Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/QMe1cQvSWWyTmlxs7mg5bNBSDlw.roa
File: QMe1cQvSWWyTmlxs7mg5bNBSDlw.roa (raw, json)
Hash identifier: iejToeWDmgQDOWHcoY74bMQ91/UDUCJzy2kftI9HQTs=
Subject key identifier: 40:C7:B5:71:0B:D2:59:6C:93:9A:5C:6C:EE:68:39:6C:D0:52:0E:5C
Certificate issuer: /CN=3a92f5d936752baf2d0df713299499cecfa9f48d
Certificate serial: 019422FB3206F44BB9FB1D2130BD2C624C92
Authority key identifier: 3A:92:F5:D9:36:75:2B:AF:2D:0D:F7:13:29:94:99:CE:CF:A9:F4:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/QMe1cQvSWWyTmlxs7mg5bNBSDlw.roa
Signing time: Wed 01 Jan 2025 17:47:55 +0000
ROA not before: Wed 01 Jan 2025 17:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35444
IP address blocks: 45.93.220.0/22 maxlen: 22
80.90.80.0/20 maxlen: 20
80.90.80.0/24 maxlen: 24
80.90.83.0/24 maxlen: 24
80.90.87.0/24 maxlen: 24
80.90.89.0/24 maxlen: 24
80.90.90.0/24 maxlen: 24
80.90.91.0/24 maxlen: 24
80.90.92.0/24 maxlen: 24
81.26.200.0/21 maxlen: 21
81.26.200.0/24 maxlen: 24
81.26.201.0/24 maxlen: 24
81.26.202.0/24 maxlen: 24
81.26.203.0/24 maxlen: 24
81.26.204.0/24 maxlen: 24
81.26.205.0/24 maxlen: 24
81.26.206.0/23 maxlen: 24
93.93.168.0/22 maxlen: 22
93.93.168.0/23 maxlen: 23
93.93.168.0/24 maxlen: 24
93.93.169.0/24 maxlen: 24
93.93.170.0/23 maxlen: 23
93.93.170.0/24 maxlen: 24
93.93.171.0/24 maxlen: 24
185.132.92.0/23 maxlen: 23
185.132.92.0/24 maxlen: 24
185.132.93.0/24 maxlen: 24
185.132.94.0/24 maxlen: 24
185.132.95.0/24 maxlen: 24
185.158.0.0/22 maxlen: 22
185.158.0.0/23 maxlen: 23
185.158.0.0/24 maxlen: 24
185.158.1.0/24 maxlen: 24
185.158.2.0/23 maxlen: 23
185.158.2.0/24 maxlen: 24
185.158.3.0/24 maxlen: 24
185.175.252.0/22 maxlen: 22
185.187.0.0/22 maxlen: 23
185.187.0.0/23 maxlen: 23
185.187.0.0/24 maxlen: 24
185.187.1.0/24 maxlen: 24
185.187.2.0/23 maxlen: 23
185.187.2.0/24 maxlen: 24
185.187.3.0/24 maxlen: 24
185.212.188.0/22 maxlen: 22
185.212.188.0/23 maxlen: 23
185.212.188.0/24 maxlen: 24
185.212.189.0/24 maxlen: 24
185.212.190.0/23 maxlen: 23
185.212.190.0/24 maxlen: 24
185.212.191.0/24 maxlen: 24
185.239.8.0/22 maxlen: 22
185.239.8.0/23 maxlen: 23
185.239.8.0/24 maxlen: 24
185.239.9.0/24 maxlen: 24
185.239.10.0/23 maxlen: 23
185.239.10.0/24 maxlen: 24
185.239.11.0/24 maxlen: 24
2a03:2de0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:32:06:f4:4b:b9:fb:1d:21:30:bd:2c:62:4c:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a92f5d936752baf2d0df713299499cecfa9f48d
Validity
Not Before: Jan 1 17:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=40c7b5710bd2596c939a5c6cee68396cd0520e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:36:d7:b4:42:c9:50:bf:6c:b6:f3:a5:0f:b2:
4f:84:d7:ac:83:b7:e3:2e:b8:b1:a1:4f:28:dd:2a:
e9:91:65:fb:81:f4:99:94:b3:64:7a:84:14:ff:95:
3a:85:c4:ba:57:8a:55:af:a3:c1:2d:20:0c:27:78:
a7:6a:b0:8b:d5:ab:9b:c1:28:25:1b:ba:f4:80:35:
fb:1b:cb:6f:4d:2a:93:71:25:2a:90:1b:f9:46:7d:
91:ad:33:de:a7:08:be:ca:bf:93:99:0f:72:e0:e4:
00:7a:f2:93:bf:e7:a1:20:4b:9a:af:3a:7b:ad:77:
b7:02:6f:55:cb:6b:5a:6e:ed:c5:61:63:5d:d1:4e:
c4:5f:4c:72:cc:6e:d9:bd:f3:c4:d0:74:dc:c2:bc:
96:11:70:4b:52:ad:d4:8c:b5:9f:d7:c6:34:81:ad:
7f:f7:d6:50:18:9c:37:2f:c8:7a:5a:a2:90:9b:2b:
a4:ce:42:06:f8:c6:b9:8a:2b:ce:a0:90:33:b3:a9:
bc:48:e5:83:16:f5:0c:2f:91:04:ee:c4:7a:47:71:
1d:48:84:e0:bb:bc:bf:32:bd:77:cc:45:1c:60:ba:
42:8a:c0:cf:57:2e:8d:c6:9c:da:34:7c:48:26:15:
e9:63:20:18:2a:a1:40:ca:3c:4c:0c:1f:96:aa:79:
58:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C7:B5:71:0B:D2:59:6C:93:9A:5C:6C:EE:68:39:6C:D0:52:0E:5C
X509v3 Authority Key Identifier:
keyid:3A:92:F5:D9:36:75:2B:AF:2D:0D:F7:13:29:94:99:CE:CF:A9:F4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/QMe1cQvSWWyTmlxs7mg5bNBSDlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.220.0/22
80.90.80.0/20
81.26.200.0/21
93.93.168.0/22
185.132.92.0/22
185.158.0.0/22
185.175.252.0/22
185.187.0.0/22
185.212.188.0/22
185.239.8.0/22
IPv6:
2a03:2de0::/32
Signature Algorithm: sha256WithRSAEncryption
50:f2:f2:b8:e3:31:aa:93:2e:3a:b6:78:7e:82:d5:c7:46:c9:
bf:24:a1:36:8e:e3:0a:bc:a4:ea:d3:67:89:ba:87:b7:9a:12:
2f:0e:32:6b:da:b5:63:63:5f:e6:46:5e:33:f5:c8:e5:86:be:
11:0a:81:87:78:1c:8b:e3:e8:43:c1:c7:58:91:bf:fe:8f:43:
08:fc:83:cf:d6:b0:91:39:40:b7:29:20:8b:d9:57:94:7e:4a:
df:57:d9:20:84:d4:d1:30:9e:dc:d2:ce:63:bf:b5:12:5c:48:
9c:59:b4:30:89:b9:e4:82:e6:43:77:04:40:79:48:4f:1a:2a:
9e:3f:76:96:15:b6:bc:25:f9:b9:0c:a3:b3:73:4b:85:75:f0:
a1:4b:2a:34:13:60:7a:2a:0b:f9:c9:56:aa:35:eb:c9:e1:09:
17:b5:a5:52:f0:1e:2d:3a:dd:7a:97:51:0d:b9:70:d9:89:0a:
fa:6c:45:15:be:b3:a5:04:bc:19:0e:e5:d5:41:37:58:a9:5c:
1a:c2:db:25:f1:1a:ef:26:13:46:b8:de:ac:da:22:5f:6d:7a:
22:52:62:ea:10:01:38:1d:dd:ca:42:e8:eb:65:50:c5:46:ec:
d6:68:cd:19:18:9d:57:4e:8f:58:b6:c3:69:2a:9a:fe:30:8e:
4b:f7:19:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:46:56 2025 by rpki-client