Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/QtkiMSjgyDQ_VC7MypQF0T8EN4k.roa
File: QtkiMSjgyDQ_VC7MypQF0T8EN4k.roa (raw, json)
Hash identifier: 1UjVli0/6V2DTO4eEO9V/FbmML0Sfyocc+tHopIwdIE=
Subject key identifier: 42:D9:22:31:28:E0:C8:34:3F:54:2E:CC:CA:94:05:D1:3F:04:37:89
Certificate issuer: /CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Certificate serial: 0193F7FE19214BC7BCC0C1C78F38C7E0D54C
Authority key identifier: 39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/QtkiMSjgyDQ_VC7MypQF0T8EN4k.roa
Signing time: Tue 24 Dec 2024 09:27:24 +0000
ROA not before: Tue 24 Dec 2024 09:27:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9021
IP address blocks: 90.158.0.0/16 maxlen: 16
90.158.0.0/18 maxlen: 18
90.158.0.0/22 maxlen: 22
90.158.0.0/23 maxlen: 23
90.158.3.0/24 maxlen: 24
90.158.8.0/24 maxlen: 24
90.158.15.0/24 maxlen: 24
90.158.16.0/24 maxlen: 24
90.158.18.0/24 maxlen: 24
90.158.19.0/24 maxlen: 24
90.158.24.0/24 maxlen: 24
90.158.26.0/24 maxlen: 24
90.158.27.0/24 maxlen: 24
90.158.28.0/24 maxlen: 24
90.158.29.0/24 maxlen: 24
90.158.30.0/24 maxlen: 24
90.158.31.0/24 maxlen: 24
90.158.32.0/24 maxlen: 24
90.158.33.0/24 maxlen: 24
90.158.36.0/24 maxlen: 24
90.158.37.0/24 maxlen: 24
90.158.39.0/24 maxlen: 24
90.158.41.0/24 maxlen: 24
90.158.43.0/24 maxlen: 24
90.158.44.0/24 maxlen: 24
90.158.45.0/24 maxlen: 24
90.158.46.0/24 maxlen: 24
90.158.47.0/24 maxlen: 24
90.158.48.0/20 maxlen: 20
90.158.48.0/24 maxlen: 24
90.158.50.0/23 maxlen: 23
90.158.51.0/24 maxlen: 24
90.158.52.0/23 maxlen: 23
90.158.52.0/24 maxlen: 24
90.158.53.0/24 maxlen: 24
90.158.54.0/23 maxlen: 23
90.158.55.0/24 maxlen: 24
90.158.56.0/24 maxlen: 24
90.158.60.0/24 maxlen: 24
90.158.62.0/24 maxlen: 24
90.158.64.0/21 maxlen: 21
90.158.64.0/24 maxlen: 24
90.158.65.0/24 maxlen: 24
90.158.66.0/24 maxlen: 24
90.158.67.0/24 maxlen: 24
90.158.68.0/24 maxlen: 24
90.158.72.0/22 maxlen: 22
90.158.72.0/24 maxlen: 24
90.158.73.0/24 maxlen: 24
90.158.74.0/24 maxlen: 24
90.158.75.0/24 maxlen: 24
90.158.96.0/22 maxlen: 22
90.158.100.0/24 maxlen: 24
90.158.101.0/24 maxlen: 24
90.158.102.0/23 maxlen: 23
90.158.104.0/24 maxlen: 24
90.158.105.0/24 maxlen: 24
90.158.106.0/24 maxlen: 24
90.158.109.0/24 maxlen: 24
90.158.110.0/24 maxlen: 24
90.158.111.0/24 maxlen: 24
90.158.112.0/20 maxlen: 20
90.158.114.0/24 maxlen: 24
90.158.115.0/24 maxlen: 24
90.158.116.0/24 maxlen: 24
90.158.117.0/24 maxlen: 24
90.158.119.0/24 maxlen: 24
90.158.120.0/24 maxlen: 24
90.158.121.0/24 maxlen: 24
90.158.122.0/24 maxlen: 24
90.158.123.0/24 maxlen: 24
90.158.126.0/24 maxlen: 24
90.158.127.0/24 maxlen: 24
90.158.128.0/17 maxlen: 17
90.158.128.0/21 maxlen: 21
90.158.136.0/21 maxlen: 21
90.158.137.0/24 maxlen: 24
90.158.138.0/24 maxlen: 24
90.158.139.0/24 maxlen: 24
90.158.152.0/24 maxlen: 24
90.158.160.0/24 maxlen: 24
90.158.161.0/24 maxlen: 24
90.158.200.0/23 maxlen: 23
90.158.224.0/22 maxlen: 22
90.158.240.0/21 maxlen: 21
90.158.244.0/22 maxlen: 22
90.158.248.0/21 maxlen: 21
90.158.249.0/24 maxlen: 24
90.158.251.0/24 maxlen: 24
90.158.252.0/22 maxlen: 22
90.159.0.0/16 maxlen: 16
90.159.0.0/22 maxlen: 22
90.159.0.0/24 maxlen: 24
90.159.1.0/24 maxlen: 24
90.159.2.0/24 maxlen: 24
90.159.3.0/24 maxlen: 24
90.159.4.0/23 maxlen: 23
90.159.10.0/24 maxlen: 24
90.159.15.0/24 maxlen: 24
90.159.20.0/24 maxlen: 24
90.159.26.0/24 maxlen: 24
90.159.27.0/24 maxlen: 24
90.159.29.0/24 maxlen: 24
90.159.31.0/24 maxlen: 24
90.159.33.0/24 maxlen: 24
90.159.34.0/24 maxlen: 24
90.159.36.0/24 maxlen: 24
90.159.37.0/24 maxlen: 24
90.159.38.0/24 maxlen: 24
90.159.44.0/22 maxlen: 22
90.159.50.0/24 maxlen: 24
90.159.51.0/24 maxlen: 24
90.159.58.0/24 maxlen: 24
90.159.59.0/24 maxlen: 24
90.159.60.0/24 maxlen: 24
90.159.61.0/24 maxlen: 24
90.159.64.0/18 maxlen: 18
90.159.64.0/24 maxlen: 24
90.159.68.0/24 maxlen: 24
90.159.128.0/20 maxlen: 20
90.159.136.0/21 maxlen: 21
90.159.136.0/24 maxlen: 24
90.159.240.0/20 maxlen: 20
90.159.246.0/24 maxlen: 24
212.98.0.0/19 maxlen: 19
212.98.0.0/20 maxlen: 20
212.98.1.0/24 maxlen: 24
212.98.2.0/24 maxlen: 24
212.98.8.0/21 maxlen: 21
212.98.9.0/24 maxlen: 24
212.98.16.0/21 maxlen: 21
212.98.16.0/24 maxlen: 24
212.98.28.0/22 maxlen: 22
213.143.224.0/20 maxlen: 20
213.143.226.0/23 maxlen: 23
213.143.226.0/24 maxlen: 24
213.143.227.0/24 maxlen: 24
213.143.228.0/24 maxlen: 24
213.143.229.0/24 maxlen: 24
213.143.230.0/24 maxlen: 24
213.143.233.0/24 maxlen: 24
213.143.234.0/24 maxlen: 24
213.143.235.0/24 maxlen: 24
213.143.236.0/22 maxlen: 22
213.143.238.0/24 maxlen: 24
213.143.239.0/24 maxlen: 24
213.143.240.0/20 maxlen: 20
213.143.240.0/22 maxlen: 22
213.143.240.0/24 maxlen: 24
213.143.241.0/24 maxlen: 24
213.143.243.0/24 maxlen: 24
213.143.244.0/22 maxlen: 22
213.143.250.0/24 maxlen: 24
213.143.251.0/24 maxlen: 24
213.143.252.0/24 maxlen: 24
213.143.253.0/24 maxlen: 24
213.143.254.0/24 maxlen: 24
213.143.255.0/24 maxlen: 24
213.161.128.0/19 maxlen: 19
213.161.128.0/21 maxlen: 21
213.161.135.0/24 maxlen: 24
213.161.136.0/21 maxlen: 21
213.161.136.0/22 maxlen: 22
213.161.144.0/23 maxlen: 23
213.161.144.0/24 maxlen: 24
213.161.145.0/24 maxlen: 24
213.161.146.0/24 maxlen: 24
213.161.148.0/23 maxlen: 23
213.161.148.0/24 maxlen: 24
213.161.149.0/24 maxlen: 24
213.161.150.0/24 maxlen: 24
213.161.151.0/24 maxlen: 24
213.161.152.0/21 maxlen: 21
213.161.152.0/24 maxlen: 24
2a00:1f90::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f7:fe:19:21:4b:c7:bc:c0:c1:c7:8f:38:c7:e0:d5:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Validity
Not Before: Dec 24 09:27:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=42d9223128e0c8343f542eccca9405d13f043789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cf:9e:b1:ba:ad:fc:35:6b:92:82:54:40:01:
2a:e1:dc:83:9a:2e:d2:ce:2e:7e:7a:7c:74:54:b4:
b7:85:56:57:a0:78:1b:ee:c5:e3:f2:d1:53:e7:bc:
13:7e:b8:e2:b3:6a:26:ca:92:be:4d:d6:a8:81:ce:
53:fc:ae:cb:00:10:73:dc:a4:27:b8:e2:c9:4d:14:
e2:35:6a:f2:aa:05:31:12:e8:c7:35:95:ab:c7:dd:
f1:b2:89:4c:56:55:94:d2:4b:1e:e2:ad:2d:2e:85:
da:18:56:3d:50:6b:04:dd:1c:01:1e:2d:f8:6d:8a:
58:e5:91:fc:5c:3e:ce:0f:4b:2f:68:91:40:dd:fe:
ed:d2:8b:67:fe:f9:23:7a:93:cb:17:83:8e:ff:77:
b8:0a:36:7c:5c:61:e5:87:20:19:62:ae:1b:de:53:
d9:a0:2a:54:5b:14:41:98:b2:da:8e:8f:7c:bb:b5:
f5:c1:55:35:58:7c:1a:63:c6:a4:d0:18:91:57:c5:
43:21:b2:c2:6c:b5:9f:c5:3e:60:65:58:e6:bf:c6:
c0:56:76:d2:94:6d:98:1d:d7:ca:be:79:d2:99:c6:
8a:d3:d1:ec:79:81:09:27:60:5d:bd:05:45:ac:5d:
92:89:40:9c:ab:38:e7:fa:b1:a1:c0:6d:ff:04:85:
69:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D9:22:31:28:E0:C8:34:3F:54:2E:CC:CA:94:05:D1:3F:04:37:89
X509v3 Authority Key Identifier:
keyid:39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/QtkiMSjgyDQ_VC7MypQF0T8EN4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.158.0.0/15
212.98.0.0/19
213.143.224.0/19
213.161.128.0/19
IPv6:
2a00:1f90::/32
Signature Algorithm: sha256WithRSAEncryption
63:9e:02:b5:db:b9:ff:5f:65:95:63:d7:df:50:3b:88:86:b4:
ad:18:c8:02:0e:0c:8e:9c:df:68:68:a4:14:d5:7e:72:9d:d7:
b5:c5:47:ee:05:cf:fc:65:ba:6d:90:cd:20:5e:79:98:98:c1:
11:26:a6:06:a1:dc:8d:15:67:e5:f2:c7:42:d4:ec:34:64:e3:
93:b1:18:85:f0:ab:dc:53:ed:23:8f:4f:2c:aa:77:82:a3:d1:
13:61:29:a0:57:9e:1c:00:e3:52:48:4f:4e:ad:c3:a4:48:0d:
6e:38:e2:e5:84:d6:51:cf:58:ec:23:4b:9c:b0:24:36:95:d3:
1f:61:01:fd:85:cc:dd:f7:83:a2:71:42:34:dd:46:fb:3f:c3:
6c:7e:56:8e:98:af:62:51:03:4b:1d:f9:53:e7:73:3b:18:a6:
ef:6c:7c:92:82:03:7b:d4:b8:1a:41:cb:66:4f:f7:28:d7:b2:
6a:49:85:a5:0c:ab:59:0e:86:28:83:1f:cf:d0:74:16:95:66:
48:d9:4c:25:01:15:9f:fe:3a:56:41:58:89:fb:45:29:c9:a2:
01:ea:fc:e6:b9:f2:87:ff:51:1e:a0:f7:a7:70:bd:a9:d4:fc:
92:39:dc:a3:6d:c6:90:64:34:6c:c6:1c:68:19:0d:1d:e4:a4:
b1:23:3f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:05 2024 by rpki-client on console.sobornost.net