Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/2QJ17Cg-iA-jwsauauXXALRLwf0.roa
File: 2QJ17Cg-iA-jwsauauXXALRLwf0.roa (raw, json)
Hash identifier: DQdxmaXuwHMdnnDjIcbaPedoaDApBxCGtVKVBlgTSPQ=
Subject key identifier: D9:02:75:EC:28:3E:88:0F:A3:C2:C6:AE:6A:E5:D7:00:B4:4B:C1:FD
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 019423D77A82CB292960BCCBADFDB8C8E7BA
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/2QJ17Cg-iA-jwsauauXXALRLwf0.roa
Signing time: Wed 01 Jan 2025 21:48:31 +0000
ROA not before: Wed 01 Jan 2025 21:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12578
IP address blocks: 46.109.0.0/16 maxlen: 24
62.85.0.0/17 maxlen: 24
78.84.0.0/16 maxlen: 24
80.232.128.0/17 maxlen: 24
80.232.147.0/24 maxlen: 24
80.232.150.0/24 maxlen: 24
80.232.150.13/32 maxlen: 32
80.232.195.0/24 maxlen: 24
81.198.0.0/16 maxlen: 24
81.198.95.0/24 maxlen: 24
84.237.128.0/17 maxlen: 24
87.110.0.0/16 maxlen: 24
87.246.144.0/20 maxlen: 24
87.246.160.0/19 maxlen: 24
91.105.0.0/17 maxlen: 24
95.68.0.0/17 maxlen: 24
185.38.56.0/22 maxlen: 24
194.8.16.0/21 maxlen: 24
194.8.24.0/22 maxlen: 24
195.2.96.0/19 maxlen: 24
195.13.128.0/17 maxlen: 24
195.13.200.0/24 maxlen: 24
195.13.201.0/24 maxlen: 24
195.13.215.0/24 maxlen: 24
195.13.228.0/24 maxlen: 24
195.13.237.0/24 maxlen: 24
195.13.245.0/24 maxlen: 24
195.13.249.0/24 maxlen: 24
195.13.251.0/24 maxlen: 24
195.13.253.0/24 maxlen: 24
195.114.32.0/19 maxlen: 24
195.122.0.0/19 maxlen: 24
195.122.26.0/23 maxlen: 24
195.122.28.0/24 maxlen: 24
195.122.29.0/24 maxlen: 24
2a02:2330::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:7a:82:cb:29:29:60:bc:cb:ad:fd:b8:c8:e7:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Jan 1 21:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d90275ec283e880fa3c2c6ae6ae5d700b44bc1fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:31:7b:f2:d0:b9:29:75:41:d4:55:b6:b3:50:
dc:80:a5:88:ca:4f:f5:0e:7c:6b:9a:4f:fe:03:0e:
ba:50:38:9e:d3:66:cc:61:b0:c1:00:f7:0f:bb:22:
0e:87:e5:a8:ca:0e:ab:b4:52:1e:5e:f7:64:6d:29:
d4:40:a0:c7:0a:fb:f5:fa:94:ca:a8:bd:67:c7:d1:
70:af:8c:66:6d:cb:7c:60:29:14:e5:8a:78:61:ef:
b2:28:a0:0c:05:ec:f0:d9:3e:7b:ac:b8:8c:ca:ed:
98:d2:74:6f:2f:23:75:8e:e4:f7:ae:12:89:dd:07:
1d:fe:6d:fe:4d:38:24:1b:8c:c3:a9:4c:3c:3b:01:
d6:b1:c3:12:9d:48:27:b5:4f:5f:e3:dc:e9:1a:27:
ec:73:f0:88:5a:64:38:d5:b5:f2:dc:35:50:9a:4c:
e0:86:46:64:d6:a0:62:b9:63:46:09:40:45:49:18:
ec:f6:43:e7:7e:d2:ff:76:0e:32:20:55:82:27:33:
b5:cd:46:7a:dd:93:63:19:c0:d6:23:d1:96:3b:1d:
94:b1:73:be:70:ce:50:19:68:6d:71:aa:32:ae:3c:
64:94:fc:31:a0:6e:77:32:ee:60:2a:1d:cf:9e:96:
df:c0:ed:52:f8:86:31:80:f5:0c:d9:f9:52:93:5e:
11:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:02:75:EC:28:3E:88:0F:A3:C2:C6:AE:6A:E5:D7:00:B4:4B:C1:FD
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/2QJ17Cg-iA-jwsauauXXALRLwf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.109.0.0/16
62.85.0.0/17
78.84.0.0/16
80.232.128.0/17
81.198.0.0/16
84.237.128.0/17
87.110.0.0/16
87.246.144.0-87.246.191.255
91.105.0.0/17
95.68.0.0/17
185.38.56.0/22
194.8.16.0-194.8.27.255
195.2.96.0/19
195.13.128.0/17
195.114.32.0/19
195.122.0.0/19
IPv6:
2a02:2330::/29
Signature Algorithm: sha256WithRSAEncryption
73:0f:84:fb:35:f4:e4:10:a1:db:b9:df:e3:1e:e5:e4:a8:9a:
5a:5a:b4:b7:b7:a1:35:32:33:cb:20:b9:02:6a:22:fe:31:49:
22:57:da:34:8d:0c:f5:77:b7:d1:07:76:11:27:ff:dd:d2:de:
3a:15:9c:02:2e:d0:48:2e:7c:cb:3f:46:73:3c:14:c1:59:5f:
bc:7f:7b:a0:09:02:75:69:0d:8c:93:ad:2c:c7:41:a7:e5:d2:
77:ab:02:46:9e:63:42:d5:e9:e1:2e:72:7f:07:4e:6c:b5:a0:
a1:f6:f5:e9:95:74:07:e1:61:e1:0f:c0:d5:3f:d9:28:3a:06:
f8:51:da:06:71:44:07:a2:ec:d9:de:63:71:1a:0b:e0:b8:ee:
4f:78:64:ad:82:40:f8:a1:8c:41:93:61:bd:67:a3:d5:d4:88:
48:70:c3:87:ca:84:89:e7:3b:9e:d7:8c:33:ff:08:df:95:10:
bd:86:34:3c:f6:71:3b:56:47:32:a8:be:f6:0a:ac:df:3f:08:
38:98:8e:04:e6:bc:f9:10:c9:3e:28:ad:9f:0e:55:f8:63:e9:
78:f0:77:18:c5:36:c3:23:47:f6:9b:14:0d:17:1a:b8:61:fa:
d3:2c:7f:5f:f8:a4:d8:d1:dd:a9:51:fd:16:1e:75:7f:8d:d3:
c5:71:ed:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:33:54 2025 by rpki-client