Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/QJ2zpll7JIgjyAmFKnoz2UqyFms.roa
File: QJ2zpll7JIgjyAmFKnoz2UqyFms.roa (raw, json)
Hash identifier: +cMWY6nHg9RokQ0zEpYV2VTIrjnPIZi4TN4lMIDSrSY=
Subject key identifier: 40:9D:B3:A6:59:7B:24:88:23:C8:09:85:2A:7A:33:D9:4A:B2:16:6B
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0181DA672D22EABAF0F67E8DF1C40E34CACF
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/QJ2zpll7JIgjyAmFKnoz2UqyFms.roa
Signing time: Thu 07 Jul 2022 20:43:23 +0000
ROA not before: Thu 07 Jul 2022 20:43:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207326
IP address blocks: 89.117.190.0/24 maxlen: 24
86.38.151.0/24 maxlen: 24
86.38.156.0/24 maxlen: 24
89.116.137.0/24 maxlen: 24
89.117.245.0/24 maxlen: 24
89.116.180.0/22 maxlen: 24
89.117.250.0/24 maxlen: 24
89.116.96.0/24 maxlen: 24
86.38.235.0/24 maxlen: 24
84.46.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:da:67:2d:22:ea:ba:f0:f6:7e:8d:f1:c4:0e:34:ca:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jul 7 20:43:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=409db3a6597b248823c809852a7a33d94ab2166b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:39:7a:f3:33:b2:58:a1:6e:c2:3a:51:d2:44:
54:90:a9:3c:db:07:24:a1:87:da:15:09:9e:af:21:
59:e0:46:0f:99:30:22:9f:10:71:dd:75:90:80:58:
a4:58:91:c1:56:76:83:ba:55:76:98:4e:68:cd:f5:
b2:96:76:71:72:34:77:c1:f1:d0:93:33:9b:da:4e:
d5:be:67:3b:80:39:1a:be:ad:5e:e8:02:ef:07:8a:
4f:9c:8d:13:63:b1:1e:fe:9e:8e:ab:d0:81:ad:d1:
ed:c8:34:91:06:90:42:8b:22:0d:ad:99:78:15:f9:
14:ef:d0:87:47:44:93:72:fc:d0:41:7c:ca:ae:bc:
6a:35:3a:5a:0a:5b:e5:e8:55:33:4d:bd:80:8f:3e:
d3:80:3e:b5:67:90:35:7b:b6:0b:32:67:88:ad:77:
e8:67:72:75:e8:cf:28:48:f2:47:2d:a5:9b:af:bc:
af:52:40:69:df:bf:5a:a8:ee:d3:89:7f:db:88:2e:
54:19:de:d1:01:ca:d6:3d:36:bc:14:e0:b1:77:d8:
18:f2:4c:17:38:0f:87:57:a0:70:ee:3c:e3:ca:94:
c1:6a:3f:00:d0:98:1c:e6:e2:f7:d2:66:cb:36:d9:
6f:a0:23:d5:b6:61:0d:d9:f5:a2:b9:48:81:1c:df:
ca:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:9D:B3:A6:59:7B:24:88:23:C8:09:85:2A:7A:33:D9:4A:B2:16:6B
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/QJ2zpll7JIgjyAmFKnoz2UqyFms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.236.0/22
86.38.151.0/24
86.38.156.0/24
86.38.235.0/24
89.116.96.0/24
89.116.137.0/24
89.116.180.0/22
89.117.190.0/24
89.117.245.0/24
89.117.250.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:a6:97:b0:6f:3b:9e:e8:a3:89:58:09:cb:8d:a0:70:51:d2:
17:81:f8:27:88:91:05:36:2c:bf:f7:47:80:f4:a2:bd:79:fa:
a1:9f:eb:66:47:5d:1c:42:f7:53:5c:1d:13:fe:fd:05:1c:69:
17:f9:b3:16:eb:c4:5f:b5:e7:6d:a5:44:cc:16:e9:4e:be:5f:
ab:b8:60:29:57:c9:a1:9c:9f:00:09:64:78:18:16:11:a0:2c:
13:39:da:52:40:76:65:21:15:cf:e3:12:fc:72:1f:a9:d6:54:
14:d2:a4:20:21:38:ba:56:51:c6:87:74:71:e1:d8:36:e9:68:
e6:b7:b7:45:26:dd:ed:b6:af:c4:0a:6e:2e:93:5b:b5:64:31:
a2:05:16:24:a2:1e:48:3d:72:31:39:13:26:cc:18:6b:51:52:
1a:2a:ce:5d:69:b8:1b:55:0d:04:ab:30:57:19:d0:5b:bf:76:
1a:ec:ba:a0:5b:33:31:48:c3:ca:51:19:4f:0b:3e:17:cb:ce:
93:24:56:08:52:5a:97:98:40:76:14:e5:30:5b:06:71:c6:fa:
39:94:81:bc:b2:b1:c3:cf:2d:2e:03:bb:37:0c:0c:46:27:20:
0e:9f:8d:d7:b7:e4:35:72:da:b9:a1:67:7a:49:af:bd:13:ea:
c7:e2:34:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 20:43:49 2025 by rpki-client