Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/QKGgseVvmjBdL3l1hQm5nR7pQfA.roa
File: QKGgseVvmjBdL3l1hQm5nR7pQfA.roa (raw, json)
Hash identifier: qV44QEUaK6/cKiPPAFIGB+elNrr6MYDDkoIFE3FyeKU=
Subject key identifier: 40:A1:A0:B1:E5:6F:9A:30:5D:2F:79:75:85:09:B9:9D:1E:E9:41:F0
Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial: 01961453AB6A05A024FD72871E3193310DB6
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/QKGgseVvmjBdL3l1hQm5nR7pQfA.roa
Signing time: Tue 08 Apr 2025 07:35:49 +0000
ROA not before: Tue 08 Apr 2025 07:35:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35470
IP address blocks: 31.3.96.0/21 maxlen: 24
37.34.48.0/21 maxlen: 24
37.230.96.0/21 maxlen: 24
79.170.88.0/21 maxlen: 24
81.4.84.0/22 maxlen: 24
83.96.200.0/22 maxlen: 24
83.96.204.0/22 maxlen: 24
83.96.212.0/22 maxlen: 24
83.96.216.0/22 maxlen: 24
83.96.220.0/22 maxlen: 24
83.96.236.0/22 maxlen: 24
83.96.240.0/22 maxlen: 24
83.96.244.0/22 maxlen: 24
83.96.252.0/22 maxlen: 24
85.10.176.0/22 maxlen: 24
85.10.184.0/22 maxlen: 22
85.10.185.0/24 maxlen: 24
85.10.186.0/24 maxlen: 24
85.10.187.0/24 maxlen: 24
85.10.188.0/22 maxlen: 22
85.222.224.0/21 maxlen: 24
85.222.224.0/22 maxlen: 24
89.31.96.0/21 maxlen: 24
89.31.98.0/23 maxlen: 24
93.191.128.0/21 maxlen: 24
93.191.134.0/24 maxlen: 24
141.138.192.0/20 maxlen: 24
141.138.207.0/24 maxlen: 24
178.18.80.0/20 maxlen: 24
185.3.208.0/22 maxlen: 24
185.21.188.0/22 maxlen: 24
185.96.4.0/22 maxlen: 24
185.110.172.0/22 maxlen: 24
185.110.200.0/22 maxlen: 24
193.138.204.0/22 maxlen: 24
194.60.207.0/24 maxlen: 24
213.187.240.0/21 maxlen: 24
2a02:348::/32 maxlen: 32
2a02:348:3::/48 maxlen: 48
2a02:348:14::/48 maxlen: 48
2a02:348:15::/48 maxlen: 48
2a02:348:1e::/48 maxlen: 48
2a02:348:28::/48 maxlen: 48
2a02:348:29::/48 maxlen: 48
2a02:348:32::/48 maxlen: 48
2a02:348:33::/48 maxlen: 48
2a02:348:35::/48 maxlen: 48
2a02:348:36::/48 maxlen: 48
2a02:348:37::/48 maxlen: 48
2a02:348:38::/48 maxlen: 48
2a02:348:39::/48 maxlen: 48
2a02:348:3a::/48 maxlen: 48
2a02:348:3b::/48 maxlen: 48
2a02:348:3c::/48 maxlen: 48
2a02:348:46::/48 maxlen: 48
2a02:348:47::/48 maxlen: 48
2a02:348:4b::/48 maxlen: 48
2a02:348:4c::/48 maxlen: 48
2a02:348:4f::/48 maxlen: 48
2a02:348:50::/48 maxlen: 48
2a02:348:53::/48 maxlen: 48
2a02:348:54::/48 maxlen: 48
2a02:348:55::/48 maxlen: 48
2a02:348:56::/48 maxlen: 48
2a02:348:57::/48 maxlen: 48
2a02:348:58::/48 maxlen: 48
2a02:348:59::/48 maxlen: 48
2a02:348:5a::/48 maxlen: 48
2a02:348:5b::/48 maxlen: 48
2a02:348:5d::/48 maxlen: 48
2a02:348:5e::/48 maxlen: 48
2a02:348:5f::/48 maxlen: 48
2a02:348:60::/48 maxlen: 48
2a02:348:61::/48 maxlen: 48
2a02:348:62::/48 maxlen: 48
2a02:348:63::/48 maxlen: 48
2a02:348:6e::/48 maxlen: 48
2a02:348:6f::/48 maxlen: 48
2a02:348:70::/48 maxlen: 48
2a02:348:71::/48 maxlen: 48
2a02:348:73::/48 maxlen: 48
2a02:348:74::/48 maxlen: 48
2a02:348:75::/48 maxlen: 48
2a02:348:76::/48 maxlen: 48
2a02:348:77::/48 maxlen: 48
2a02:348:78::/48 maxlen: 48
2a02:348:79::/48 maxlen: 48
2a02:348:7b::/48 maxlen: 48
2a02:348:7c::/48 maxlen: 48
2a02:348:7d::/48 maxlen: 48
2a02:348:7e::/48 maxlen: 48
2a02:348:7f::/48 maxlen: 48
2a02:348:80::/48 maxlen: 48
2a02:348:81::/48 maxlen: 48
2a02:348:82::/48 maxlen: 48
2a02:348:83::/48 maxlen: 48
2a02:348:84::/48 maxlen: 48
2a02:348:85::/48 maxlen: 48
2a02:348:86::/48 maxlen: 48
2a02:348:87::/48 maxlen: 48
2a02:348:88::/48 maxlen: 48
2a02:348:89::/48 maxlen: 48
2a02:348:8a::/48 maxlen: 48
2a02:348:8b::/48 maxlen: 48
2a02:348:8c::/48 maxlen: 48
2a02:348:8d::/48 maxlen: 48
2a02:348:8e::/48 maxlen: 48
2a02:348:8f::/48 maxlen: 48
2a02:348:90::/48 maxlen: 48
2a02:348:91::/48 maxlen: 48
2a02:348:92::/48 maxlen: 48
2a02:348:94::/48 maxlen: 48
2a02:348:95::/48 maxlen: 48
2a02:348:96::/48 maxlen: 48
2a02:348:97::/48 maxlen: 48
2a02:348:98::/48 maxlen: 48
2a02:348:99::/48 maxlen: 48
2a02:348:9a::/48 maxlen: 48
2a02:348:9b::/48 maxlen: 48
2a02:348:9c::/48 maxlen: 48
2a02:348:a0::/48 maxlen: 48
2a02:348:a1::/48 maxlen: 48
2a02:348:a2::/48 maxlen: 48
2a02:348:a3::/48 maxlen: 48
2a02:348:ac::/48 maxlen: 48
2a02:348:b1::/48 maxlen: 48
2a02:348:b2::/48 maxlen: 48
2a02:348:b3::/48 maxlen: 48
2a02:348:b4::/48 maxlen: 48
2a02:348:b9::/48 maxlen: 48
2a02:348:ba::/48 maxlen: 48
2a02:348:bb::/48 maxlen: 48
2a02:348:bc::/48 maxlen: 48
2a02:348:c8::/48 maxlen: 48
2a02:348:5e6::/48 maxlen: 48
2a02:348:1001::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:14:53:ab:6a:05:a0:24:fd:72:87:1e:31:93:31:0d:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Validity
Not Before: Apr 8 07:35:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=40a1a0b1e56f9a305d2f79758509b99d1ee941f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:67:1b:29:5e:44:c4:9e:bf:0b:58:6d:2b:2a:
4f:d3:11:ad:64:9f:1c:b2:01:27:73:6e:1f:9f:6b:
ac:34:49:03:60:10:9e:42:17:f2:85:2d:4b:89:b8:
fc:24:30:a7:e9:f3:c0:c0:1b:4d:5e:ee:26:fe:91:
35:33:ca:1d:71:ce:10:e2:ac:00:2c:c3:c7:c3:8e:
fc:61:13:1e:a2:3b:b2:94:6b:0b:30:b3:98:1e:f0:
2f:19:5e:c9:a6:f9:ad:fd:37:fe:20:b8:2a:86:01:
c7:ae:82:86:30:0b:19:ce:e0:ba:c2:3b:69:0d:9c:
cb:f4:97:91:f1:bf:fe:5c:d4:4c:c8:78:d9:2f:8a:
0b:25:59:e5:ea:3b:ec:ef:d0:b5:3d:4d:55:78:ac:
6e:d1:06:3d:93:0f:58:d0:19:5c:ea:ff:8e:7c:63:
3e:f8:ed:79:11:fa:ae:51:23:50:d0:b4:83:56:b9:
94:ad:04:91:ef:4a:a5:c4:7b:fd:98:d9:ee:3b:ce:
5b:76:d4:7c:db:8e:bb:8d:61:12:19:2b:d5:fd:09:
6f:1b:e7:bf:fd:4d:d3:16:03:c5:26:ff:78:ab:6b:
ef:ac:d8:c5:6e:ac:5c:8a:92:37:47:71:a3:f3:43:
f4:b1:7e:74:5f:9b:51:10:9a:2f:3e:ad:d7:fb:53:
84:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A1:A0:B1:E5:6F:9A:30:5D:2F:79:75:85:09:B9:9D:1E:E9:41:F0
X509v3 Authority Key Identifier:
keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/QKGgseVvmjBdL3l1hQm5nR7pQfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.96.0/21
37.34.48.0/21
37.230.96.0/21
79.170.88.0/21
81.4.84.0/22
83.96.200.0/21
83.96.212.0-83.96.223.255
83.96.236.0-83.96.247.255
83.96.252.0/22
85.10.176.0/22
85.10.184.0/21
85.222.224.0/21
89.31.96.0/21
93.191.128.0/21
141.138.192.0/20
178.18.80.0/20
185.3.208.0/22
185.21.188.0/22
185.96.4.0/22
185.110.172.0/22
185.110.200.0/22
193.138.204.0/22
194.60.207.0/24
213.187.240.0/21
IPv6:
2a02:348::/32
Signature Algorithm: sha256WithRSAEncryption
16:de:ef:1b:c3:a5:ca:b5:7b:3c:79:a3:ee:1a:47:d0:e2:b4:
eb:32:0a:81:12:fe:19:f1:05:d4:98:bd:ec:5b:bd:24:f5:b5:
fd:f2:ce:5b:3a:dc:da:59:09:c0:6a:99:68:92:4d:61:5d:e8:
4c:b2:12:ba:7e:2f:74:10:e1:e5:be:18:0a:52:8a:33:29:58:
70:ac:37:e8:83:f8:7a:8c:69:d1:48:8e:93:92:67:30:f4:c2:
67:8c:f9:e6:c3:fb:e8:56:d9:5a:be:de:39:5b:51:1b:a2:f1:
e7:52:ec:f0:63:bc:ea:0a:11:3a:29:d9:9c:6a:e3:c5:53:0b:
dd:e5:50:da:80:01:7b:6a:06:ea:c5:52:d6:42:0f:df:cc:59:
ca:3b:40:c0:8c:43:06:55:4d:cc:01:62:8d:ad:24:81:91:d4:
3b:2c:35:fa:84:03:84:63:37:ae:7e:7e:12:1f:fb:f1:a9:01:
65:ac:95:7b:59:ca:3f:ce:af:bb:3c:db:ab:c4:38:d5:5f:45:
a4:ad:40:16:31:2b:4c:67:00:7b:7b:f6:a3:2d:34:87:32:6c:
fa:1e:00:57:7d:64:ce:6c:56:62:38:4b:bf:4d:21:0f:03:42:
cf:60:cb:54:0e:40:ac:0e:ec:13:38:92:41:7e:72:9e:13:a2:
c1:e1:dd:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:25 2025 by rpki-client on console.sobornost.net