Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/qNCTONYDVgV-YhIGjmOlPezvOSo.roa
File: qNCTONYDVgV-YhIGjmOlPezvOSo.roa (raw, json)
Hash identifier: ItD5CwPVAJp65+VPpIu9fPnV1XDVQw26MRj7li9FxQc=
Subject key identifier: A8:D0:93:38:D6:03:56:05:7E:62:12:06:8E:63:A5:3D:EC:EF:39:2A
Certificate issuer: /CN=1ef3cb098d5285020c3be754f8c4ff777aa8a174
Certificate serial: 019427B64DF0C73E0564F79B9CF1EA909E8F
Authority key identifier: 1E:F3:CB:09:8D:52:85:02:0C:3B:E7:54:F8:C4:FF:77:7A:A8:A1:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvPLCY1ShQIMO-dU-MT_d3qooXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/qNCTONYDVgV-YhIGjmOlPezvOSo.roa
Signing time: Thu 02 Jan 2025 15:50:46 +0000
ROA not before: Thu 02 Jan 2025 15:50:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42013
IP address blocks: 2.58.132.0/22 maxlen: 22
2.58.132.0/23 maxlen: 23
2.58.132.0/24 maxlen: 24
2.58.133.0/24 maxlen: 24
2.58.134.0/23 maxlen: 23
2.58.134.0/24 maxlen: 24
2.58.135.0/24 maxlen: 24
91.229.247.0/24 maxlen: 24
185.61.20.0/22 maxlen: 22
185.61.20.0/23 maxlen: 23
185.61.20.0/24 maxlen: 24
185.61.21.0/24 maxlen: 24
185.61.22.0/23 maxlen: 23
185.61.22.0/24 maxlen: 24
185.61.23.0/24 maxlen: 24
185.99.44.0/22 maxlen: 22
185.99.44.0/23 maxlen: 23
185.99.44.0/24 maxlen: 24
185.99.45.0/24 maxlen: 24
185.99.46.0/23 maxlen: 23
185.99.46.0/24 maxlen: 24
185.99.47.0/24 maxlen: 24
185.209.108.0/22 maxlen: 22
185.209.108.0/23 maxlen: 23
185.209.108.0/24 maxlen: 24
185.209.109.0/24 maxlen: 24
185.209.110.0/23 maxlen: 23
185.209.110.0/24 maxlen: 24
185.209.111.0/24 maxlen: 24
194.5.235.0/24 maxlen: 24
212.47.82.0/23 maxlen: 23
212.47.82.0/24 maxlen: 24
212.47.83.0/24 maxlen: 24
2a0b:4d40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:4d:f0:c7:3e:05:64:f7:9b:9c:f1:ea:90:9e:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ef3cb098d5285020c3be754f8c4ff777aa8a174
Validity
Not Before: Jan 2 15:50:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8d09338d60356057e6212068e63a53decef392a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:23:90:19:e1:94:ce:e4:47:ca:de:13:22:a6:
50:1e:49:11:a3:e1:ea:74:b4:46:c6:76:cd:02:4f:
c3:3c:5d:cc:c1:4a:df:20:8f:dd:0a:17:9b:1b:f1:
a5:e3:16:94:8d:b9:ab:37:02:19:ae:cd:61:10:58:
35:c0:c6:58:ee:e3:52:be:aa:e6:51:79:24:54:1a:
40:dd:cc:3c:c2:6c:65:7d:f4:da:b3:b1:52:40:a6:
35:9d:7a:91:81:a9:0b:32:18:38:76:65:d4:a0:c1:
7f:ae:92:b7:5b:a1:e0:3f:e3:f3:10:e8:3d:2c:bf:
0a:86:4d:cf:92:f9:01:df:27:00:8a:e5:be:9e:96:
73:3b:7d:7a:eb:13:f5:0a:3b:19:f9:c7:4b:af:85:
79:04:f9:2d:da:55:b9:ee:45:22:7e:33:40:62:95:
92:82:78:0e:08:20:24:6c:b3:26:5d:17:1f:a0:53:
07:32:b7:24:d4:19:d7:cb:86:e8:2a:51:34:1f:4e:
ae:d5:e8:8c:9d:7b:01:b3:0b:14:21:26:68:f5:a0:
37:3b:56:00:fa:29:f8:bb:c1:6f:de:70:07:f2:cf:
97:5a:c8:cc:b9:81:3e:52:38:13:24:21:20:d2:4f:
67:55:07:00:87:da:a2:13:09:d9:d3:98:df:0c:0a:
cf:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D0:93:38:D6:03:56:05:7E:62:12:06:8E:63:A5:3D:EC:EF:39:2A
X509v3 Authority Key Identifier:
keyid:1E:F3:CB:09:8D:52:85:02:0C:3B:E7:54:F8:C4:FF:77:7A:A8:A1:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvPLCY1ShQIMO-dU-MT_d3qooXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/qNCTONYDVgV-YhIGjmOlPezvOSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/HvPLCY1ShQIMO-dU-MT_d3qooXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.132.0/22
91.229.247.0/24
185.61.20.0/22
185.99.44.0/22
185.209.108.0/22
194.5.235.0/24
212.47.82.0/23
IPv6:
2a0b:4d40::/29
Signature Algorithm: sha256WithRSAEncryption
5a:28:1f:a7:58:3b:38:8c:f3:4c:14:82:19:50:30:e2:03:6b:
3a:ac:e8:3b:ae:41:e0:02:70:4d:9b:ac:d7:cc:f9:8a:46:03:
70:74:e3:0f:b3:09:10:2a:4d:99:a0:4b:02:89:b3:a8:bb:58:
df:d2:e8:38:e5:93:85:03:fe:c8:19:2c:3e:11:21:e4:e8:f4:
ad:5f:0c:1b:67:cb:90:cc:e1:4f:5e:fb:69:c4:85:9e:d0:ba:
f7:a7:e3:be:c2:bd:b9:26:43:8e:a6:ae:27:f4:92:57:5a:1f:
ed:36:5a:ae:c7:7c:4b:ec:70:71:fe:24:fa:4a:47:df:58:9c:
de:97:a2:8c:14:34:c6:a4:93:be:1d:c4:f5:7c:30:11:c4:5c:
dd:fd:8a:6b:99:63:32:eb:b6:4c:ae:bf:74:f9:34:37:65:1d:
85:bc:94:84:59:55:a0:d2:c6:54:18:a1:80:62:b6:fe:ca:70:
92:65:26:a5:70:dd:25:f7:47:f6:f4:bb:6f:5b:0d:9b:e5:2e:
02:d7:5f:a2:c1:22:24:04:5d:e9:91:71:7c:2a:4a:e9:ad:73:
1e:a8:94:23:9c:00:a5:d1:35:f5:43:eb:01:06:4a:31:8b:fe:
03:d6:6a:b9:46:7e:63:30:4c:76:04:ab:be:93:bc:28:9a:a9:
dc:b3:2b:8e
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgISAZQntk3wxz4FZPebnPHqkJ6PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlZjNjYjA5OGQ1Mjg1MDIwYzNiZTc1NGY4YzRmZjc3N2Fh
OGExNzQwHhcNMjUwMTAyMTU1MDQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOGQwOTMzOGQ2MDM1NjA1N2U2MjEyMDY4ZTYzYTUzZGVjZWYzOTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyOQGeGUzuRHyt4TIqZQHkkRo+Hq
dLRGxnbNAk/DPF3MwUrfII/dChebG/Gl4xaUjbmrNwIZrs1hEFg1wMZY7uNSvqrm
UXkkVBpA3cw8wmxlffTas7FSQKY1nXqRgakLMhg4dmXUoMF/rpK3W6HgP+PzEOg9
LL8Khk3PkvkB3ycAiuW+npZzO3166xP1CjsZ+cdLr4V5BPkt2lW57kUifjNAYpWS
gngOCCAkbLMmXRcfoFMHMrck1BnXy4boKlE0H06u1eiMnXsBswsUISZo9aA3O1YA
+in4u8Fv3nAH8s+XWsjMuYE+UjgTJCEg0k9nVQcAh9qiEwnZ05jfDArPlwIDAQAB
o4ICPDCCAjgwHQYDVR0OBBYEFKjQkzjWA1YFfmISBo5jpT3s7zkqMB8GA1UdIwQY
MBaAFB7zywmNUoUCDDvnVPjE/3d6qKF0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHZQTENZMVNoUUlNTy1kVS1NVF9kM3Fvb1hRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85MzM4MTgtYTViYi00ZDE2LWI1NTEt
Zjk5MmIwN2YzMjNmLzEvcU5DVE9OWURWZ1YtWWhJR2ptT2xQZXp2T1NvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS85MzM4MTgtYTViYi00ZDE2LWI1NTEtZjk5MmIwN2YzMjNm
LzEvSHZQTENZMVNoUUlNTy1kVS1NVF9kM3Fvb1hRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQCAjqEAwQA
W+X3AwQCuT0UAwQCuWMsAwQCudFsAwQAwgXrAwQB1C9SMA0EAgACMAcDBQMqC01A
MA0GCSqGSIb3DQEBCwUAA4IBAQBaKB+nWDs4jPNMFIIZUDDiA2s6rOg7rkHgAnBN
m6zXzPmKRgNwdOMPswkQKk2ZoEsCibOou1jf0ug45ZOFA/7IGSw+ESHk6PStXwwb
Z8uQzOFPXvtpxIWe0Lr3p+O+wr25JkOOpq4n9JJXWh/tNlqux3xL7HBx/iT6Skff
WJzel6KMFDTGpJO+HcT1fDARxFzd/YprmWMy67ZMrr90+TQ3ZR2FvJSEWVWg0sZU
GKGAYrb+ynCSZSalcN0l90f29LtvWw2b5S4C11+iwSIkBF3pkXF8KkrprXMeqJQj
nACl0TX1Q+sBBkoxi/4D1mq5Rn5jMEx2BKu+k7womqncsyuO
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:08 2025 by rpki-client on console.sobornost.net