Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/Qgix3vGh-7sLphfX3aOhscgvK04.roa
File: Qgix3vGh-7sLphfX3aOhscgvK04.roa (raw, json)
Hash identifier: XsPxJSCebM6Z7coMyZa4d7CLZU5IKIiDuqr8rW6sx0Q=
Subject key identifier: 42:08:B1:DE:F1:A1:FB:BB:0B:A6:17:D7:DD:A3:A1:B1:C8:2F:2B:4E
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 019522F0842F1D639B6B6DD4C1D51E89D619
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/Qgix3vGh-7sLphfX3aOhscgvK04.roa
Signing time: Thu 20 Feb 2025 10:39:02 +0000
ROA not before: Thu 20 Feb 2025 10:39:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 37.221.124.0/22 maxlen: 24
45.67.228.0/24 maxlen: 24
45.67.229.0/24 maxlen: 24
45.67.230.0/24 maxlen: 24
45.67.231.0/24 maxlen: 24
45.120.176.0/22 maxlen: 24
62.3.12.0/24 maxlen: 24
74.119.192.0/24 maxlen: 24
74.119.193.0/24 maxlen: 24
74.119.194.0/24 maxlen: 24
74.119.195.0/24 maxlen: 24
80.92.204.0/24 maxlen: 24
80.92.205.0/24 maxlen: 24
80.92.206.0/24 maxlen: 24
86.104.72.0/22 maxlen: 24
89.221.224.0/24 maxlen: 24
89.221.225.0/24 maxlen: 24
91.132.132.0/22 maxlen: 24
91.194.161.0/24 maxlen: 24
91.225.217.0/24 maxlen: 24
91.225.218.0/24 maxlen: 24
91.225.219.0/24 maxlen: 24
94.131.8.0/24 maxlen: 24
103.35.188.0/22 maxlen: 24
103.106.0.0/22 maxlen: 24
103.113.68.0/22 maxlen: 24
103.231.72.0/22 maxlen: 24
176.120.64.0/22 maxlen: 24
176.120.64.0/24 maxlen: 24
176.120.72.0/22 maxlen: 24
185.234.56.0/22 maxlen: 24
185.234.64.0/22 maxlen: 24
185.235.240.0/22 maxlen: 24
185.236.232.0/22 maxlen: 24
185.242.84.0/24 maxlen: 24
185.242.85.0/24 maxlen: 24
185.242.86.0/24 maxlen: 24
185.242.87.0/24 maxlen: 24
185.250.148.0/24 maxlen: 24
185.250.149.0/24 maxlen: 24
185.250.150.0/24 maxlen: 24
185.250.151.0/24 maxlen: 24
193.203.202.0/24 maxlen: 24
194.54.156.0/24 maxlen: 24
194.54.157.0/24 maxlen: 24
194.54.158.0/24 maxlen: 24
194.54.159.0/24 maxlen: 24
194.62.42.0/24 maxlen: 24
194.246.114.0/24 maxlen: 24
194.246.115.0/24 maxlen: 24
195.42.232.0/22 maxlen: 24
195.149.87.0/24 maxlen: 24
213.159.64.0/21 maxlen: 24
213.159.72.0/21 maxlen: 24
213.159.76.0/24 maxlen: 24
213.159.77.0/24 maxlen: 24
213.159.78.0/24 maxlen: 24
213.159.79.0/24 maxlen: 24
2a09:7c40::/32 maxlen: 32
2a09:7c41::/32 maxlen: 32
2a09:7c42::/32 maxlen: 32
2a09:7c43::/32 maxlen: 32
2a09:7c44::/32 maxlen: 32
2a09:7c45::/32 maxlen: 32
2a09:7c46::/32 maxlen: 32
2a09:7c47::/32 maxlen: 32
2a0b:cf45::/32 maxlen: 32
2a0b:cf46::/32 maxlen: 32
2a0b:cf47::/32 maxlen: 32
2a11:3805::/32 maxlen: 32
2a11:3c02::/32 maxlen: 32
2a11:3c03::/32 maxlen: 32
2a11:4c04::/32 maxlen: 32
2a11:4c05::/32 maxlen: 32
2a11:4c06::/32 maxlen: 32
2a14:2d80::/32 maxlen: 32
2a14:2d81::/32 maxlen: 32
2a14:2d82::/32 maxlen: 32
2a14:2d83::/32 maxlen: 32
2a14:2d85::/32 maxlen: 32
2a14:2d87::/32 maxlen: 32
2a14:2e80::/32 maxlen: 32
2a14:2f80::/32 maxlen: 32
2a14:3080::/32 maxlen: 32
2a14:3081::/32 maxlen: 32
2a14:3880::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:22:f0:84:2f:1d:63:9b:6b:6d:d4:c1:d5:1e:89:d6:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Feb 20 10:39:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4208b1def1a1fbbb0ba617d7dda3a1b1c82f2b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4b:d1:e1:20:3b:8b:2a:ba:98:d2:3c:09:f8:
58:4e:02:78:f8:e0:b3:c6:99:79:28:5c:ec:eb:9c:
62:75:96:b6:84:e0:12:24:53:6e:74:38:33:26:8b:
aa:6f:be:b9:1d:c2:20:ad:98:79:1a:91:7c:fb:06:
8b:46:93:dc:7f:c3:df:39:94:93:f1:e2:5a:9d:d0:
bf:72:1b:07:a1:dc:0a:07:24:95:1c:2a:bd:26:69:
4b:b4:b1:42:87:1d:ed:8b:a1:3e:36:fd:6e:4c:40:
b8:c3:54:39:d6:e3:e2:a7:89:c7:a6:7d:13:40:57:
1d:f1:c6:90:bf:bf:bb:5a:02:3b:4a:bb:3c:dd:de:
81:38:f5:24:ad:43:0b:14:04:a9:f8:4a:2d:8b:28:
b3:d3:4e:52:63:dc:97:cd:48:e5:22:7f:7b:af:87:
f2:1d:b9:28:0d:6a:3c:af:bc:ba:fc:92:a3:66:dc:
47:ce:22:21:00:d1:3a:26:f4:da:14:64:ca:df:25:
b1:c2:85:a3:35:ce:de:94:14:c5:b2:80:19:bc:95:
68:42:6d:4c:ae:35:df:0e:5f:ca:97:e7:f7:23:0d:
76:e0:5c:66:a9:52:bf:4b:68:f3:f8:1a:79:51:bf:
31:7d:f6:dd:fc:fd:41:6f:67:46:9f:86:01:67:25:
5a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:08:B1:DE:F1:A1:FB:BB:0B:A6:17:D7:DD:A3:A1:B1:C8:2F:2B:4E
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/Qgix3vGh-7sLphfX3aOhscgvK04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.124.0/22
45.67.228.0/22
45.120.176.0/22
62.3.12.0/24
74.119.192.0/22
80.92.204.0-80.92.206.255
86.104.72.0/22
89.221.224.0/23
91.132.132.0/22
91.194.161.0/24
91.225.217.0-91.225.219.255
94.131.8.0/24
103.35.188.0/22
103.106.0.0/22
103.113.68.0/22
103.231.72.0/22
176.120.64.0/22
176.120.72.0/22
185.234.56.0/22
185.234.64.0/22
185.235.240.0/22
185.236.232.0/22
185.242.84.0/22
185.250.148.0/22
193.203.202.0/24
194.54.156.0/22
194.62.42.0/24
194.246.114.0/23
195.42.232.0/22
195.149.87.0/24
213.159.64.0/20
IPv6:
2a09:7c40::/29
2a0b:cf45::-2a0b:cf47:ffff:ffff:ffff:ffff:ffff:ffff
2a11:3805::/32
2a11:3c02::/31
2a11:4c04::-2a11:4c06:ffff:ffff:ffff:ffff:ffff:ffff
2a14:2d80::/30
2a14:2d85::/32
2a14:2d87::/32
2a14:2e80::/32
2a14:2f80::/32
2a14:3080::/31
2a14:3880::/32
Signature Algorithm: sha256WithRSAEncryption
a0:d2:a8:67:c6:0c:de:5a:f0:d9:67:61:45:a4:e8:4a:7e:2d:
f6:de:76:10:64:12:b5:0e:8f:a9:2e:76:a9:aa:0a:f6:69:05:
56:00:3d:dc:77:9b:56:cf:ff:5a:87:0c:73:2c:2d:d9:04:f7:
a6:7d:e0:b6:02:ac:37:d3:64:6c:49:30:02:80:e9:45:23:db:
9a:76:94:fd:16:95:9b:44:37:dd:b9:db:22:bf:92:d1:4e:be:
93:46:f8:9d:be:c2:4f:8f:1a:47:c6:e0:d2:dc:95:2d:d4:a3:
af:81:d4:76:8b:a1:43:04:90:69:d1:f3:2c:7a:49:22:1b:3d:
1b:5b:1c:2a:ee:39:f7:4a:47:23:1b:9f:68:e5:3c:80:79:08:
08:20:0f:0f:ff:5c:3f:b8:df:85:32:7e:1c:3a:c7:ad:56:00:
b9:11:a2:98:8c:25:78:23:d1:df:56:8e:59:fe:85:90:47:3f:
82:e1:ec:c3:eb:e5:eb:e9:1d:7c:8f:6e:0c:6e:5e:de:6d:83:
34:4a:38:85:b6:de:dd:a3:7d:f6:e3:bb:10:7a:1f:b2:7e:35:
46:31:86:8f:94:29:b8:ce:be:52:a1:7c:54:4a:8e:75:fa:ee:
b7:30:3a:78:61:ba:f7:9d:a6:a7:be:3c:5f:68:01:b6:12:2f:
f4:53:17:6b
-----BEGIN CERTIFICATE-----
MIIGNzCCBR+gAwIBAgISAZUi8IQvHWOba23UwdUeidYZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiODMwNjMwZjIzYjA3MGEyYjdiZGY1MjlmNzM5NDhjOTdl
YWNkNDAwHhcNMjUwMjIwMTAzOTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MjA4YjFkZWYxYTFmYmJiMGJhNjE3ZDdkZGEzYTFiMWM4MmYyYjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0vR4SA7iyq6mNI8CfhYTgJ4+OCz
xpl5KFzs65xidZa2hOASJFNudDgzJouqb765HcIgrZh5GpF8+waLRpPcf8PfOZST
8eJandC/chsHodwKBySVHCq9JmlLtLFChx3ti6E+Nv1uTEC4w1Q51uPip4nHpn0T
QFcd8caQv7+7WgI7Srs83d6BOPUkrUMLFASp+Eotiyiz005SY9yXzUjlIn97r4fy
HbkoDWo8r7y6/JKjZtxHziIhANE6JvTaFGTK3yWxwoWjNc7elBTFsoAZvJVoQm1M
rjXfDl/Kl+f3Iw124FxmqVK/S2jz+Bp5Ub8xffbd/P1Bb2dGn4YBZyVaWwIDAQAB
o4IDQzCCAz8wHQYDVR0OBBYEFEIIsd7xofu7C6YX192jobHILytOMB8GA1UdIwQY
MBaAFLuDBjDyOwcKK3vfUp9zlIyX6s1AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9mNzZlMjAtNTg1OS00MTVkLTg2YjMt
MTE5ZWZjYmIyMDIzLzEvUWdpeDN2R2gtN3NMcGhmWDNhT2hzY2d2SzA0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9mNzZlMjAtNTg1OS00MTVkLTg2YjMtMTE5ZWZjYmIyMDIz
LzEvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBVwYIKwYBBQUHAQcBAf8EggFGMIIBQjCB0QQCAAEwgcoD
BAIl3XwDBAItQ+QDBAIteLADBAA+AwwDBAJKd8AwDAMEAlBczAMEAFBczgMEAlZo
SAMEAVnd4AMEAluEhAMEAFvCoTAMAwQAW+HZAwQCW+HYAwQAXoMIAwQCZyO8AwQC
Z2oAAwQCZ3FEAwQCZ+dIAwQCsHhAAwQCsHhIAwQCueo4AwQCuepAAwQCuevwAwQC
uezoAwQCufJUAwQCufqUAwQAwcvKAwQCwjacAwQAwj4qAwQBwvZyAwQCwyroAwQA
w5VXAwQE1Z9AMGwEAgACMGYDBQMqCXxAMA4DBQAqC89FAwUDKgvPQAMFACoROAUD
BQEqETwCMA4DBQIqEUwEAwUAKhFMBgMFAioULYADBQAqFC2FAwUAKhQthwMFACoU
LoADBQAqFC+AAwUBKhQwgAMFACoUOIAwDQYJKoZIhvcNAQELBQADggEBAKDSqGfG
DN5a8NlnYUWk6Ep+LfbedhBkErUOj6kudqmqCvZpBVYAPdx3m1bP/1qHDHMsLdkE
96Z94LYCrDfTZGxJMAKA6UUj25p2lP0WlZtEN9252yK/ktFOvpNG+J2+wk+PGkfG
4NLclS3Uo6+B1HaLoUMEkGnR8yx6SSIbPRtbHCruOfdKRyMbn2jlPIB5CAggDw//
XD+434Uyfhw6x61WALkRopiMJXgj0d9Wjln+hZBHP4Lh7MPr5evpHXyPbgxuXt5t
gzRKOIW23t2jffbjuxB6H7J+NUYxho+UKbjOvlKhfFRKjnX67rcwOnhhuvedpqe+
PF9oAbYSL/RTF2s=
-----END CERTIFICATE-----
Generated at Sat Mar 8 04:51:43 2025 by rpki-client on console.sobornost.net