Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/QkvmRVh9vbjetaUTQDKmilh3yjI.roa
File: QkvmRVh9vbjetaUTQDKmilh3yjI.roa (raw, json)
Hash identifier: QQUY9iioyezmP/+TplWuIp1XntdAN5iG4imSGslQuKQ=
Subject key identifier: 42:4B:E6:45:58:7D:BD:B8:DE:B5:A5:13:40:32:A6:8A:58:77:CA:32
Certificate issuer: /CN=a16b0d8ab49436550b6abf45b79035aec6aff23c
Certificate serial: 01941F8C1C83F364C80DDAE1EE3B305C253A
Authority key identifier: A1:6B:0D:8A:B4:94:36:55:0B:6A:BF:45:B7:90:35:AE:C6:AF:F2:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/QkvmRVh9vbjetaUTQDKmilh3yjI.roa
Signing time: Wed 01 Jan 2025 01:47:43 +0000
ROA not before: Wed 01 Jan 2025 01:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34971
IP address blocks: 37.247.48.0/21 maxlen: 24
95.157.96.0/24 maxlen: 24
185.34.136.0/24 maxlen: 24
188.164.128.0/21 maxlen: 24
195.88.4.0/23 maxlen: 24
2a00:dcc0::/32 maxlen: 48
2a00:dcc7:d000::/38 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:1c:83:f3:64:c8:0d:da:e1:ee:3b:30:5c:25:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a16b0d8ab49436550b6abf45b79035aec6aff23c
Validity
Not Before: Jan 1 01:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=424be645587dbdb8deb5a5134032a68a5877ca32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f5:8a:97:2a:70:2d:1e:1b:f6:7a:c5:a1:6f:
97:a0:dd:76:d8:40:26:0c:7d:ea:b1:1c:0c:ef:cb:
bf:b8:60:01:66:a7:f3:ec:21:ab:99:14:61:c7:9c:
61:f3:f2:9f:ea:79:39:de:76:b3:ef:b7:7c:2b:78:
4c:b8:a8:6a:1d:c6:26:6d:1f:33:69:1d:a8:f0:89:
01:db:7b:5f:7a:3f:9a:36:05:eb:52:1f:1b:38:e4:
46:06:04:7a:76:fc:c8:5e:f2:fe:5d:66:a9:a7:52:
9b:2f:62:69:5a:3b:cf:39:fc:a8:af:c5:c2:71:95:
4b:0f:7c:f2:15:5b:42:7e:59:03:21:c0:bf:45:56:
85:7f:0b:51:bd:85:03:68:9c:57:8b:7a:d0:1d:3d:
b8:81:01:c7:88:5e:dc:d2:7c:26:ab:7f:2e:13:5d:
59:64:ed:5a:d9:0a:5e:08:dc:16:f8:67:09:3d:43:
6f:96:43:da:ab:be:2e:a9:d7:29:77:98:d8:92:a5:
cd:23:51:54:ee:ee:11:bb:32:3e:77:1d:d1:5b:88:
4a:fa:e1:6a:e1:eb:19:8d:8b:70:1a:de:e9:95:3f:
b7:06:e7:0b:2d:00:94:74:53:d4:42:a5:95:5d:79:
89:a5:81:8c:ad:29:af:e9:b9:bc:ca:33:18:63:1c:
66:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:4B:E6:45:58:7D:BD:B8:DE:B5:A5:13:40:32:A6:8A:58:77:CA:32
X509v3 Authority Key Identifier:
keyid:A1:6B:0D:8A:B4:94:36:55:0B:6A:BF:45:B7:90:35:AE:C6:AF:F2:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/QkvmRVh9vbjetaUTQDKmilh3yjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.247.48.0/21
95.157.96.0/24
185.34.136.0/24
188.164.128.0/21
195.88.4.0/23
IPv6:
2a00:dcc0::/32
2a00:dcc7:d000::/38
Signature Algorithm: sha256WithRSAEncryption
7a:9b:4d:b0:d2:ae:e6:40:b6:2f:db:b3:6d:3c:07:e7:f1:37:
48:a4:c4:c6:61:ec:02:4e:9a:7d:ee:0d:1b:02:a2:23:09:45:
d4:64:9f:5e:91:35:97:27:95:0d:63:00:86:86:89:94:47:0a:
c6:a0:4c:ec:81:86:dc:64:bc:84:77:86:42:7f:16:4f:9d:2e:
da:60:9a:95:f0:1d:d4:d9:cc:36:cd:7d:8a:db:de:6a:15:e2:
b6:35:3a:d8:35:ba:6d:fa:0f:c6:da:14:00:cb:03:99:bb:f6:
85:05:ff:b1:7d:f9:bf:7d:91:03:84:f9:d3:8c:e1:04:a6:d1:
c0:72:a4:33:48:a9:61:73:29:2f:ad:0c:3e:8c:2b:05:92:f9:
0a:58:7d:11:b7:25:3a:a1:67:80:26:19:cd:88:e7:d4:4a:63:
7e:5c:ff:0e:c1:a6:aa:f8:ef:0f:0b:f4:c8:17:c8:3f:99:09:
b7:14:2f:5e:8f:27:01:f9:44:f9:7a:b9:d5:ef:84:17:24:07:
c8:81:ed:b7:84:31:13:ab:fe:92:c5:a4:5b:b3:d8:52:5d:f7:
a1:0a:40:eb:9f:6f:e7:ee:06:0c:f7:c1:91:cb:45:0e:9c:92:
e2:28:b1:0c:56:fa:55:6f:68:3f:5e:d0:63:0d:ee:be:b8:10:
ab:5b:a8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:44 2025 by rpki-client on console.sobornost.net