Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/QkU-qCinUlPe53Hs6eMsPbVPlhY.roa
File: QkU-qCinUlPe53Hs6eMsPbVPlhY.roa (raw, json)
Hash identifier: TQmZyr7cdHGM7HbGWxIOIfm9Itbcnth0LgTPHbUWc60=
Subject key identifier: 42:45:3E:A8:28:A7:52:53:DE:E7:71:EC:E9:E3:2C:3D:B5:4F:96:16
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 01962A73469C7C440F63CD5D16220C588943
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/QkU-qCinUlPe53Hs6eMsPbVPlhY.roa
Signing time: Sat 12 Apr 2025 14:41:59 +0000
ROA not before: Sat 12 Apr 2025 14:41:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 109.111.32.0/20 maxlen: 24
109.111.42.0/23 maxlen: 24
109.111.44.0/22 maxlen: 24
109.111.56.0/22 maxlen: 22
176.221.20.0/22 maxlen: 24
176.221.24.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2a:73:46:9c:7c:44:0f:63:cd:5d:16:22:0c:58:89:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Apr 12 14:41:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42453ea828a75253dee771ece9e32c3db54f9616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5c:f0:bf:70:d2:36:4a:6f:10:30:64:90:72:
7a:01:93:0d:fa:b0:7a:13:d1:47:1c:4a:e6:14:5f:
8c:1e:fd:5f:af:17:e2:3e:60:1b:68:a9:a3:21:19:
15:8c:2f:ba:5f:41:1e:b6:45:ea:df:b8:f3:50:7b:
5a:ba:b2:ef:7f:e6:23:22:ec:55:7d:4b:5f:6a:a3:
75:17:87:8e:cc:cf:a2:7c:83:95:68:fd:ab:47:25:
3b:39:6f:82:75:56:87:f2:91:13:f9:d9:ae:5d:ca:
7b:28:6e:e6:0d:fa:58:3e:f7:11:16:e2:e5:32:14:
31:bf:01:5f:05:51:40:d5:02:2c:af:0f:f6:e8:1c:
74:a9:1d:e5:3f:45:93:e5:4d:8b:84:3b:a1:aa:aa:
fa:0c:68:92:4a:e5:2c:de:45:b0:85:6e:7b:8d:3f:
f7:a8:87:96:c2:76:6b:21:58:cd:40:cb:cd:dd:ea:
3e:10:82:ec:14:75:a7:be:59:93:b3:49:9a:83:3f:
ed:3d:49:fb:de:1c:06:34:d3:22:c0:2e:63:70:6f:
75:23:e3:f1:35:3c:65:3a:93:8a:20:7e:b4:d2:15:
ef:e0:66:4a:a2:23:aa:56:0b:9f:b2:9d:0a:ba:11:
8e:13:b9:f5:61:14:8a:64:6b:6d:9b:cc:eb:44:39:
5c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:45:3E:A8:28:A7:52:53:DE:E7:71:EC:E9:E3:2C:3D:B5:4F:96:16
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/QkU-qCinUlPe53Hs6eMsPbVPlhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.32.0/20
109.111.56.0/22
176.221.20.0-176.221.27.255
Signature Algorithm: sha256WithRSAEncryption
a6:74:3c:42:f8:dd:9b:ba:78:51:7a:9c:cf:50:45:d2:e5:dc:
c1:eb:53:81:8c:af:d6:f6:6c:8a:a2:0f:88:d2:55:57:7a:63:
18:0c:de:37:b1:d3:59:79:46:9e:fc:2e:f3:18:95:71:90:17:
85:d9:56:d5:7c:fc:45:04:f5:1a:87:9b:4c:10:b4:f6:19:0e:
8e:7f:da:52:c3:52:69:ec:26:f7:d7:1f:16:ab:f1:9b:c2:d2:
d9:a7:90:4d:3b:70:01:0e:4a:f2:39:7d:20:a9:3f:d6:23:69:
66:d1:64:ba:36:dc:98:1c:51:62:a6:a8:93:e7:9e:f4:2e:81:
3a:89:06:3a:8e:8f:3a:18:c0:e2:00:e1:81:5a:09:14:8f:ea:
9a:46:9b:8a:12:09:ea:8d:7f:e2:16:df:56:28:cb:01:2e:02:
60:11:70:e0:56:8f:b0:ff:16:41:6f:bd:1e:50:cb:cb:93:da:
de:98:bc:ac:d6:b2:41:0a:23:bb:53:bd:1e:55:3a:fa:53:e8:
4e:52:7c:b0:37:e8:d5:fa:f7:5a:88:09:09:b5:d0:23:3b:cf:
5b:2e:ce:9b:9a:fa:93:30:bf:e0:00:83:72:be:af:93:e9:fe:
65:28:00:d5:ee:5b:ee:5b:cd:7c:59:72:50:8e:50:b0:84:1c:
b8:cd:8c:c8
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZYqc0acfEQPY81dFiIMWIlDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNzVlNGU5NGI1Y2I3NDUxN2I3YjAxNTY4MDE1ZGE5ZTZl
ZWNkYjYwHhcNMjUwNDEyMTQ0MTU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MjQ1M2VhODI4YTc1MjUzZGVlNzcxZWNlOWUzMmMzZGI1NGY5NjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21zwv3DSNkpvEDBkkHJ6AZMN+rB6
E9FHHErmFF+MHv1frxfiPmAbaKmjIRkVjC+6X0EetkXq37jzUHtaurLvf+YjIuxV
fUtfaqN1F4eOzM+ifIOVaP2rRyU7OW+CdVaH8pET+dmuXcp7KG7mDfpYPvcRFuLl
MhQxvwFfBVFA1QIsrw/26Bx0qR3lP0WT5U2LhDuhqqr6DGiSSuUs3kWwhW57jT/3
qIeWwnZrIVjNQMvN3eo+EILsFHWnvlmTs0magz/tPUn73hwGNNMiwC5jcG91I+Px
NTxlOpOKIH600hXv4GZKoiOqVgufsp0KuhGOE7n1YRSKZGttm8zrRDlc5QIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFEJFPqgop1JT3udx7OnjLD21T5YWMB8GA1UdIwQY
MBaAFG915OlLXLdFF7ewFWgBXanm7s22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzIt
NjY0NTc3MjRjMmQzLzEvUWtVLXFDaW5VbFBlNTNIczZlTXNQYlZQbGhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzItNjY0NTc3MjRjMmQz
LzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQEbW8gAwQC
bW84MAwDBAKw3RQDBAKw3RgwDQYJKoZIhvcNAQELBQADggEBAKZ0PEL43Zu6eFF6
nM9QRdLl3MHrU4GMr9b2bIqiD4jSVVd6YxgM3jex01l5Rp78LvMYlXGQF4XZVtV8
/EUE9RqHm0wQtPYZDo5/2lLDUmnsJvfXHxar8ZvC0tmnkE07cAEOSvI5fSCpP9Yj
aWbRZLo23JgcUWKmqJPnnvQugTqJBjqOjzoYwOIA4YFaCRSP6ppGm4oSCeqNf+IW
31YoywEuAmARcOBWj7D/FkFvvR5Qy8uT2t6YvKzWskEKI7tTvR5VOvpT6E5SfLA3
6NX691qICQm10CM7z1suzpua+pMwv+AAg3K+r5Pp/mUoANXuW+5bzXxZclCOULCE
HLjNjMg=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:54 2025 by rpki-client on console.sobornost.net