Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/S-FqJ5rHJScfH16THhv-Awb7K-Q.roa
File: S-FqJ5rHJScfH16THhv-Awb7K-Q.roa (raw, json)
Hash identifier: qZ4G5Ir5+2IF3qwAQCRLSDxYrzLLeDBCxC9VdbkE9zU=
Subject key identifier: 4B:E1:6A:27:9A:C7:25:27:1F:1F:5E:93:1E:1B:FE:03:06:FB:2B:E4
Certificate issuer: /CN=87107e3fd9b94b4b36e6a8f370e8650a7f57e6c3
Certificate serial: 0194266BDD2EC83B6B47A7CE798836FF84E0
Authority key identifier: 87:10:7E:3F:D9:B9:4B:4B:36:E6:A8:F3:70:E8:65:0A:7F:57:E6:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/S-FqJ5rHJScfH16THhv-Awb7K-Q.roa
Signing time: Thu 02 Jan 2025 09:49:50 +0000
ROA not before: Thu 02 Jan 2025 09:49:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29124
IP address blocks: 46.31.24.0/21 maxlen: 24
46.39.224.0/19 maxlen: 24
62.122.208.0/22 maxlen: 22
62.122.212.0/24 maxlen: 24
62.182.72.0/21 maxlen: 24
79.172.64.0/18 maxlen: 24
81.200.0.0/19 maxlen: 24
82.199.96.0/19 maxlen: 24
84.51.64.0/19 maxlen: 24
84.51.96.0/19 maxlen: 24
90.155.128.0/17 maxlen: 24
91.123.16.0/20 maxlen: 24
91.189.240.0/21 maxlen: 24
91.207.170.0/23 maxlen: 24
94.102.112.0/20 maxlen: 24
95.143.208.0/20 maxlen: 24
109.225.192.0/18 maxlen: 24
109.229.128.0/19 maxlen: 24
134.0.96.0/20 maxlen: 24
176.97.128.0/21 maxlen: 24
185.55.0.0/22 maxlen: 24
185.60.44.0/22 maxlen: 24
188.68.96.0/19 maxlen: 24
195.234.56.0/24 maxlen: 24
213.193.0.0/19 maxlen: 24
2a02:2620::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:dd:2e:c8:3b:6b:47:a7:ce:79:88:36:ff:84:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87107e3fd9b94b4b36e6a8f370e8650a7f57e6c3
Validity
Not Before: Jan 2 09:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4be16a279ac725271f1f5e931e1bfe0306fb2be4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fa:a5:e6:5d:4c:a5:7a:9a:63:3b:33:45:db:
7a:f6:27:e6:16:b2:c3:78:50:3c:c7:19:97:b3:99:
bb:f0:d6:f7:e2:96:e3:ec:d0:f3:20:05:19:e4:3a:
f5:a6:f7:8f:6e:58:7d:f6:55:e0:46:ee:77:ae:03:
05:aa:f3:28:9c:12:3a:66:0d:18:2f:a5:31:52:80:
de:df:e9:65:7f:92:f6:af:e5:6d:8a:79:5c:d5:4f:
ed:de:0d:bc:8b:b7:24:fc:db:03:63:89:69:f8:5f:
ea:3f:b4:50:df:dd:14:91:e3:98:ed:71:f8:45:40:
ef:93:63:5e:6f:5c:79:1a:3a:ec:88:71:07:bf:ba:
1f:8f:13:ce:f0:e5:d0:ae:c4:57:a2:be:2c:6a:d8:
92:c5:a1:ec:3b:83:9d:4f:1e:d9:52:f7:bc:da:52:
26:14:f4:81:78:bf:c4:d4:18:1e:11:13:a4:1f:f4:
f9:dc:a6:c6:db:94:a7:d7:41:b6:37:c6:ba:d9:10:
9b:cf:23:de:32:f7:08:b1:37:64:1d:42:32:96:b2:
8c:36:d9:c7:0f:02:ff:3c:b6:f7:26:6d:11:ea:9e:
3a:d3:f4:4f:54:b1:99:82:8c:ff:90:8c:5d:cb:d8:
be:e7:43:9a:e7:29:5b:90:99:d5:5f:3e:a1:bc:98:
f7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E1:6A:27:9A:C7:25:27:1F:1F:5E:93:1E:1B:FE:03:06:FB:2B:E4
X509v3 Authority Key Identifier:
keyid:87:10:7E:3F:D9:B9:4B:4B:36:E6:A8:F3:70:E8:65:0A:7F:57:E6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/S-FqJ5rHJScfH16THhv-Awb7K-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.24.0/21
46.39.224.0/19
62.122.208.0-62.122.212.255
62.182.72.0/21
79.172.64.0/18
81.200.0.0/19
82.199.96.0/19
84.51.64.0/18
90.155.128.0/17
91.123.16.0/20
91.189.240.0/21
91.207.170.0/23
94.102.112.0/20
95.143.208.0/20
109.225.192.0/18
109.229.128.0/19
134.0.96.0/20
176.97.128.0/21
185.55.0.0/22
185.60.44.0/22
188.68.96.0/19
195.234.56.0/24
213.193.0.0/19
IPv6:
2a02:2620::/32
Signature Algorithm: sha256WithRSAEncryption
3e:43:fa:89:e2:05:81:30:73:9c:3e:65:37:8e:fe:7f:c6:be:
64:a1:c5:dd:51:02:de:cd:98:20:ba:7b:9f:41:a5:79:02:07:
35:49:bb:6e:28:c4:43:02:7b:b4:3d:82:71:99:c9:e5:61:47:
93:8a:46:60:09:15:ca:c6:b8:25:f9:58:f5:74:c3:18:fd:25:
2a:ac:a9:30:90:fb:5e:6a:95:11:7e:50:e8:38:c5:c6:30:63:
99:c4:78:ba:6e:ac:c0:df:e8:29:d2:6d:82:4d:d7:0a:d3:0c:
6a:ab:5c:9c:8b:a0:8b:1b:0d:77:1d:c6:73:ce:ce:bb:1d:28:
32:b5:88:51:7b:f0:cb:cf:bf:32:28:04:37:53:56:2b:c1:cb:
c4:d6:5b:72:f7:ca:87:44:77:16:48:6b:9c:8d:fc:37:58:ab:
f3:8d:d1:be:5f:ef:55:48:d1:cc:0a:90:4d:5e:b8:a2:ed:1d:
cd:61:35:1f:29:17:8b:25:c7:a8:05:87:b7:8b:84:bb:3b:69:
fc:be:f5:a7:20:74:f5:3e:df:d9:74:8c:32:a3:c7:d1:41:06:
f3:a5:d0:5e:8c:e9:08:ed:25:a9:b7:82:e1:a8:22:d9:f6:12:
cc:92:fb:8e:0f:90:b4:d1:b9:45:2f:cf:41:fc:e1:be:39:3a:
f7:16:8d:ab
-----BEGIN CERTIFICATE-----
MIIFnTCCBIWgAwIBAgISAZQma90uyDtrR6fOeYg2/4TgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3MTA3ZTNmZDliOTRiNGIzNmU2YThmMzcwZTg2NTBhN2Y1
N2U2YzMwHhcNMjUwMTAyMDk0OTUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YmUxNmEyNzlhYzcyNTI3MWYxZjVlOTMxZTFiZmUwMzA2ZmIyYmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfql5l1MpXqaYzszRdt69ifmFrLD
eFA8xxmXs5m78Nb34pbj7NDzIAUZ5Dr1pvePblh99lXgRu53rgMFqvMonBI6Zg0Y
L6UxUoDe3+llf5L2r+Vtinlc1U/t3g28i7ck/NsDY4lp+F/qP7RQ390UkeOY7XH4
RUDvk2Neb1x5GjrsiHEHv7ofjxPO8OXQrsRXor4satiSxaHsO4OdTx7ZUve82lIm
FPSBeL/E1BgeEROkH/T53KbG25Sn10G2N8a62RCbzyPeMvcIsTdkHUIylrKMNtnH
DwL/PLb3Jm0R6p460/RPVLGZgoz/kIxdy9i+50Oa5ylbkJnVXz6hvJj3vwIDAQAB
o4ICqTCCAqUwHQYDVR0OBBYEFEvhaieaxyUnHx9ekx4b/gMG+yvkMB8GA1UdIwQY
MBaAFIcQfj/ZuUtLNuao83DoZQp/V+bDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHhCLVA5bTVTMHMyNXFqemNPaGxDbjlYNXNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9hNTkzOTAtODA0OC00M2I5LTgyYjUt
NzYxZGFiMzg5YjViLzEvUy1GcUo1ckhKU2NmSDE2VEhodi1Bd2I3Sy1RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9hNTkzOTAtODA0OC00M2I5LTgyYjUtNzYxZGFiMzg5YjVi
LzEvaHhCLVA5bTVTMHMyNXFqemNPaGxDbjlYNXNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG+BggrBgEFBQcBBwEB/wSBrjCBqzCBmQQCAAEwgZIDBAMu
HxgDBAUuJ+AwDAMEBD560AMEAD561AMEAz62SAMEBk+sQAMEBVHIAAMEBVLHYAME
BlQzQAMEB1qbgAMEBFt7EAMEA1u98AMEAVvPqgMEBF5mcAMEBF+P0AMEBm3hwAME
BW3lgAMEBIYAYAMEA7BhgAMEArk3AAMEArk8LAMEBbxEYAMEAMPqOAMEBdXBADAN
BAIAAjAHAwUAKgImIDANBgkqhkiG9w0BAQsFAAOCAQEAPkP6ieIFgTBznD5lN47+
f8a+ZKHF3VEC3s2YILp7n0GleQIHNUm7bijEQwJ7tD2CcZnJ5WFHk4pGYAkVysa4
JflY9XTDGP0lKqypMJD7XmqVEX5Q6DjFxjBjmcR4um6swN/oKdJtgk3XCtMMaqtc
nIugixsNdx3Gc87Oux0oMrWIUXvwy8+/MigEN1NWK8HLxNZbcvfKh0R3FkhrnI38
N1ir843Rvl/vVUjRzAqQTV64ou0dzWE1HykXiyXHqAWHt4uEuztp/L71pyB09T7f
2XSMMqPH0UEG86XQXozpCO0lqbeC4agi2fYSzJL7jg+QtNG5RS/PQfzhvjk69xaN
qw==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:42 2025 by rpki-client on console.sobornost.net