Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/RPQbOHDP5f9n1By4mqwH4fhw1TI.roa
File: RPQbOHDP5f9n1By4mqwH4fhw1TI.roa (raw, json)
Hash identifier: kv9hMH16A1aRfv7UIsyvQ2bwSOQjVyvOtNY7blCGEj4=
Subject key identifier: 44:F4:1B:38:70:CF:E5:FF:67:D4:1C:B8:9A:AC:07:E1:F8:70:D5:32
Certificate issuer: /CN=fde76ca85e96541a5add3cacaf1e5e114faa47ef
Certificate serial: 0194221FA33C0B614298FA568BC7B2C31218
Authority key identifier: FD:E7:6C:A8:5E:96:54:1A:5A:DD:3C:AC:AF:1E:5E:11:4F:AA:47:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_edsqF6WVBpa3Tysrx5eEU-qR-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/RPQbOHDP5f9n1By4mqwH4fhw1TI.roa
Signing time: Wed 01 Jan 2025 13:48:06 +0000
ROA not before: Wed 01 Jan 2025 13:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43370
IP address blocks: 37.46.48.0/22 maxlen: 22
37.77.128.0/24 maxlen: 24
37.221.202.0/24 maxlen: 24
37.221.207.0/24 maxlen: 24
46.34.130.0/23 maxlen: 23
46.34.146.0/23 maxlen: 23
62.32.84.0/23 maxlen: 23
62.32.92.0/23 maxlen: 23
79.142.93.0/24 maxlen: 24
79.142.94.0/23 maxlen: 23
95.161.184.0/22 maxlen: 22
95.161.196.0/22 maxlen: 22
95.161.224.0/22 maxlen: 22
178.16.157.0/24 maxlen: 24
185.244.132.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:a3:3c:0b:61:42:98:fa:56:8b:c7:b2:c3:12:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde76ca85e96541a5add3cacaf1e5e114faa47ef
Validity
Not Before: Jan 1 13:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=44f41b3870cfe5ff67d41cb89aac07e1f870d532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:08:67:b6:71:7c:d9:58:26:a0:af:bc:96:9d:
c0:20:17:31:a2:19:37:e1:fb:1e:ff:3c:79:bf:18:
d0:2a:c5:99:48:7f:c3:11:f0:5b:e2:1c:03:f9:62:
e8:b2:e9:54:85:9f:ef:c3:09:30:e2:88:ee:3d:57:
b0:e3:f7:ed:a6:9c:2e:04:80:25:99:fb:a1:ae:43:
f1:6d:54:98:57:4f:6d:d2:e2:ee:71:37:54:d5:3e:
12:5f:c9:33:89:74:82:55:a3:79:eb:77:98:97:0d:
46:89:6b:3b:75:1a:03:e1:6f:27:67:61:16:c1:4e:
9c:85:87:95:9f:e5:dd:0b:72:76:a2:ad:0b:01:46:
47:01:2e:62:ea:90:da:10:28:e2:72:19:54:0c:b5:
0f:61:a4:14:c0:bb:87:46:7e:67:fa:42:6b:b1:f7:
4b:33:3f:24:e4:00:5d:59:69:42:6c:66:04:4c:38:
b7:08:94:2e:21:ab:15:c8:8d:fe:38:ba:3c:ca:82:
c2:83:bc:23:84:b6:76:00:a5:f7:d0:23:fc:86:34:
2f:53:f7:29:6a:81:52:0c:3d:46:98:3a:91:29:1d:
48:f4:76:93:36:5b:d6:82:6a:a3:91:62:0e:f5:0a:
a7:f1:a2:50:5a:5e:94:6d:10:af:51:3c:0f:ab:8f:
32:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F4:1B:38:70:CF:E5:FF:67:D4:1C:B8:9A:AC:07:E1:F8:70:D5:32
X509v3 Authority Key Identifier:
keyid:FD:E7:6C:A8:5E:96:54:1A:5A:DD:3C:AC:AF:1E:5E:11:4F:AA:47:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_edsqF6WVBpa3Tysrx5eEU-qR-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/RPQbOHDP5f9n1By4mqwH4fhw1TI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.48.0/22
37.77.128.0/24
37.221.202.0/24
37.221.207.0/24
46.34.130.0/23
46.34.146.0/23
62.32.84.0/23
62.32.92.0/23
79.142.93.0-79.142.95.255
95.161.184.0/22
95.161.196.0/22
95.161.224.0/22
178.16.157.0/24
185.244.132.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:6e:74:7a:db:15:07:54:ad:22:df:a3:16:9c:fc:15:fb:6e:
69:87:d2:4d:6b:4f:23:6f:5f:d5:ad:9b:bd:cc:19:e6:17:99:
68:b6:8e:a4:ab:6d:4a:0b:ab:3f:27:95:e7:4c:ee:6f:e0:67:
85:c5:a8:40:cf:f2:ff:4b:ae:53:e5:38:be:3c:4b:97:7f:1c:
de:62:5e:ee:c2:4a:b5:c2:c5:d9:c3:91:dd:58:b6:bb:f4:1f:
d7:7c:5a:76:6f:22:de:d1:32:99:c8:d5:c3:e0:e3:b3:4a:c0:
92:34:f6:2d:eb:ca:d1:6c:3c:13:e9:1f:af:53:77:9e:79:45:
cc:09:a6:e6:8f:cf:55:30:d3:6e:1f:37:74:8b:fe:34:b1:0b:
04:d6:be:66:82:f7:25:ed:9b:66:1b:da:21:8e:e4:8b:21:b3:
ea:ce:46:94:63:d8:72:ac:ab:da:e3:5b:53:47:77:2b:5b:78:
3c:15:4d:b1:c5:86:e7:62:ca:c9:11:b2:53:a3:bb:53:99:88:
4f:a9:a3:8e:22:58:e1:71:b0:45:24:6a:7f:46:99:89:8e:90:
6f:2e:90:27:fe:b6:85:f6:03:1d:2f:35:1a:8f:66:b7:c3:9d:
eb:3e:6e:5e:fe:2d:aa:a9:66:c4:92:9a:a9:ff:38:49:d9:46:
a0:e0:97:93
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgISAZQiH6M8C2FCmPpWi8eywxIYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZTc2Y2E4NWU5NjU0MWE1YWRkM2NhY2FmMWU1ZTExNGZh
YTQ3ZWYwHhcNMjUwMTAxMTM0ODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NGY0MWIzODcwY2ZlNWZmNjdkNDFjYjg5YWFjMDdlMWY4NzBkNTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyghntnF82VgmoK+8lp3AIBcxohk3
4fse/zx5vxjQKsWZSH/DEfBb4hwD+WLosulUhZ/vwwkw4ojuPVew4/ftppwuBIAl
mfuhrkPxbVSYV09t0uLucTdU1T4SX8kziXSCVaN563eYlw1GiWs7dRoD4W8nZ2EW
wU6chYeVn+XdC3J2oq0LAUZHAS5i6pDaECjichlUDLUPYaQUwLuHRn5n+kJrsfdL
Mz8k5ABdWWlCbGYETDi3CJQuIasVyI3+OLo8yoLCg7wjhLZ2AKX30CP8hjQvU/cp
aoFSDD1GmDqRKR1I9HaTNlvWgmqjkWIO9Qqn8aJQWl6UbRCvUTwPq48yewIDAQAB
o4ICXzCCAlswHQYDVR0OBBYEFET0Gzhwz+X/Z9QcuJqsB+H4cNUyMB8GA1UdIwQY
MBaAFP3nbKhellQaWt08rK8eXhFPqkfvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2Vkc3FGNldWQnBhM1R5c3J4NWVFVS1xUi04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9mODUyYWMtOWU5OC00NWI3LTg3N2Yt
MjI5ZTJjYjBmNjZjLzEvUlBRYk9IRFA1ZjluMUJ5NG1xd0g0Zmh3MVRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9mODUyYWMtOWU5OC00NWI3LTg3N2YtMjI5ZTJjYjBmNjZj
LzEvX2Vkc3FGNldWQnBhM1R5c3J4NWVFVS1xUi04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHUGCCsGAQUFBwEHAQH/BGYwZDBiBAIAATBcAwQCJS4wAwQA
JU2AAwQAJd3KAwQAJd3PAwQBLiKCAwQBLiKSAwQBPiBUAwQBPiBcMAwDBABPjl0D
BAVPjkADBAJfobgDBAJfocQDBAJfoeADBACyEJ0DBAK59IQwDQYJKoZIhvcNAQEL
BQADggEBALVudHrbFQdUrSLfoxac/BX7bmmH0k1rTyNvX9Wtm73MGeYXmWi2jqSr
bUoLqz8nledM7m/gZ4XFqEDP8v9LrlPlOL48S5d/HN5iXu7CSrXCxdnDkd1Ytrv0
H9d8WnZvIt7RMpnI1cPg47NKwJI09i3rytFsPBPpH69Td555RcwJpuaPz1Uw024f
N3SL/jSxCwTWvmaC9yXtm2Yb2iGO5Ishs+rORpRj2HKsq9rjW1NHdytbeDwVTbHF
hudiyskRslOju1OZiE+po44iWOFxsEUkan9GmYmOkG8ukCf+toX2Ax0vNRqPZrfD
nes+bl7+LaqpZsSSmqn/OEnZRqDgl5M=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:47 2025 by rpki-client on console.sobornost.net