Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/qQIdIKkAY3XL4H0UqqoBDCS4fe4.roa
File: qQIdIKkAY3XL4H0UqqoBDCS4fe4.roa (raw, json)
Hash identifier: tJIJpMepFFp7mfCX13yP/PACk1thBv7CLEXSdOGaVw0=
Subject key identifier: A9:02:1D:20:A9:00:63:75:CB:E0:7D:14:AA:AA:01:0C:24:B8:7D:EE
Certificate issuer: /CN=81fa48f40bc84540c46bd23be9b90897aa184f4d
Certificate serial: 01941FFA6412C25622C2CE3ED46A276F8C5D
Authority key identifier: 81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/qQIdIKkAY3XL4H0UqqoBDCS4fe4.roa
Signing time: Wed 01 Jan 2025 03:48:10 +0000
ROA not before: Wed 01 Jan 2025 03:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8258
IP address blocks: 195.64.224.0/22 maxlen: 22
195.64.227.0/24 maxlen: 24
195.64.228.0/24 maxlen: 24
195.64.254.0/23 maxlen: 23
2a02:2540::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:64:12:c2:56:22:c2:ce:3e:d4:6a:27:6f:8c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81fa48f40bc84540c46bd23be9b90897aa184f4d
Validity
Not Before: Jan 1 03:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9021d20a9006375cbe07d14aaaa010c24b87dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fc:b1:0b:af:29:d0:79:a3:6e:48:f4:a5:bf:
cf:5f:a3:df:77:0a:a6:47:f5:17:1e:20:13:0c:fa:
05:52:92:25:1b:67:58:87:8b:1b:31:ce:df:ad:5d:
97:65:64:1e:dd:39:5e:31:69:85:c3:5e:23:17:8f:
18:ac:b5:5c:8b:31:46:19:6c:b8:75:71:e0:81:ab:
17:1f:03:d0:2c:cc:9e:17:fb:d5:dd:ed:6e:78:73:
81:6e:12:cf:85:a8:0a:39:d3:45:51:2e:dc:b6:a3:
24:e2:61:c8:25:ad:f3:42:e6:fa:86:c4:ef:a5:97:
c2:a0:74:45:e5:6f:9f:05:51:55:fa:31:b3:ff:ff:
86:14:c9:cd:15:c7:cd:d9:8a:fc:75:35:07:1d:9f:
1f:25:10:c9:85:db:21:45:8f:a5:28:a0:af:25:43:
d9:44:c2:a9:36:01:7c:e4:07:c2:4f:d7:87:e2:33:
d5:06:ae:8d:13:92:ad:3f:84:4d:b7:4a:e3:9f:6b:
c2:ee:1d:ed:4a:e6:41:12:cc:fd:a2:c5:bb:72:f0:
28:40:38:32:42:93:38:df:b2:75:7f:45:c3:aa:aa:
3a:a4:9a:d4:6e:9c:3c:cb:4c:bc:cb:20:79:2e:92:
24:c4:07:0c:69:83:04:4c:9e:74:b4:4a:b1:1d:30:
e6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:02:1D:20:A9:00:63:75:CB:E0:7D:14:AA:AA:01:0C:24:B8:7D:EE
X509v3 Authority Key Identifier:
keyid:81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/qQIdIKkAY3XL4H0UqqoBDCS4fe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.224.0-195.64.228.255
195.64.254.0/23
IPv6:
2a02:2540::/32
Signature Algorithm: sha256WithRSAEncryption
82:38:92:03:46:df:f9:65:b4:b4:3f:6d:ef:b3:3d:40:2f:81:
d2:5b:a1:a0:5d:9f:1e:95:8f:9c:d2:78:65:5d:e1:27:12:82:
ca:bb:94:7c:67:ae:11:c7:c2:28:46:51:dc:13:70:dd:dd:c7:
d7:f7:d5:97:08:fa:99:b9:7e:bd:02:13:e4:b3:e0:f4:6d:79:
7f:f9:0b:cb:8f:09:f4:f7:cc:2e:5f:07:e3:2c:40:95:05:5a:
86:7b:cb:e4:b7:68:6d:0b:0b:ff:58:65:22:90:55:19:6f:4f:
e9:9f:3a:a1:59:38:3e:1a:90:8f:04:eb:41:8d:ac:a4:34:28:
49:20:5a:7e:81:15:9d:62:31:c1:d8:69:f7:f6:cf:e6:9e:2e:
2d:57:98:ea:28:6a:47:89:48:ad:9a:82:1a:77:eb:e1:a9:2e:
2a:3e:07:02:46:b0:bc:0c:d4:83:80:82:b3:f1:21:ff:5c:db:
71:78:5d:77:18:28:41:72:d8:91:d8:2f:2c:c2:48:d7:82:f6:
c5:7a:76:22:0a:37:cc:eb:a1:7e:b0:1f:de:d5:09:31:a8:67:
46:8c:72:1e:a0:25:ee:04:9b:bd:cb:d5:a1:22:00:6c:4b:6a:
8a:a0:af:4a:30:b0:05:a3:67:3d:9c:0f:3e:89:ec:05:0e:70:
75:aa:66:9e
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAZQf+mQSwlYiws4+1Gonb4xdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxZmE0OGY0MGJjODQ1NDBjNDZiZDIzYmU5YjkwODk3YWEx
ODRmNGQwHhcNMjUwMTAxMDM0ODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTAyMWQyMGE5MDA2Mzc1Y2JlMDdkMTRhYWFhMDEwYzI0Yjg3ZGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvyxC68p0Hmjbkj0pb/PX6Pfdwqm
R/UXHiATDPoFUpIlG2dYh4sbMc7frV2XZWQe3TleMWmFw14jF48YrLVcizFGGWy4
dXHggasXHwPQLMyeF/vV3e1ueHOBbhLPhagKOdNFUS7ctqMk4mHIJa3zQub6hsTv
pZfCoHRF5W+fBVFV+jGz//+GFMnNFcfN2Yr8dTUHHZ8fJRDJhdshRY+lKKCvJUPZ
RMKpNgF85AfCT9eH4jPVBq6NE5KtP4RNt0rjn2vC7h3tSuZBEsz9osW7cvAoQDgy
QpM437J1f0XDqqo6pJrUbpw8y0y8yyB5LpIkxAcMaYMETJ50tEqxHTDmrQIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFKkCHSCpAGN1y+B9FKqqAQwkuH3uMB8GA1UdIwQY
MBaAFIH6SPQLyEVAxGvSO+m5CJeqGE9NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2ZwSTlBdklSVURFYTlJNzZia0lsNm9ZVDAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8xNDYwNzgtZjliMi00MTYzLWFmMWEt
OGU5M2NiNWM1MzU1LzEvcVFJZElLa0FZM1hMNEgwVXFxb0JEQ1M0ZmU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My8xNDYwNzgtZjliMi00MTYzLWFmMWEtOGU5M2NiNWM1MzU1
LzEvZ2ZwSTlBdklSVURFYTlJNzZia0lsNm9ZVDAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUMAwDBAXDQOAD
BADDQOQDBAHDQP4wDQQCAAIwBwMFACoCJUAwDQYJKoZIhvcNAQELBQADggEBAII4
kgNG3/lltLQ/be+zPUAvgdJboaBdnx6Vj5zSeGVd4ScSgsq7lHxnrhHHwihGUdwT
cN3dx9f31ZcI+pm5fr0CE+Sz4PRteX/5C8uPCfT3zC5fB+MsQJUFWoZ7y+S3aG0L
C/9YZSKQVRlvT+mfOqFZOD4akI8E60GNrKQ0KEkgWn6BFZ1iMcHYaff2z+aeLi1X
mOooakeJSK2aghp36+GpLio+BwJGsLwM1IOAgrPxIf9c23F4XXcYKEFy2JHYLyzC
SNeC9sV6diIKN8zroX6wH97VCTGoZ0aMch6gJe4Em73L1aEiAGxLaoqgr0owsAWj
Zz2cDz6J7AUOcHWqZp4=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:55 2025 by rpki-client on console.sobornost.net