Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/qnIt-FemLvN0LrzCWdq4IFMKMh0.roa
File: qnIt-FemLvN0LrzCWdq4IFMKMh0.roa (raw, json)
Hash identifier: XtaUj5IrA/ML4502o9zY4/e7MPms6zhSGFr03ZO20B4=
Subject key identifier: AA:72:2D:F8:57:A6:2E:F3:74:2E:BC:C2:59:DA:B8:20:53:0A:32:1D
Certificate issuer: /CN=b209308540c4df9b9bb7d6327fa7b5d49008068c
Certificate serial: 0194D1479E2889D5D8941C94BE7B37F26122
Authority key identifier: B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/qnIt-FemLvN0LrzCWdq4IFMKMh0.roa
Signing time: Tue 04 Feb 2025 14:05:19 +0000
ROA not before: Tue 04 Feb 2025 14:05:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50564
IP address blocks: 94.158.252.0/22 maxlen: 22
94.158.252.0/24 maxlen: 24
94.158.253.0/24 maxlen: 24
94.158.255.0/24 maxlen: 24
185.44.24.0/22 maxlen: 22
185.44.24.0/24 maxlen: 24
185.44.25.0/24 maxlen: 24
185.44.26.0/24 maxlen: 24
185.44.27.0/24 maxlen: 24
185.95.124.0/22 maxlen: 22
185.95.124.0/24 maxlen: 24
185.95.125.0/24 maxlen: 24
185.95.126.0/24 maxlen: 24
185.95.127.0/24 maxlen: 24
185.104.236.0/22 maxlen: 22
185.104.236.0/24 maxlen: 24
185.104.237.0/24 maxlen: 24
185.104.238.0/24 maxlen: 24
185.104.239.0/24 maxlen: 24
185.143.136.0/22 maxlen: 22
185.143.136.0/24 maxlen: 24
185.143.137.0/24 maxlen: 24
185.143.138.0/24 maxlen: 24
185.143.139.0/24 maxlen: 24
185.182.124.0/22 maxlen: 22
185.182.124.0/24 maxlen: 24
185.182.125.0/24 maxlen: 24
185.182.126.0/24 maxlen: 24
185.182.127.0/24 maxlen: 24
185.184.0.0/22 maxlen: 23
185.184.0.0/23 maxlen: 23
185.184.0.0/24 maxlen: 24
185.184.1.0/24 maxlen: 24
185.184.2.0/24 maxlen: 24
185.184.3.0/24 maxlen: 24
185.208.20.0/22 maxlen: 22
185.208.20.0/24 maxlen: 24
185.208.21.0/24 maxlen: 24
185.208.22.0/24 maxlen: 24
185.208.23.0/24 maxlen: 24
185.213.48.0/22 maxlen: 22
185.213.48.0/24 maxlen: 24
185.213.49.0/24 maxlen: 24
185.213.50.0/24 maxlen: 24
185.213.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d1:47:9e:28:89:d5:d8:94:1c:94:be:7b:37:f2:61:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b209308540c4df9b9bb7d6327fa7b5d49008068c
Validity
Not Before: Feb 4 14:05:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa722df857a62ef3742ebcc259dab820530a321d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d6:a9:e3:45:6b:10:0e:d6:f7:27:69:43:b3:
7a:a1:d6:1d:f5:a2:c9:a2:ad:6c:cf:c0:b2:00:47:
17:de:8c:e3:b2:55:a5:b0:2f:c7:4f:32:d2:6d:55:
c4:f6:dc:28:ff:d1:de:19:72:66:f7:09:ef:cc:8d:
d7:f6:06:2b:e3:20:f7:dd:cd:f4:6a:84:dd:af:1c:
9d:53:76:dc:82:ae:4e:25:f7:ec:8a:61:18:3a:28:
cb:19:f1:53:ea:f0:50:25:14:0b:12:ae:93:38:9a:
e8:5d:a4:03:2f:9c:31:04:e7:69:cd:34:c6:79:89:
e5:dd:36:fc:20:2c:e6:6f:78:6c:d0:00:9a:f9:c1:
f1:27:1c:37:1b:16:fb:78:c5:42:5a:ea:ce:51:78:
81:02:74:93:d6:66:19:76:fc:c0:34:9f:bd:3b:25:
87:cd:34:10:02:9f:fc:df:de:bb:fb:70:27:ac:91:
ff:1f:39:c0:2e:dc:ed:97:eb:2f:9b:6f:d5:2c:75:
a3:67:53:69:e3:0b:68:6e:d8:2a:ad:dc:15:57:6a:
67:7b:1a:7e:2d:57:01:4b:cd:7c:ab:9e:dc:62:81:
c0:4f:34:8a:b5:62:99:ee:a9:83:ac:90:a3:e0:ad:
08:0f:f9:74:a4:78:b6:6b:52:21:6b:21:22:27:32:
53:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:72:2D:F8:57:A6:2E:F3:74:2E:BC:C2:59:DA:B8:20:53:0A:32:1D
X509v3 Authority Key Identifier:
keyid:B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/qnIt-FemLvN0LrzCWdq4IFMKMh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.158.252.0/22
185.44.24.0/22
185.95.124.0/22
185.104.236.0/22
185.143.136.0/22
185.182.124.0/22
185.184.0.0/22
185.208.20.0/22
185.213.48.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:97:8b:27:4a:4d:07:b1:64:79:74:e3:a2:8e:e4:35:d7:b9:
16:1e:fe:2d:85:69:8d:20:1a:81:72:f9:88:19:19:33:0e:c7:
ee:e9:01:61:fd:9d:11:49:fa:6f:7d:c6:13:69:2d:ab:c6:e6:
d2:62:9f:85:b8:d9:c7:bd:e3:76:75:73:12:16:fa:0a:37:e3:
08:f4:1e:ec:63:fb:28:16:dc:f7:ef:c9:48:b6:5d:39:28:21:
28:07:f7:ca:f4:0b:d4:0b:e3:72:6c:46:50:18:19:79:fd:d0:
ae:5d:6b:9c:ad:12:db:7a:69:bf:8d:43:00:27:6e:dd:75:3e:
33:92:b6:2e:c9:dd:c4:79:fd:be:eb:48:28:0c:74:4f:c2:67:
6e:1a:2d:d5:6a:f0:56:6d:95:84:98:90:b2:52:53:e4:21:c2:
6b:6b:36:03:d4:fb:05:65:a0:75:ee:62:34:54:0f:71:11:66:
df:2a:67:46:a8:12:c8:de:40:e3:e4:08:07:21:ad:94:bc:3c:
f5:9e:5d:e0:c8:48:d7:ee:55:89:91:62:5a:ee:8b:a4:4c:61:
14:65:1d:99:c6:8b:88:8d:c3:a5:8f:de:0d:b6:e4:02:d3:49:
0f:ba:ed:9a:1b:7c:4d:d2:c1:9c:be:57:3c:bb:ba:6b:4b:3f:
dc:6e:ba:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 00:19:48 2025 by rpki-client on console.sobornost.net