Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/QnsaffS-YNNtCHhHEhQ4OKBUBSo.roa
File: QnsaffS-YNNtCHhHEhQ4OKBUBSo.roa (raw, json)
Hash identifier: jUwDngRPHw2N9VFfgK1oar/80VGpjjFHaEr/YKYFVpE=
Subject key identifier: 42:7B:1A:7D:F4:BE:60:D3:6D:08:78:47:12:14:38:38:A0:54:05:2A
Certificate issuer: /CN=fcbe62378bb580af4ed70bfa35abc840945d7803
Certificate serial: 019420D5F45E65C90258E06925D9AA634E87
Authority key identifier: FC:BE:62:37:8B:B5:80:AF:4E:D7:0B:FA:35:AB:C8:40:94:5D:78:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/QnsaffS-YNNtCHhHEhQ4OKBUBSo.roa
Signing time: Wed 01 Jan 2025 07:48:00 +0000
ROA not before: Wed 01 Jan 2025 07:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42300
IP address blocks: 77.240.240.0/22 maxlen: 22
77.240.240.0/24 maxlen: 24
77.240.241.0/24 maxlen: 24
77.240.242.0/24 maxlen: 24
77.240.243.0/24 maxlen: 24
178.236.200.0/24 maxlen: 24
178.236.201.0/24 maxlen: 24
178.236.202.0/24 maxlen: 24
194.15.248.0/22 maxlen: 22
194.15.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:f4:5e:65:c9:02:58:e0:69:25:d9:aa:63:4e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcbe62378bb580af4ed70bfa35abc840945d7803
Validity
Not Before: Jan 1 07:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=427b1a7df4be60d36d08784712143838a054052a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fb:b2:ef:d4:64:2f:27:d8:60:a9:e5:e0:de:
1a:94:9a:13:d7:3d:bf:cd:84:59:19:88:28:50:c2:
11:7b:97:eb:55:63:1c:f8:b0:fa:bb:30:0f:df:65:
1a:7b:b0:00:1b:eb:c2:72:c9:bd:1d:7b:58:d4:59:
61:f4:d6:ef:48:cf:b7:f9:6d:94:d1:ed:2a:b1:d6:
7a:3a:fa:52:11:d9:e7:90:36:0e:67:0c:b0:fc:ea:
49:ce:cd:e2:95:5a:72:08:37:46:02:6f:81:7c:45:
55:4d:43:67:67:02:88:18:24:3f:01:47:42:e8:a3:
df:8a:18:a1:60:14:9f:f6:b8:51:15:05:45:cb:f0:
d9:ca:38:38:0f:02:ec:65:de:f6:eb:4a:dc:c4:7c:
09:08:e6:8e:a2:07:8e:0d:2b:e9:6b:93:b2:a2:38:
c6:ab:ab:bf:d6:17:ab:3c:7a:1c:4e:69:38:62:42:
15:f4:75:b5:71:5b:ac:44:e7:65:ec:89:82:53:19:
9f:7c:e6:3b:c1:eb:40:0e:c7:e5:cb:13:3e:46:fe:
40:b6:9c:ba:e7:a2:0a:f2:11:ab:24:21:30:5c:f6:
62:f8:e1:75:20:f5:e8:a0:4e:0e:69:1f:99:89:47:
01:cf:dd:4c:71:9a:3c:6e:97:e7:a5:9d:58:59:3f:
4b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:7B:1A:7D:F4:BE:60:D3:6D:08:78:47:12:14:38:38:A0:54:05:2A
X509v3 Authority Key Identifier:
keyid:FC:BE:62:37:8B:B5:80:AF:4E:D7:0B:FA:35:AB:C8:40:94:5D:78:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_L5iN4u1gK9O1wv6NavIQJRdeAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/QnsaffS-YNNtCHhHEhQ4OKBUBSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b8d29c-3333-493c-9739-df56ec670de7/1/_L5iN4u1gK9O1wv6NavIQJRdeAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.240.240.0/22
178.236.200.0-178.236.202.255
194.15.248.0/22
Signature Algorithm: sha256WithRSAEncryption
72:fe:43:57:f4:f2:a7:b3:80:d3:8a:d5:08:0e:7b:79:bb:85:
9e:5e:70:1d:21:72:d3:97:4d:69:2e:13:aa:6e:65:db:7e:dd:
94:6b:76:2f:f9:e8:92:5f:15:f6:55:95:fb:7d:16:b3:dd:3f:
4f:1e:3f:83:e4:4e:90:d1:26:f7:c7:fa:1a:c6:33:dc:be:54:
eb:ed:a2:42:7b:df:8e:36:01:6f:4c:92:cb:8f:4e:ca:26:a9:
53:c9:27:cd:bc:c9:e6:91:88:31:ae:8a:6a:15:e7:be:49:ed:
42:b2:42:c2:20:6e:f8:8e:9c:86:ad:91:4b:00:b2:1d:b6:81:
7e:79:1f:5b:93:06:0c:94:9a:37:72:94:2b:b7:72:f8:c3:6d:
e7:3b:4c:08:81:16:50:8c:c4:12:ba:1d:01:94:5a:bd:8d:a0:
8e:c8:34:7b:cd:af:75:47:80:18:4a:8c:d3:b9:bf:45:ec:2e:
9a:b7:8f:35:cf:21:a0:a7:39:e8:88:e8:e1:6a:50:6e:09:1a:
04:85:30:a3:8f:32:01:fe:39:4c:ef:90:4a:0e:2e:5b:92:68:
23:8a:bc:02:d6:03:b8:98:1e:43:05:a1:04:87:e0:9c:9e:0b:
8d:da:b0:fb:ee:7c:e4:2f:0a:f2:ea:dd:79:c7:e9:11:92:f7:
c1:42:5c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:51:37 2025 by rpki-client