Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/QqMNXiEU3JEbO_bmf02t1Mdtr0s.roa
File: QqMNXiEU3JEbO_bmf02t1Mdtr0s.roa (raw, json)
Hash identifier: UEDHvgeMxX9sslkhOcOwWDOmX1JjNNohtVDPCJ6yEMk=
Subject key identifier: 42:A3:0D:5E:21:14:DC:91:1B:3B:F6:E6:7F:4D:AD:D4:C7:6D:AF:4B
Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Certificate serial: 01942747CEAEA06B94DA7EFB5987BF509BA3
Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/QqMNXiEU3JEbO_bmf02t1Mdtr0s.roa
Signing time: Thu 02 Jan 2025 13:50:04 +0000
ROA not before: Thu 02 Jan 2025 13:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50495
IP address blocks: 77.83.232.0/22 maxlen: 22
91.223.99.0/24 maxlen: 24
91.223.102.0/24 maxlen: 24
91.223.126.0/24 maxlen: 24
194.39.32.0/22 maxlen: 22
2a06:ef40::/32 maxlen: 36
2a09:2c00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:ce:ae:a0:6b:94:da:7e:fb:59:87:bf:50:9b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Validity
Not Before: Jan 2 13:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42a30d5e2114dc911b3bf6e67f4dadd4c76daf4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f7:7e:a8:5b:5e:3c:fc:25:3d:52:2e:4c:23:
26:ae:6f:1c:c9:76:c5:ee:e5:28:39:ef:15:7d:07:
cc:5f:b3:34:cc:fd:fe:0b:3d:9d:96:37:1f:1f:99:
e4:5f:5b:75:02:73:01:52:64:fc:81:71:b3:34:28:
ed:92:2e:41:d8:3e:44:01:79:de:7c:60:15:ed:b5:
00:55:15:29:8d:f5:9c:fc:65:3a:b4:b5:13:5a:0b:
82:9b:54:02:e0:ee:1e:a3:44:75:16:da:d3:c0:80:
92:04:5b:69:15:ac:3f:c4:80:ba:a0:ff:54:36:a5:
9f:c9:6f:50:e8:c0:b1:a7:ff:8c:cd:f9:3d:7e:23:
e3:34:1c:94:f0:5d:47:f0:bc:9c:38:65:76:66:72:
73:e7:dc:19:21:4d:bd:56:4f:83:b0:e3:cf:ec:86:
14:bd:35:3e:06:7a:1e:5a:c3:a8:87:1f:1d:d7:96:
f1:38:fe:1a:6f:a6:55:53:90:57:38:92:3c:6b:d6:
2d:01:0a:d2:61:5c:57:bd:6f:da:fc:b5:80:0a:2d:
8f:de:ed:c1:49:62:9b:85:c3:ac:f3:9f:6f:fe:a2:
1c:77:e3:d0:e2:95:49:40:b4:aa:24:65:24:63:4f:
35:91:90:e3:72:47:e8:93:8d:67:ba:35:6c:9b:3f:
2d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A3:0D:5E:21:14:DC:91:1B:3B:F6:E6:7F:4D:AD:D4:C7:6D:AF:4B
X509v3 Authority Key Identifier:
keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/QqMNXiEU3JEbO_bmf02t1Mdtr0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.232.0/22
91.223.99.0/24
91.223.102.0/24
91.223.126.0/24
194.39.32.0/22
IPv6:
2a06:ef40::/32
2a09:2c00::/29
Signature Algorithm: sha256WithRSAEncryption
49:7e:43:ad:66:e1:66:1e:45:3e:89:89:09:ca:6c:6a:91:df:
17:92:2a:4a:50:68:1a:72:03:f8:e1:c0:4b:87:3b:62:53:21:
be:5e:5b:f5:e4:5a:bf:85:41:d0:8c:e5:6c:3d:2d:d3:72:67:
3f:8b:73:32:17:e9:c7:36:58:c2:72:63:b9:f5:22:7c:00:f4:
08:fc:14:df:70:6c:30:20:cc:3e:de:d4:06:f0:45:2f:7e:c9:
28:19:36:61:8d:6a:43:6a:ab:0f:b1:dd:ba:cb:d4:e6:71:30:
8c:9c:53:f5:e0:52:67:02:9e:1d:48:8d:51:f8:d0:27:b3:4d:
a3:14:0e:c9:0f:f1:fa:f0:b0:c3:88:ad:9e:39:d9:79:a2:a1:
05:8a:92:62:c3:a4:13:9f:d2:62:1e:e6:68:88:55:51:a1:d2:
ca:d3:64:ca:d8:63:da:5a:6c:e8:62:fc:29:c2:f6:61:3d:ba:
af:15:74:76:e1:6d:57:d5:44:fd:a1:8a:8c:c9:20:ff:8c:15:
4a:3c:7d:17:23:f7:6c:c1:44:e4:6b:bf:3e:9b:f1:af:73:cf:
2b:c4:86:d3:45:ff:03:12:61:34:a7:a2:ef:17:26:4b:06:08:
cc:62:ae:ef:cc:1a:a2:79:c4:ac:2d:11:e1:1d:fb:e7:a7:69:
7a:53:aa:2c
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgISAZQnR86uoGuU2n77WYe/UJujMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZDBjNDlhMGU5N2UwZDVmM2NlZDNiN2I2YjlmNzJjYTBj
YjUzZDYwHhcNMjUwMTAyMTM1MDA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MmEzMGQ1ZTIxMTRkYzkxMWIzYmY2ZTY3ZjRkYWRkNGM3NmRhZjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6/d+qFtePPwlPVIuTCMmrm8cyXbF
7uUoOe8VfQfMX7M0zP3+Cz2dljcfH5nkX1t1AnMBUmT8gXGzNCjtki5B2D5EAXne
fGAV7bUAVRUpjfWc/GU6tLUTWguCm1QC4O4eo0R1FtrTwICSBFtpFaw/xIC6oP9U
NqWfyW9Q6MCxp/+Mzfk9fiPjNByU8F1H8LycOGV2ZnJz59wZIU29Vk+DsOPP7IYU
vTU+BnoeWsOohx8d15bxOP4ab6ZVU5BXOJI8a9YtAQrSYVxXvW/a/LWACi2P3u3B
SWKbhcOs859v/qIcd+PQ4pVJQLSqJGUkY081kZDjckfok41nujVsmz8tVwIDAQAB
o4ICNzCCAjMwHQYDVR0OBBYEFEKjDV4hFNyRGzv25n9NrdTHba9LMB8GA1UdIwQY
MBaAFOLQxJoOl+DV887Tt7a59yygy1PWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEt
NDY5MGEwMDcxNDFmLzEvUXFNTlhpRVUzSkViT19ibWYwMnQxTWR0cjBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEtNDY5MGEwMDcxNDFm
LzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDAkBAIAATAeAwQCTVPoAwQA
W99jAwQAW99mAwQAW99+AwQCwicgMBQEAgACMA4DBQAqBu9AAwUDKgksADANBgkq
hkiG9w0BAQsFAAOCAQEASX5DrWbhZh5FPomJCcpsapHfF5IqSlBoGnID+OHAS4c7
YlMhvl5b9eRav4VB0IzlbD0t03JnP4tzMhfpxzZYwnJjufUifAD0CPwU33BsMCDM
Pt7UBvBFL37JKBk2YY1qQ2qrD7HdusvU5nEwjJxT9eBSZwKeHUiNUfjQJ7NNoxQO
yQ/x+vCww4itnjnZeaKhBYqSYsOkE5/SYh7maIhVUaHSytNkythj2lps6GL8KcL2
YT26rxV0duFtV9VE/aGKjMkg/4wVSjx9FyP3bMFE5Gu/Ppvxr3PPK8SG00X/AxJh
NKei7xcmSwYIzGKu78waonnErC0R4R3756dpelOqLA==
-----END CERTIFICATE-----
Generated at Thu Jan 23 19:16:35 2025 by rpki-client on console.sobornost.net