Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/QvUi-uUyEPClIhL14Tjl4e8kcJ8.roa
File: QvUi-uUyEPClIhL14Tjl4e8kcJ8.roa (raw, json)
Hash identifier: JHsP9SRn0z74odoNftVjEsPtUj5FZk/4tMrWE3fymP0=
Subject key identifier: 42:F5:22:FA:E5:32:10:F0:A5:22:12:F5:E1:38:E5:E1:EF:24:70:9F
Certificate issuer: /CN=f4b762950eb7916668bbfa8d1b870560b1ca7739
Certificate serial: 019624FC5944773F4FB4540B7A442BEF08C4
Authority key identifier: F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/QvUi-uUyEPClIhL14Tjl4e8kcJ8.roa
Signing time: Fri 11 Apr 2025 13:13:59 +0000
ROA not before: Fri 11 Apr 2025 13:13:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12444
IP address blocks: 84.17.67.0/24 maxlen: 24
84.17.68.0/24 maxlen: 24
84.17.70.0/24 maxlen: 24
84.17.71.0/24 maxlen: 24
84.17.75.0/24 maxlen: 24
84.17.76.0/24 maxlen: 24
84.17.83.0/24 maxlen: 24
84.17.84.0/24 maxlen: 24
84.17.86.0/24 maxlen: 24
84.17.87.0/24 maxlen: 24
84.17.89.0/24 maxlen: 24
84.17.90.0/24 maxlen: 24
84.17.91.0/24 maxlen: 24
84.17.93.0/24 maxlen: 24
185.118.176.0/24 maxlen: 24
185.118.177.0/24 maxlen: 24
185.118.178.0/24 maxlen: 24
185.118.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:24:fc:59:44:77:3f:4f:b4:54:0b:7a:44:2b:ef:08:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b762950eb7916668bbfa8d1b870560b1ca7739
Validity
Not Before: Apr 11 13:13:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42f522fae53210f0a52212f5e138e5e1ef24709f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:78:af:57:fa:f5:d5:9f:a5:25:06:5c:11:82:
85:69:42:6a:f7:3b:57:fc:02:28:57:c4:85:a5:e0:
0f:0f:fd:4f:63:c8:ca:dd:f7:f1:be:53:3f:3f:ce:
7a:76:3e:b9:44:93:ae:2c:d3:38:ad:8d:47:eb:c4:
b4:31:4a:8e:9c:f6:74:8d:b6:af:32:96:6c:41:51:
70:58:9f:0c:42:7f:71:c3:56:3c:a7:9f:35:17:72:
bf:61:f2:a0:45:60:3e:77:71:a5:f4:a1:25:fd:bf:
ac:52:26:db:a7:37:47:91:49:be:2d:bb:c5:a9:4e:
9a:87:b6:95:34:05:f8:86:6d:bb:7a:17:53:22:f7:
1b:1b:c0:11:29:e1:4a:a6:ce:32:17:5b:0f:f1:e3:
c7:37:63:08:a0:18:aa:79:9b:33:5e:18:a6:1f:71:
2b:44:f9:14:b1:0a:d6:e1:c1:ee:b6:72:84:a7:fa:
e0:a5:7c:77:05:b0:47:bc:54:60:0a:d2:c4:78:6c:
fe:d1:45:67:48:1c:c1:24:22:ae:e6:ff:8b:70:f6:
d0:af:f1:82:08:c5:10:75:eb:cf:72:96:b2:96:46:
07:1c:3f:85:8f:35:19:f5:ea:6e:97:0b:06:dd:c5:
99:aa:6b:37:d3:d6:74:6e:76:7b:f3:15:a8:7b:9d:
dc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F5:22:FA:E5:32:10:F0:A5:22:12:F5:E1:38:E5:E1:EF:24:70:9F
X509v3 Authority Key Identifier:
keyid:F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/QvUi-uUyEPClIhL14Tjl4e8kcJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.17.67.0-84.17.68.255
84.17.70.0/23
84.17.75.0-84.17.76.255
84.17.83.0-84.17.84.255
84.17.86.0/23
84.17.89.0-84.17.91.255
84.17.93.0/24
185.118.176.0/22
Signature Algorithm: sha256WithRSAEncryption
50:5e:ba:fc:a1:64:fb:cc:46:16:84:8b:84:14:3d:53:83:e2:
c3:a4:ba:03:26:78:a6:5c:07:38:92:ca:44:ab:8b:0a:f3:0a:
87:98:16:18:20:e2:f5:fd:5b:5e:cc:a1:8c:5b:f2:e8:e5:49:
bd:ed:2a:a2:a2:73:36:46:db:6d:f6:a4:45:2f:38:b0:c1:27:
ef:89:09:30:06:cf:c4:2f:79:8c:67:af:92:bb:a4:81:32:f8:
a1:9c:c9:46:5d:f3:fd:13:ed:d2:f6:e3:40:a0:d1:60:9d:85:
bc:5c:0c:5c:94:97:5e:26:95:24:34:00:8d:1d:ad:1f:92:60:
a3:b8:15:a9:e5:37:49:7b:e4:0a:22:36:17:87:e0:e4:14:f0:
53:7a:f9:52:c6:28:c8:8e:3f:d4:25:b8:2a:6c:9e:7e:2c:cc:
ea:53:98:f0:10:1f:1c:d4:d1:cf:7b:84:2a:d1:58:0b:d4:75:
b7:d9:05:80:e1:6d:93:b5:b0:8a:af:6e:ff:16:19:7f:80:0b:
dc:29:9a:5a:c1:ff:ea:df:14:71:d6:e8:23:48:49:e9:46:6a:
d7:08:66:8a:22:73:75:69:3f:b9:b6:d7:24:9d:9f:92:fc:8a:
5c:b2:bd:a1:7f:ab:94:29:53:ce:08:87:9f:14:9a:28:6b:74:
05:d1:c7:c3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgISAZYk/FlEdz9PtFQLekQr7wjEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0Yjc2Mjk1MGViNzkxNjY2OGJiZmE4ZDFiODcwNTYwYjFj
YTc3MzkwHhcNMjUwNDExMTMxMzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MmY1MjJmYWU1MzIxMGYwYTUyMjEyZjVlMTM4ZTVlMWVmMjQ3MDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnivV/r11Z+lJQZcEYKFaUJq9ztX
/AIoV8SFpeAPD/1PY8jK3ffxvlM/P856dj65RJOuLNM4rY1H68S0MUqOnPZ0jbav
MpZsQVFwWJ8MQn9xw1Y8p581F3K/YfKgRWA+d3Gl9KEl/b+sUibbpzdHkUm+LbvF
qU6ah7aVNAX4hm27ehdTIvcbG8ARKeFKps4yF1sP8ePHN2MIoBiqeZszXhimH3Er
RPkUsQrW4cHutnKEp/rgpXx3BbBHvFRgCtLEeGz+0UVnSBzBJCKu5v+LcPbQr/GC
CMUQdevPcpaylkYHHD+FjzUZ9epulwsG3cWZqms309Z0bnZ78xWoe53c6QIDAQAB
o4ICUzCCAk8wHQYDVR0OBBYEFEL1IvrlMhDwpSIS9eE45eHvJHCfMB8GA1UdIwQY
MBaAFPS3YpUOt5FmaLv6jRuHBWCxync5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUxkaWxRNjNrV1pvdV9xTkc0Y0ZZTEhLZHprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wYjIzYzUtMjFiNS00YWIzLTk3YTAt
MmY4ZGYxODdmOThiLzEvUXZVaS11VXlFUENsSWhMMTRUamw0ZThrY0o4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8wYjIzYzUtMjFiNS00YWIzLTk3YTAtMmY4ZGYxODdmOThi
LzEvOUxkaWxRNjNrV1pvdV9xTkc0Y0ZZTEhLZHprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGkGCCsGAQUFBwEHAQH/BFowWDBWBAIAATBQMAwDBABUEUMD
BABUEUQDBAFUEUYwDAMEAFQRSwMEAFQRTDAMAwQAVBFTAwQAVBFUAwQBVBFWMAwD
BABUEVkDBAJUEVgDBABUEV0DBAK5drAwDQYJKoZIhvcNAQELBQADggEBAFBeuvyh
ZPvMRhaEi4QUPVOD4sOkugMmeKZcBziSykSriwrzCoeYFhgg4vX9W17MoYxb8ujl
Sb3tKqKiczZG2232pEUvOLDBJ++JCTAGz8QveYxnr5K7pIEy+KGcyUZd8/0T7dL2
40Cg0WCdhbxcDFyUl14mlSQ0AI0drR+SYKO4FanlN0l75AoiNheH4OQU8FN6+VLG
KMiOP9QluCpsnn4szOpTmPAQHxzU0c97hCrRWAvUdbfZBYDhbZO1sIqvbv8WGX+A
C9wpmlrB/+rfFHHW6CNISelGatcIZooic3VpP7m21ySdn5L8ilyyvaF/q5QpU84I
h58UmihrdAXRx8M=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:13 2025 by rpki-client on console.sobornost.net