Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/QLHEJas53oiAGzs_YSaCGuwaZeU.roa
File: QLHEJas53oiAGzs_YSaCGuwaZeU.roa (raw, json)
Hash identifier: OfpByeH9dDyJ45cIcWM9guSmvu9MoGjj7YKQgKOyd/0=
Subject key identifier: 40:B1:C4:25:AB:39:DE:88:80:1B:3B:3F:61:26:82:1A:EC:1A:65:E5
Certificate issuer: /CN=421bae989898d9402424aadafbb47c3a6d4c25b3
Certificate serial: 0195AFB3797B0ABE12D9795ECFFFAEBC9E06
Authority key identifier: 42:1B:AE:98:98:98:D9:40:24:24:AA:DA:FB:B4:7C:3A:6D:4C:25:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhuumJiY2UAkJKra-7R8Om1MJbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/QLHEJas53oiAGzs_YSaCGuwaZeU.roa
Signing time: Wed 19 Mar 2025 18:38:49 +0000
ROA not before: Wed 19 Mar 2025 18:38:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197580
IP address blocks: 46.245.136.0/21 maxlen: 21
83.174.148.0/22 maxlen: 22
83.174.148.0/23 maxlen: 23
83.174.151.0/24 maxlen: 24
83.174.152.0/21 maxlen: 21
83.174.152.0/23 maxlen: 23
83.174.154.0/24 maxlen: 24
83.174.156.0/22 maxlen: 22
185.42.208.0/24 maxlen: 24
185.42.211.0/24 maxlen: 24
185.254.216.0/22 maxlen: 22
185.254.216.0/23 maxlen: 23
185.254.219.0/24 maxlen: 24
2a01:6320::/32 maxlen: 32
2a05:dec0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:af:b3:79:7b:0a:be:12:d9:79:5e:cf:ff:ae:bc:9e:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421bae989898d9402424aadafbb47c3a6d4c25b3
Validity
Not Before: Mar 19 18:38:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=40b1c425ab39de88801b3b3f6126821aec1a65e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:23:f5:09:b4:6a:93:3b:f5:e2:15:19:cb:b6:
4f:f4:ad:8f:45:0a:44:aa:48:c3:cb:0d:a0:76:b1:
55:f2:0a:2b:e5:fe:20:13:6c:ac:f2:0c:70:f2:5d:
5c:c4:f3:b2:b4:03:c6:31:85:79:0f:b0:d2:14:0f:
87:d5:38:b1:d2:b6:69:a1:77:41:2a:a7:da:a8:9a:
5a:87:1e:0d:fc:0d:a8:15:16:c7:20:21:95:bb:08:
13:95:82:e1:71:1b:99:c7:31:67:7e:75:74:5b:23:
2e:2d:63:75:6b:9a:1c:37:9d:d9:44:5f:91:28:d7:
b0:a6:7d:9e:4d:8d:45:d1:05:32:7f:3f:95:43:17:
b8:f0:1c:8f:a9:71:79:ac:a1:d2:9e:e4:82:86:41:
2d:80:99:46:70:4b:ec:5d:f5:f6:1d:d1:f9:13:dc:
67:ce:ab:df:20:45:62:a7:89:af:f1:e3:a9:0e:9f:
5e:c1:91:c4:a6:b6:5a:28:71:cf:6e:78:e9:2f:c3:
be:e9:c6:0e:2f:5b:76:25:46:52:0b:ac:f2:bf:a5:
71:d7:72:3b:af:27:6e:d8:71:20:38:e2:10:7b:04:
ac:8e:ef:46:69:e8:c8:7d:c8:c4:2d:84:1d:32:5f:
9f:75:1b:59:93:ee:b7:e8:94:52:f9:40:12:89:89:
33:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B1:C4:25:AB:39:DE:88:80:1B:3B:3F:61:26:82:1A:EC:1A:65:E5
X509v3 Authority Key Identifier:
keyid:42:1B:AE:98:98:98:D9:40:24:24:AA:DA:FB:B4:7C:3A:6D:4C:25:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhuumJiY2UAkJKra-7R8Om1MJbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/QLHEJas53oiAGzs_YSaCGuwaZeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/QhuumJiY2UAkJKra-7R8Om1MJbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.136.0/21
83.174.148.0-83.174.159.255
185.42.208.0/24
185.42.211.0/24
185.254.216.0/22
IPv6:
2a01:6320::/32
2a05:dec0::/29
Signature Algorithm: sha256WithRSAEncryption
84:f7:f5:94:19:e6:15:2f:10:b2:df:fc:b8:2d:da:11:e2:2f:
41:d7:98:64:89:3b:26:8f:50:1f:b2:8b:6e:2a:e2:bb:57:f8:
83:8f:32:cb:48:48:b3:7c:15:ce:60:bb:9c:0e:65:cf:46:95:
30:dd:7a:86:70:fb:72:ce:4e:c3:be:8a:55:a8:e1:70:a4:37:
fc:e8:31:35:1d:5d:b3:85:08:e5:60:c3:71:d2:ad:74:25:44:
e0:17:f3:f3:f0:6a:24:8f:c5:aa:4f:da:4c:fe:e2:ce:ff:8c:
ab:8f:e7:94:37:7a:a8:78:fc:30:b5:72:6a:3f:2f:53:d1:11:
ac:a2:2b:0e:28:76:8c:3a:fa:eb:5f:0b:3f:75:d0:3b:c8:af:
d3:60:40:d8:7f:32:04:87:c5:fb:79:86:b1:21:96:ce:02:bb:
fb:95:d4:b1:cf:1b:6c:c8:b3:24:f1:94:31:f8:ad:8f:d9:8c:
60:f0:7f:a9:1e:5c:1a:ee:44:bf:89:25:68:a0:88:4c:ab:7e:
8c:b8:4c:f4:8e:a6:ad:d7:da:24:53:0c:84:35:0c:e9:e8:0a:
0c:11:e3:c2:1f:ac:ef:a7:7f:16:09:b7:39:e3:cb:8c:af:6c:
6c:4c:5b:b2:61:7c:5d:13:4f:48:ea:8c:f1:97:94:ad:d8:a5:
64:72:77:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:25 2025 by rpki-client on console.sobornost.net