Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/QPWAwQFNqSZZic2_WlAPH58qqA4.roa
File: QPWAwQFNqSZZic2_WlAPH58qqA4.roa (raw, json)
Hash identifier: skiFt149qEZ92Md1xg5hAbPh0VVNiYKSR7UbnADB92E=
Subject key identifier: 40:F5:80:C1:01:4D:A9:26:59:89:CD:BF:5A:50:0F:1F:9F:2A:A8:0E
Certificate issuer: /CN=bd7d8178cec5cd376548a9049117f469c0a7431c
Certificate serial: 01946DE40206193A15F3C40D5CBF39451C3A
Authority key identifier: BD:7D:81:78:CE:C5:CD:37:65:48:A9:04:91:17:F4:69:C0:A7:43:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/QPWAwQFNqSZZic2_WlAPH58qqA4.roa
Signing time: Thu 16 Jan 2025 06:54:06 +0000
ROA not before: Thu 16 Jan 2025 06:54:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43937
IP address blocks: 78.24.48.0/24 maxlen: 24
78.24.49.0/24 maxlen: 24
78.24.50.0/24 maxlen: 24
78.24.51.0/24 maxlen: 24
78.24.52.0/24 maxlen: 24
78.24.53.0/24 maxlen: 24
78.24.54.0/24 maxlen: 24
78.24.55.0/24 maxlen: 24
82.116.128.0/24 maxlen: 24
82.116.129.0/24 maxlen: 24
82.116.130.0/24 maxlen: 24
82.116.131.0/24 maxlen: 24
82.116.132.0/24 maxlen: 24
82.116.133.0/24 maxlen: 24
82.116.134.0/24 maxlen: 24
82.116.135.0/24 maxlen: 24
82.116.136.0/24 maxlen: 24
82.116.137.0/24 maxlen: 24
82.116.138.0/24 maxlen: 24
82.116.139.0/24 maxlen: 24
82.116.140.0/24 maxlen: 24
82.116.141.0/24 maxlen: 24
82.116.142.0/24 maxlen: 24
82.116.143.0/24 maxlen: 24
82.116.144.0/24 maxlen: 24
82.116.145.0/24 maxlen: 24
82.116.146.0/24 maxlen: 24
82.116.147.0/24 maxlen: 24
82.116.148.0/24 maxlen: 24
82.116.149.0/24 maxlen: 24
82.116.150.0/24 maxlen: 24
82.116.151.0/24 maxlen: 24
82.116.152.0/24 maxlen: 24
82.116.153.0/24 maxlen: 24
82.116.154.0/24 maxlen: 24
82.116.155.0/24 maxlen: 24
82.116.156.0/24 maxlen: 24
82.116.157.0/24 maxlen: 24
82.116.158.0/24 maxlen: 24
82.116.159.0/24 maxlen: 24
94.190.144.0/24 maxlen: 24
94.190.145.0/24 maxlen: 24
94.190.146.0/24 maxlen: 24
94.190.147.0/24 maxlen: 24
94.190.148.0/24 maxlen: 24
94.190.149.0/24 maxlen: 24
94.190.150.0/24 maxlen: 24
94.190.151.0/24 maxlen: 24
94.190.152.0/24 maxlen: 24
94.190.153.0/24 maxlen: 24
94.190.154.0/24 maxlen: 24
94.190.155.0/24 maxlen: 24
94.190.156.0/24 maxlen: 24
94.190.157.0/24 maxlen: 24
94.190.158.0/24 maxlen: 24
94.190.159.0/24 maxlen: 24
103.220.220.0/22 maxlen: 24
103.245.116.0/24 maxlen: 24
103.245.117.0/24 maxlen: 24
103.245.118.0/24 maxlen: 24
103.245.119.0/24 maxlen: 24
178.255.8.0/24 maxlen: 24
178.255.9.0/24 maxlen: 24
178.255.10.0/24 maxlen: 24
178.255.11.0/24 maxlen: 24
178.255.12.0/24 maxlen: 24
178.255.13.0/24 maxlen: 24
178.255.14.0/24 maxlen: 24
178.255.15.0/24 maxlen: 24
185.6.176.0/24 maxlen: 24
185.6.177.0/24 maxlen: 24
185.6.178.0/24 maxlen: 24
185.6.179.0/24 maxlen: 24
185.249.222.0/24 maxlen: 24
185.249.223.0/24 maxlen: 24
213.187.224.0/24 maxlen: 24
213.187.225.0/24 maxlen: 24
213.187.226.0/24 maxlen: 24
213.187.227.0/24 maxlen: 24
213.187.228.0/22 maxlen: 24
213.187.228.0/24 maxlen: 24
213.187.229.0/24 maxlen: 24
213.187.230.0/24 maxlen: 24
213.187.231.0/24 maxlen: 24
213.187.232.0/24 maxlen: 24
213.187.233.0/24 maxlen: 24
213.187.235.0/24 maxlen: 24
213.187.236.0/24 maxlen: 24
213.187.237.0/24 maxlen: 24
213.187.238.0/24 maxlen: 24
213.187.239.0/24 maxlen: 24
213.187.248.0/21 maxlen: 21
213.187.248.0/24 maxlen: 24
213.187.249.0/24 maxlen: 24
213.187.250.0/24 maxlen: 24
213.187.251.0/24 maxlen: 24
213.187.252.0/24 maxlen: 24
213.187.253.0/24 maxlen: 24
213.187.254.0/24 maxlen: 24
213.187.255.0/24 maxlen: 24
2a02:7980::/32 maxlen: 32
2a02:7980:105::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6d:e4:02:06:19:3a:15:f3:c4:0d:5c:bf:39:45:1c:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7d8178cec5cd376548a9049117f469c0a7431c
Validity
Not Before: Jan 16 06:54:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=40f580c1014da9265989cdbf5a500f1f9f2aa80e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bd:43:42:47:23:ad:e6:d7:62:c3:dd:aa:ed:
b1:7c:80:d0:8b:8b:07:3a:34:64:a8:0a:7a:e2:cb:
20:95:56:a8:a6:6d:f5:9a:c9:ae:b3:10:ca:bf:54:
77:12:f9:e3:a8:97:80:0c:e1:59:9e:0e:43:f6:08:
9f:6a:0c:35:04:98:70:82:8c:fe:3f:89:77:d5:8c:
06:16:f3:0b:d7:6f:b9:1f:6c:d1:e2:9e:95:8d:0e:
f9:4d:09:e6:74:0a:86:98:1c:48:4c:fc:42:f6:dc:
4a:3f:1d:76:27:68:b5:68:92:0a:1a:40:70:8f:2f:
18:23:42:ad:fe:7e:20:61:5d:ef:ad:a6:1b:50:7e:
41:b0:17:79:6e:8d:7d:ac:c1:40:30:ad:b6:fb:7e:
5f:d8:92:b6:4f:8a:4f:43:19:71:57:3d:91:9b:5c:
66:e0:80:dc:af:b5:04:5b:3e:be:32:26:b3:be:25:
f6:47:96:6d:0f:d9:3b:10:ce:e7:6d:e0:49:79:01:
fb:ba:b5:18:af:64:e0:23:0e:d9:79:7b:b4:4c:c3:
d2:9e:ef:f9:27:27:ae:f1:62:b3:31:15:12:4f:6e:
55:33:58:32:ac:53:de:4a:cc:78:a9:29:7d:dd:ff:
d4:9e:5b:c5:7f:01:01:53:3f:b4:37:7f:9e:07:0b:
50:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F5:80:C1:01:4D:A9:26:59:89:CD:BF:5A:50:0F:1F:9F:2A:A8:0E
X509v3 Authority Key Identifier:
keyid:BD:7D:81:78:CE:C5:CD:37:65:48:A9:04:91:17:F4:69:C0:A7:43:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/QPWAwQFNqSZZic2_WlAPH58qqA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.48.0/21
82.116.128.0/19
94.190.144.0/20
103.220.220.0/22
103.245.116.0/22
178.255.8.0/21
185.6.176.0/22
185.249.222.0/23
213.187.224.0-213.187.233.255
213.187.235.0-213.187.239.255
213.187.248.0/21
IPv6:
2a02:7980::/32
Signature Algorithm: sha256WithRSAEncryption
2f:9b:2d:07:a9:9a:26:e0:86:dc:46:7b:e1:4c:d8:3b:ef:d5:
1b:85:82:98:66:90:2a:30:ab:cc:7f:01:1e:c6:42:ec:d4:79:
47:4b:9b:10:23:48:60:da:ce:6a:5a:e4:a3:58:37:17:0a:37:
42:aa:02:f8:c9:84:06:c3:07:40:9e:02:29:24:7e:e6:07:09:
be:4c:01:63:2b:86:93:bb:59:fd:d4:8a:15:e5:d4:08:7e:12:
5d:a9:af:81:c0:92:02:88:f1:87:d0:ac:90:6a:1e:c4:22:e4:
7e:26:50:74:ef:0d:a4:92:a4:19:69:51:6e:09:ee:0b:b7:26:
77:9f:20:93:88:46:19:fd:01:8e:fc:bb:4d:ac:0c:04:64:83:
84:08:e9:c9:2a:3e:21:42:61:43:69:89:1a:d9:d3:ec:14:ff:
cc:cd:99:2a:50:39:98:05:67:0b:3c:e8:3a:f6:8e:31:29:53:
ee:11:d8:62:b6:72:59:f4:10:7d:1e:c8:86:d0:2d:6b:b7:37:
79:ee:4e:d1:5d:3d:44:48:a0:d5:a3:4a:9d:e5:e9:86:7f:d8:
3b:0b:5c:d4:04:9e:3d:ac:3f:87:8a:64:f7:ca:e6:15:58:20:
aa:be:65:52:1b:12:d8:62:38:77:62:68:69:36:b6:1e:ae:4c:
4b:1a:c5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:02:29 2025 by rpki-client