Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/QVs3JRJ54mdavYMKzmA8EI3DNl4.roa
File: QVs3JRJ54mdavYMKzmA8EI3DNl4.roa (raw, json)
Hash identifier: LgJPv3PoY+gQldztQf/0Gwj+6GMbnE4l+sQElujcqSY=
Subject key identifier: 41:5B:37:25:12:79:E2:67:5A:BD:83:0A:CE:60:3C:10:8D:C3:36:5E
Certificate issuer: /CN=4ab6d7c468d092c921314d66473cfa53851cd686
Certificate serial: 019422FB5CB563B516EF64A86658E4D7F852
Authority key identifier: 4A:B6:D7:C4:68:D0:92:C9:21:31:4D:66:47:3C:FA:53:85:1C:D6:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SrbXxGjQkskhMU1mRzz6U4Uc1oY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/QVs3JRJ54mdavYMKzmA8EI3DNl4.roa
Signing time: Wed 01 Jan 2025 17:48:06 +0000
ROA not before: Wed 01 Jan 2025 17:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35047
IP address blocks: 31.44.64.0/20 maxlen: 20
31.44.68.0/22 maxlen: 22
31.44.72.0/22 maxlen: 22
77.242.16.0/20 maxlen: 20
77.242.18.0/23 maxlen: 23
77.242.20.0/24 maxlen: 24
77.242.21.0/24 maxlen: 24
77.242.22.0/23 maxlen: 23
77.242.24.0/24 maxlen: 24
77.242.25.0/24 maxlen: 24
77.242.26.0/24 maxlen: 24
77.242.28.0/22 maxlen: 22
77.242.29.0/24 maxlen: 24
77.242.30.0/24 maxlen: 24
77.242.31.0/24 maxlen: 24
80.91.112.0/20 maxlen: 24
80.91.116.0/24 maxlen: 24
80.91.117.0/24 maxlen: 24
80.91.120.0/21 maxlen: 24
80.91.122.0/24 maxlen: 24
80.91.123.0/24 maxlen: 24
80.91.126.0/24 maxlen: 24
80.91.127.0/24 maxlen: 24
92.60.16.0/20 maxlen: 20
109.236.32.0/20 maxlen: 20
185.9.44.0/22 maxlen: 24
185.55.148.0/22 maxlen: 24
185.55.150.0/24 maxlen: 24
2a01:4f00::/32 maxlen: 32
2a01:4f00::/48 maxlen: 48
2a01:4f00:2233::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:5c:b5:63:b5:16:ef:64:a8:66:58:e4:d7:f8:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ab6d7c468d092c921314d66473cfa53851cd686
Validity
Not Before: Jan 1 17:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=415b37251279e2675abd830ace603c108dc3365e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0f:68:7b:3e:21:db:f6:ac:c7:d4:f2:82:11:
dc:76:fb:44:17:57:85:63:6a:7c:99:4f:5f:6f:fb:
08:d7:ee:34:0e:83:55:22:26:86:a0:66:a3:a8:55:
8a:4a:a7:1c:03:e2:14:68:d4:22:60:cd:24:58:cf:
2b:b4:26:00:53:f6:f0:56:79:8e:e3:9a:a1:22:43:
0d:6d:8d:36:54:b6:93:91:6c:47:05:c9:fa:3c:62:
5a:0a:e8:bb:df:0e:ed:ae:59:82:9b:f1:3b:c2:fc:
80:54:e5:26:a3:4a:b3:e7:0f:25:6a:02:b6:e9:15:
b6:0b:34:23:54:fb:60:7b:fc:29:63:a7:f2:64:c6:
c9:ad:0c:26:ca:f0:1e:af:6b:3d:35:0b:0b:a1:5e:
09:7f:4c:ed:9f:cf:ca:8b:95:0c:95:3d:1f:d5:73:
a1:24:4e:71:f2:f9:5e:bc:f1:6a:37:96:06:c3:11:
c7:8b:e9:ac:1a:6b:e9:c7:54:e4:e9:39:2a:f1:33:
11:b8:c1:67:e2:c5:ab:c5:16:35:c5:19:8f:dd:a6:
69:84:a8:d5:85:a2:48:9e:11:b9:5f:bd:69:dc:67:
16:37:d0:81:8a:81:89:30:66:0b:04:6a:0a:07:af:
4b:e9:a1:a1:01:55:64:a2:3c:96:36:9a:77:1d:30:
aa:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:5B:37:25:12:79:E2:67:5A:BD:83:0A:CE:60:3C:10:8D:C3:36:5E
X509v3 Authority Key Identifier:
keyid:4A:B6:D7:C4:68:D0:92:C9:21:31:4D:66:47:3C:FA:53:85:1C:D6:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SrbXxGjQkskhMU1mRzz6U4Uc1oY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/QVs3JRJ54mdavYMKzmA8EI3DNl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.44.64.0/20
77.242.16.0/20
80.91.112.0/20
92.60.16.0/20
109.236.32.0/20
185.9.44.0/22
185.55.148.0/22
IPv6:
2a01:4f00::/32
Signature Algorithm: sha256WithRSAEncryption
89:1f:53:43:01:ce:11:a6:18:e8:ab:e7:93:b5:a3:a6:9c:d2:
01:bc:ce:b7:55:5e:24:34:70:96:94:f4:9c:bf:b4:42:ef:22:
76:d2:99:f5:51:6d:a3:d8:af:46:23:c2:26:9c:5d:09:3e:77:
ff:61:8e:31:e0:22:a3:12:cf:4b:59:0b:c9:bc:6b:95:30:99:
d9:b3:2d:5a:9d:44:ea:60:69:56:91:b5:8f:59:98:67:b6:3c:
c4:77:04:76:88:d2:be:98:48:48:51:80:69:20:75:d0:67:fc:
78:a6:20:ca:e0:44:c4:47:44:97:33:a3:f3:70:f2:1f:cc:cc:
3c:fb:56:17:e4:5e:3c:58:64:6c:66:a2:67:51:63:e8:6c:f1:
aa:5d:72:39:ef:c5:f8:2f:08:d4:36:62:c0:84:63:93:64:6a:
ef:e8:53:9f:01:a1:de:3c:12:8f:b4:c9:4a:31:8d:69:3e:01:
43:2b:74:f0:84:9d:2b:b2:24:c1:2e:e0:b2:08:0d:d2:38:b7:
ab:84:f3:77:c6:89:7c:cc:c4:ad:ee:ad:22:a5:c8:dd:d7:17:
98:3a:5f:dc:5b:80:a4:91:f7:bb:88:ed:3d:91:de:b1:03:80:
d1:f6:55:e8:0e:ae:1f:3e:61:8f:bf:61:8a:8d:8f:27:d2:98:
8f:cc:40:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:47:43 2025 by rpki-client