Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/qiVVDca94K78hWBHVEfKbU8xaMk.roa
File: qiVVDca94K78hWBHVEfKbU8xaMk.roa (raw, json)
Hash identifier: jm4AlQlTBKCxviOUnSKOeVf+3+et5Oo721ss2GPxR7Q=
Subject key identifier: AA:25:55:0D:C6:BD:E0:AE:FC:85:60:47:54:47:CA:6D:4F:31:68:C9
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01962FB7D831C94C71E50E3AE75B7B6B9E93
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/qiVVDca94K78hWBHVEfKbU8xaMk.roa
Signing time: Sun 13 Apr 2025 15:14:59 +0000
ROA not before: Sun 13 Apr 2025 15:14:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42216
IP address blocks: 31.210.47.0/24 maxlen: 24
77.92.142.0/24 maxlen: 24
77.92.143.0/24 maxlen: 24
77.92.152.0/24 maxlen: 24
78.135.86.0/24 maxlen: 24
78.135.98.0/24 maxlen: 24
188.132.188.0/24 maxlen: 24
188.132.213.0/24 maxlen: 24
188.132.214.0/24 maxlen: 24
188.132.215.0/24 maxlen: 24
188.132.216.0/24 maxlen: 24
188.132.217.0/24 maxlen: 24
188.132.218.0/24 maxlen: 24
188.132.228.0/24 maxlen: 24
2a10:9440::/48 maxlen: 48
2a10:9440:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:b7:d8:31:c9:4c:71:e5:0e:3a:e7:5b:7b:6b:9e:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Apr 13 15:14:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa25550dc6bde0aefc8560475447ca6d4f3168c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d5:e0:9a:21:c5:c1:e7:34:12:c8:6d:52:b7:
45:29:69:c1:6d:2b:fb:19:a2:a6:f3:eb:58:f1:de:
b6:f0:82:01:92:6f:82:1c:94:e7:78:07:e5:59:7b:
4b:21:0d:92:17:32:92:eb:b3:c7:04:ec:4f:34:79:
16:5f:2b:6a:84:39:a0:45:71:f9:76:85:60:19:ef:
3e:50:31:0a:c2:8f:7a:ed:d1:31:c1:17:1d:a7:6d:
db:ce:47:db:26:8a:26:bf:26:43:74:d7:6c:c0:2c:
d3:4c:36:9e:6a:99:0d:57:24:9e:0a:66:2a:7d:27:
5a:c8:83:fb:1c:d8:fb:27:ea:5c:8b:97:80:00:b6:
db:a2:44:56:95:32:9b:f5:83:b4:cb:de:ef:c5:23:
d4:d4:b0:23:6d:bf:64:68:e7:71:97:49:5d:f8:a9:
06:97:83:87:a6:cc:cb:00:da:18:3f:60:a3:16:e4:
4c:a9:b3:9c:5e:e6:83:4b:ab:4d:ad:53:aa:27:99:
b5:93:60:6b:90:1a:14:5e:0c:bc:7f:90:5c:6a:e0:
7e:55:63:7f:0c:fc:c3:ef:a5:9a:70:ae:30:dd:8f:
56:b4:83:4d:de:76:6a:4f:e9:58:9e:28:99:a7:3a:
78:09:b5:58:eb:0a:de:c3:66:34:96:64:e3:ee:55:
f8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:25:55:0D:C6:BD:E0:AE:FC:85:60:47:54:47:CA:6D:4F:31:68:C9
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/qiVVDca94K78hWBHVEfKbU8xaMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.47.0/24
77.92.142.0/23
77.92.152.0/24
78.135.86.0/24
78.135.98.0/24
188.132.188.0/24
188.132.213.0-188.132.218.255
188.132.228.0/24
IPv6:
2a10:9440::/47
Signature Algorithm: sha256WithRSAEncryption
92:70:3c:27:0a:7a:16:d6:49:df:04:26:95:d7:9e:44:4f:27:
a5:b8:c9:93:1c:c4:da:44:0c:c0:a2:a5:8d:12:16:2f:ba:a2:
b9:fe:73:80:19:8a:fd:43:f7:87:ed:be:5d:1e:24:f4:b0:81:
4b:ee:8a:69:ae:56:50:7f:7f:65:e8:db:15:39:b6:28:59:62:
85:83:9a:0d:c5:ea:0a:07:d7:3b:54:d1:05:93:1b:44:f1:72:
c3:49:8e:a7:f9:70:78:c1:d0:c5:36:4f:fb:96:e2:49:d0:37:
73:1c:d1:60:9f:b8:aa:0e:2e:d9:0c:06:f4:9f:16:05:68:59:
8d:c8:95:52:3b:06:ef:27:43:d5:c3:f5:15:cc:11:6f:1c:57:
e2:7d:71:84:ae:65:75:54:fa:62:71:b9:a4:7d:e2:c6:b1:9d:
b8:3a:49:2e:0c:4d:37:05:d9:68:c2:8a:7e:2d:bd:5e:6c:c7:
d0:72:10:5e:ff:4e:1e:48:07:7c:2f:35:bc:94:9e:04:4c:f4:
ac:6a:fd:07:db:2f:43:48:29:18:c6:bf:9c:5b:3c:8e:0f:39:
1d:89:60:ea:3f:75:f7:03:90:82:06:dd:45:15:7f:72:aa:fe:
e4:94:3f:42:c9:e5:61:8e:2d:e5:88:c8:66:10:c2:e5:8a:53:
f0:09:7e:43
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgISAZYvt9gxyUxx5Q4651t7a56TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjUwNDEzMTUxNDU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTI1NTUwZGM2YmRlMGFlZmM4NTYwNDc1NDQ3Y2E2ZDRmMzE2OGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNXgmiHFwec0EshtUrdFKWnBbSv7
GaKm8+tY8d628IIBkm+CHJTneAflWXtLIQ2SFzKS67PHBOxPNHkWXytqhDmgRXH5
doVgGe8+UDEKwo967dExwRcdp23bzkfbJoomvyZDdNdswCzTTDaeapkNVySeCmYq
fSdayIP7HNj7J+pci5eAALbbokRWlTKb9YO0y97vxSPU1LAjbb9kaOdxl0ld+KkG
l4OHpszLANoYP2CjFuRMqbOcXuaDS6tNrVOqJ5m1k2BrkBoUXgy8f5BcauB+VWN/
DPzD76WacK4w3Y9WtINN3nZqT+lYniiZpzp4CbVY6wrew2Y0lmTj7lX4pwIDAQAB
o4ICTDCCAkgwHQYDVR0OBBYEFKolVQ3GveCu/IVgR1RHym1PMWjJMB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvcWlWVkRjYTk0Szc4aFdCSFZFZktiVTh4YU1rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGIGCCsGAQUFBwEHAQH/BFMwUTA+BAIAATA4AwQAH9IvAwQB
TVyOAwQATVyYAwQATodWAwQATodiAwQAvIS8MAwDBAC8hNUDBAC8hNoDBAC8hOQw
DwQCAAIwCQMHASoQlEAAADANBgkqhkiG9w0BAQsFAAOCAQEAknA8Jwp6FtZJ3wQm
ldeeRE8npbjJkxzE2kQMwKKljRIWL7qiuf5zgBmK/UP3h+2+XR4k9LCBS+6Kaa5W
UH9/ZejbFTm2KFlihYOaDcXqCgfXO1TRBZMbRPFyw0mOp/lweMHQxTZP+5biSdA3
cxzRYJ+4qg4u2QwG9J8WBWhZjciVUjsG7ydD1cP1FcwRbxxX4n1xhK5ldVT6YnG5
pH3ixrGduDpJLgxNNwXZaMKKfi29XmzH0HIQXv9OHkgHfC81vJSeBEz0rGr9B9sv
Q0gpGMa/nFs8jg85HYlg6j919wOQggbdRRV/cqr+5JQ/QsnlYY4t5YjIZhDC5YpT
8Al+Qw==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:06 2025 by rpki-client on console.sobornost.net