Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/QX_gxLQy_tChO0GWs6-3biEr3A0.roa
File: QX_gxLQy_tChO0GWs6-3biEr3A0.roa (raw, json)
Hash identifier: hdlAgpjIpFHAjr0LTzGPydJIjGe9k8IipH+fwRUDMr4=
Subject key identifier: 41:7F:E0:C4:B4:32:FE:D0:A1:3B:41:96:B3:AF:B7:6E:21:2B:DC:0D
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 019369B3C7B074B2A9F9EE462B38249890C3
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/QX_gxLQy_tChO0GWs6-3biEr3A0.roa
Signing time: Tue 26 Nov 2024 18:20:09 +0000
ROA not before: Tue 26 Nov 2024 18:20:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199173
IP address blocks: 77.78.157.0/24 maxlen: 24
77.78.158.0/24 maxlen: 24
85.187.184.0/24 maxlen: 24
85.187.185.0/24 maxlen: 24
85.187.186.0/24 maxlen: 24
85.187.218.0/23 maxlen: 23
85.187.224.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:b3:c7:b0:74:b2:a9:f9:ee:46:2b:38:24:98:90:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Nov 26 18:20:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=417fe0c4b432fed0a13b4196b3afb76e212bdc0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4a:46:21:72:98:9b:30:d1:71:04:db:7e:a6:
88:2a:9e:c7:04:39:cf:d2:86:11:7d:c3:df:50:cb:
df:06:cf:0b:f2:0d:c7:88:f5:9d:47:6f:81:f9:b2:
61:fe:1f:34:5d:eb:6e:84:d0:bb:2b:7a:95:d0:b2:
ce:0d:2a:9e:2b:14:02:87:8c:c1:f3:86:fe:29:e2:
81:a8:86:9b:52:36:fa:44:96:9f:19:c3:f0:71:7b:
f4:6b:db:ff:d2:36:93:e6:b6:9f:a5:61:06:2a:a1:
4f:83:28:0d:9f:87:55:7b:af:1d:be:b2:9a:a1:71:
66:14:58:1a:45:47:99:d4:35:b7:fc:f9:f1:2c:17:
a2:e8:81:b4:34:dd:38:88:29:e0:32:91:1b:01:23:
37:9c:40:3d:c4:02:9e:dd:e8:4e:60:80:48:04:b8:
1a:41:f2:3f:9f:60:9e:60:1b:84:ff:24:85:41:d9:
2a:1a:72:ad:bd:31:65:4b:09:e2:1f:da:e1:e9:db:
74:34:7e:98:fa:38:4e:a0:d2:bc:75:f0:d7:9d:3c:
9b:87:06:a1:2e:3b:1a:2e:a1:5e:b4:48:fc:3e:66:
c0:29:88:31:7b:ba:01:ea:2f:f0:9d:87:69:0f:e5:
be:69:34:c4:9a:68:57:7f:ec:b0:8e:b4:77:19:6f:
a7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:7F:E0:C4:B4:32:FE:D0:A1:3B:41:96:B3:AF:B7:6E:21:2B:DC:0D
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/QX_gxLQy_tChO0GWs6-3biEr3A0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.78.157.0-77.78.158.255
85.187.184.0-85.187.186.255
85.187.218.0/23
85.187.224.0/21
Signature Algorithm: sha256WithRSAEncryption
8c:78:0d:a8:92:ae:88:c7:c4:29:4e:0f:25:88:26:60:fb:4b:
5e:3c:20:78:cc:14:03:5a:8f:24:0d:1a:32:98:2e:e1:0c:df:
01:2b:d5:17:ed:a7:49:3b:b3:7a:b6:c4:7e:19:1c:9b:93:c1:
19:73:13:81:6c:30:4d:a5:97:8c:bb:c4:ab:27:ef:eb:50:e6:
54:fe:ec:32:c0:01:51:ec:d2:58:1b:e6:fa:47:fc:54:e8:9f:
5d:f3:e6:33:07:16:fe:c5:de:23:f8:ad:bb:70:bb:c9:f8:4d:
fb:e9:96:bb:26:21:94:80:c5:02:4c:88:7d:a8:88:8c:b4:4f:
ca:c1:99:b2:b0:95:91:2c:58:85:12:ee:44:2a:0f:b3:5a:86:
fb:d8:c3:48:00:dc:58:64:5c:f0:ea:26:c8:dd:4e:7f:3a:9e:
6d:5c:31:31:7d:58:49:f9:11:36:d9:7d:d0:64:8f:90:56:3d:
2f:4b:8a:65:f9:a7:86:97:83:b0:bc:33:b3:9b:7d:87:c7:d0:
f4:8a:12:9c:9a:ca:a3:86:50:2e:a2:24:0c:f9:3c:4c:de:45:
65:e7:57:a1:af:3a:8d:2e:40:8c:58:bb:8d:64:ee:36:0a:ad:
ad:8b:99:6d:c6:84:e4:9d:84:55:8f:ed:c5:c0:4f:56:b1:bf:
76:17:46:c0
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAZNps8ewdLKp+e5GKzgkmJDDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl
NGQxMWIwHhcNMjQxMTI2MTgyMDA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTdmZTBjNGI0MzJmZWQwYTEzYjQxOTZiM2FmYjc2ZTIxMmJkYzBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskpGIXKYmzDRcQTbfqaIKp7HBDnP
0oYRfcPfUMvfBs8L8g3HiPWdR2+B+bJh/h80XetuhNC7K3qV0LLODSqeKxQCh4zB
84b+KeKBqIabUjb6RJafGcPwcXv0a9v/0jaT5rafpWEGKqFPgygNn4dVe68dvrKa
oXFmFFgaRUeZ1DW3/PnxLBei6IG0NN04iCngMpEbASM3nEA9xAKe3ehOYIBIBLga
QfI/n2CeYBuE/ySFQdkqGnKtvTFlSwniH9rh6dt0NH6Y+jhOoNK8dfDXnTybhwah
LjsaLqFetEj8PmbAKYgxe7oB6i/wnYdpD+W+aTTEmmhXf+ywjrR3GW+nQwIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFEF/4MS0Mv7QoTtBlrOvt24hK9wNMB8GA1UdIwQY
MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt
YTk3YzBkYzBhNzQ5LzEvUVhfZ3hMUXlfdENoTzBHV3M2LTNiaUVyM0EwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5
LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBABNTp0D
BABNTp4wDAMEA1W7uAMEAFW7ugMEAVW72gMEA1W74DANBgkqhkiG9w0BAQsFAAOC
AQEAjHgNqJKuiMfEKU4PJYgmYPtLXjwgeMwUA1qPJA0aMpgu4QzfASvVF+2nSTuz
erbEfhkcm5PBGXMTgWwwTaWXjLvEqyfv61DmVP7sMsABUezSWBvm+kf8VOifXfPm
MwcW/sXeI/itu3C7yfhN++mWuyYhlIDFAkyIfaiIjLRPysGZsrCVkSxYhRLuRCoP
s1qG+9jDSADcWGRc8OomyN1OfzqebVwxMX1YSfkRNtl90GSPkFY9L0uKZfmnhpeD
sLwzs5t9h8fQ9IoSnJrKo4ZQLqIkDPk8TN5FZedXoa86jS5AjFi7jWTuNgqtrYuZ
bcaE5J2EVY/txcBPVrG/dhdGwA==
-----END CERTIFICATE-----
Generated at Wed Apr 9 02:53:06 2025 by rpki-client