:5c:32:82:74:86:fa:
78:53:68:b6:25:72:52:99:ff:c7:5d:59:89:25:10:
e5:48:23:ef:a8:2f:40:96:cb:35:c7:25:cb:08:39:
5c:f8:f7:b8:fb:c1:19:73:82:74:b6:fe:d8:b1:05:
48:c4:71:0c:1c:c8:11:e4:2e:8c:56:19:32:77:c6:
d7:42:1c:6a:a7:d8:42:c7:42:4f:37:a9:5d:0a:96:
ac:c3:49:46:3c:d0:71:78:0d:fc:12:03:2a:74:08:
66:7f:69:0d:08:ca:a6:c5:a3:a1:fc:60:ac:32:d3:
4b:4f:bb:97:7f:8c:ad:79:19:00:87:e8:66:46:86:
51:b5:83:49:be:17:8e:ad:39:23:30:cb:b9:19:23:
d7:4b:e6:f3:01:ed:02:97:2c:b5:7d:c1:46:3b:48:
25:f3:73:06:8e:d1:4b:ad:fd:6d:68:39:99:c3:eb:
40:5b:ae:31:6e:0f:9e:27:d7:cf:c2:06:93:39:ba:
2b:0d:e5:36:5f:1c:af:14:4a:87:c7:84:b5:c6:61:
d7:cc:88:1d:20:64:51:ac:1e:3f:9f:2d:a2:60:60:
ca:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1D:FB:ED:7D:57:08:2B:04:78:70:AB:32:22:8B:16:85:D1:EF:57
X509v3 Authority Key Identifier:
keyid:CA:F2:48:88:24:B7:14:A1:F3:0C:2C:80:9F:BD:B6:85:75:65:2B:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvJIiCS3FKHzDCyAn722hXVlK0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a936c-d6e2-4cc1-9e4b-d237a9e6ab14/1/Qx377X1XCCsEeHCrMiKLFoXR71c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a936c-d6e2-4cc1-9e4b-d237a9e6ab14/1/yvJIiCS3FKHzDCyAn722hXVlK0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.104.0/21
31.28.64.0/24
31.28.66.0/24
31.28.69.0/24
31.28.71.0/24
31.28.73.0-31.28.74.255
31.28.76.0/22
31.28.87.0-31.28.95.255
94.126.41.0-94.126.42.255
94.126.44.0-94.126.46.255
178.18.118.0/24
178.18.120.0/22
193.192.2.0/24
IPv6:
2a01:8000::/32
2a10:6740::/32
Signature Algorithm: sha256WithRSAEncryption
55:2f:31:d2:1f:da:a3:57:00:b1:7e:b9:04:9c:8a:9c:58:fc:
af:d0:ed:bf:13:29:df:7d:be:dd:af:3e:04:aa:fa:13:63:d9:
6f:26:58:bc:d4:42:6d:ed:7a:e2:bc:5d:80:4b:be:2f:5d:80:
c4:23:6b:52:a7:de:44:ec:fc:7a:10:46:07:d5:59:fd:e8:0f:
98:c7:71:57:c3:08:f4:35:b9:55:d4:1f:53:ad:58:cc:b3:0f:
2f:a4:1d:e5:ec:41:46:03:ba:10:8e:3c:f1:4c:f3:07:6b:17:
29:69:ef:e5:f0:51:97:81:ea:68:46:e4:d4:9f:8e:75:55:be:
74:f6:59:b9:fe:0e:53:a6:1e:d4:89:96:23:74:80:24:b6:2e:
79:49:24:ec:5b:cb:d3:a0:04:02:e4:be:91:d2:62:c4:ba:8a:
72:62:23:3d:fc:7b:28:e7:9e:18:68:a7:23:6f:0e:e4:8d:55:
ba:78:c9:cb:69:6c:18:5f:60:1d:6c:15:fa:81:c0:a6:91:57:
72:b0:5d:39:c5:04:78:88:93:37:63:6e:5a:06:c9:d1:6c:69:
40:d5:c0:76:77:31:46:be:3e:39:df:63:c5:7c:26:a0:55:03:
c0:41:09:80:9f:13:a5:a5:95:e0:4b:70:e3:57:0d:3a:3f:31:
92:bb:43:d0
-----BEGIN CERTIFICATE-----
MIIFbzCCBFegAwIBAgIDPaJZMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNh
ZjI0ODg4MjRiNzE0YTFmMzBjMmM4MDlmYmRiNjg1NzU2NTJiNGEwHhcNMjIwMTAx
MDEwMDQ5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg0MzFkZmJlZDdkNTcw
ODJiMDQ3ODcwYWIzMjIyOGIxNjg1ZDFlZjU3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmAhNzSk+v+nz5XEA+82l7/9j94ImciYTh4WbxpGv8DnyN0DZ
9ZdcMoJ0hvp4U2i2JXJSmf/HXVmJJRDlSCPvqC9Alss1xyXLCDlc+Pe4+8EZc4J0
tv7YsQVIxHEMHMgR5C6MVhkyd8bXQhxqp9hCx0JPN6ldCpasw0lGPNBxeA38EgMq
dAhmf2kNCMqmxaOh/GCsMtNLT7uXf4yteRkAh+hmRoZRtYNJvheOrTkjMMu5GSPX
S+bzAe0Clyy1fcFGO0gl83MGjtFLrf1taDmZw+tAW64xbg+eJ9fPwgaTOborDeU2
XxyvFEqHx4S1xmHXzIgdIGRRrB4/ny2iYGDKTQIDAQABo4ICijCCAoYwHQYDVR0O
BBYEFEMd++19VwgrBHhwqzIiixaF0e9XMB8GA1UdIwQYMBaAFMrySIgktxSh8wws
gJ+9toV1ZStKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
eXZKSWlDUzNGS0h6REN5QW43MjJoWFZsSzBvLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9iNS83YTkzNmMtZDZlMi00Y2MxLTllNGItZDIzN2E5ZTZhYjE0LzEv
UXgzNzdYMVhDQ3NFZUhDck1pS0xGb1hSNzFjLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS83
YTkzNmMtZDZlMi00Y2MxLTllNGItZDIzN2E5ZTZhYjE0LzEveXZKSWlDUzNGS0h6
REN5QW43MjJoWFZsSzBvLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGf
BggrBgEFBQcBBwEB/wSBjzCBjDB0BAIAATBuAwQDHxhoAwQAHxxAAwQAHxxCAwQA
HxxFAwQAHxxHMAwDBAAfHEkDBAAfHEoDBAIfHEwwDAMEAB8cVwMEBR8cQDAMAwQA
Xn4pAwQAXn4qMAwDBAJefiwDBABefi4DBACyEnYDBAKyEngDBADBwAIwFAQCAAIw
DgMFACoBgAADBQAqEGdAMA0GCSqGSIb3DQEBCwUAA4IBAQBVLzHSH9qjVwCxfrkE
nIqcWPyv0O2/Eynffb7drz4EqvoTY9lvJli81EJt7XrivF2AS74vXYDEI2tSp95E
7Px6EEYH1Vn96A+Yx3FXwwj0NblV1B9TrVjMsw8vpB3l7EFGA7oQjjzxTPMHaxcp
ae/l8FGXgepoRuTUn451Vb509lm5/g5Tph7UiZYjdIAkti55SSTsW8vToAQC5L6R
0mLEuopyYiM9/Hso554YaKcjbw7kjVW6eMnLaWwYX2AdbBX6gcCmkVdysF05xQR4
iJM3Y25aBsnRbGlA1cB2dzFGvj4532PFfCagVQPAQQmAnxOlpZXgS3DjVw06PzGS
u0PQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:50 2024 by rpki-client on console-ams.rpki-client.org