Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/A_80I8l-ocpCY06eF37LKFTYtjc.roa
File: A_80I8l-ocpCY06eF37LKFTYtjc.roa (raw, json)
Hash identifier: +AOaCtSgkr8g5uGaIXewy8J0yDJiPD9RKEE+8bkd4mM=
Subject key identifier: 03:FF:34:23:C9:7E:A1:CA:42:63:4E:9E:17:7E:CB:28:54:D8:B6:37
Certificate issuer: /CN=c373fae99d651298845d22f89d8d2b2e1d13bc04
Certificate serial: 01961F18F7E0E3797E0A2516CC9E6B2F3D70
Authority key identifier: C3:73:FA:E9:9D:65:12:98:84:5D:22:F8:9D:8D:2B:2E:1D:13:BC:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/A_80I8l-ocpCY06eF37LKFTYtjc.roa
Signing time: Thu 10 Apr 2025 09:47:31 +0000
ROA not before: Thu 10 Apr 2025 09:47:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 188.190.0.0/24 maxlen: 24
188.190.1.0/24 maxlen: 24
188.190.2.0/24 maxlen: 24
188.190.12.0/24 maxlen: 24
188.190.13.0/24 maxlen: 24
188.190.14.0/24 maxlen: 24
188.190.15.0/24 maxlen: 24
188.190.16.0/24 maxlen: 24
188.190.17.0/24 maxlen: 24
188.190.19.0/24 maxlen: 24
188.190.26.0/24 maxlen: 24
188.190.27.0/24 maxlen: 24
188.190.28.0/24 maxlen: 24
188.190.29.0/24 maxlen: 24
188.190.30.0/24 maxlen: 24
188.190.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1f:18:f7:e0:e3:79:7e:0a:25:16:cc:9e:6b:2f:3d:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c373fae99d651298845d22f89d8d2b2e1d13bc04
Validity
Not Before: Apr 10 09:47:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=03ff3423c97ea1ca42634e9e177ecb2854d8b637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b5:cd:49:94:1a:13:85:a7:1d:2d:ca:5e:45:
20:1f:3d:3b:ec:94:e3:21:61:60:d8:1a:11:2b:68:
1a:e6:59:68:2a:33:cc:80:28:c6:5c:99:b1:98:f7:
a2:40:c6:e1:01:11:ca:ff:95:84:15:e2:72:f0:bc:
f7:6c:0b:2d:96:34:72:8f:23:c0:80:09:72:ea:47:
e1:48:48:dd:21:39:8f:a4:e2:cd:bb:89:e7:1f:3a:
30:69:4d:9e:4b:17:3c:48:ee:19:d6:3b:c0:d6:08:
24:d1:61:db:0d:5b:ec:dd:a9:89:23:55:b7:f1:29:
e2:67:e9:f2:00:05:41:3e:75:32:91:ab:db:99:4e:
d1:8f:27:96:a7:92:0d:9f:99:00:94:f8:fa:f4:1a:
14:89:21:26:a4:e3:61:76:be:ea:0b:a0:e4:7a:03:
f7:a4:66:ab:7d:f0:59:0d:a8:1e:ad:64:06:0d:c9:
76:1a:74:f1:ee:00:da:d3:54:51:8e:48:6e:32:06:
12:81:d4:c8:db:9f:81:e2:4b:1e:ca:f5:6a:e0:ce:
b9:5e:5f:d3:9a:05:45:11:8e:74:65:10:8b:f5:f7:
b5:cc:11:48:b0:1a:a7:ab:40:b2:67:1f:29:ac:29:
4b:4f:c4:b3:a9:81:28:e7:da:40:91:1f:11:a3:94:
c2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:FF:34:23:C9:7E:A1:CA:42:63:4E:9E:17:7E:CB:28:54:D8:B6:37
X509v3 Authority Key Identifier:
keyid:C3:73:FA:E9:9D:65:12:98:84:5D:22:F8:9D:8D:2B:2E:1D:13:BC:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/A_80I8l-ocpCY06eF37LKFTYtjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.190.0.0-188.190.2.255
188.190.12.0-188.190.17.255
188.190.19.0/24
188.190.26.0-188.190.31.255
Signature Algorithm: sha256WithRSAEncryption
16:d3:67:91:70:46:8d:62:f2:ae:3d:ba:02:35:b3:e3:8d:ee:
2f:02:99:05:7d:de:c2:ac:de:7e:53:6f:7d:2a:2a:10:d0:82:
d0:17:fe:ce:13:ff:c0:7b:c7:92:d4:3b:bf:ee:d5:67:dd:4b:
8b:6f:a3:4f:5a:3b:aa:b1:5e:69:fa:16:98:f9:f0:35:e7:af:
45:ac:5d:1b:41:db:79:f5:8d:32:2d:c0:5f:d3:c8:07:a9:cc:
f4:7b:0c:91:d5:6c:09:51:bc:48:39:7a:89:7b:91:82:f8:31:
cd:a9:3c:eb:41:76:8b:7a:c0:83:11:e0:01:70:0c:9a:14:72:
f2:9e:98:e0:7f:8f:5a:41:ef:3a:da:1d:1b:cc:ab:8b:32:cc:
f1:90:13:17:19:cc:35:19:55:43:91:76:36:d4:73:e0:cf:f8:
cc:24:c1:ff:b7:40:df:20:49:4f:2d:40:93:3a:93:d2:a8:33:
1a:d6:05:8a:18:d5:7b:73:42:e5:4c:47:4a:d2:fe:f9:7b:0f:
3d:d3:16:0c:8d:25:33:5e:4c:7b:15:10:fc:f7:ee:72:7b:34:
4a:bd:c0:21:c0:ec:f6:a5:10:d8:94:13:54:1d:95:13:13:30:
48:70:df:30:86:f0:22:e6:a1:80:34:5b:37:7a:86:54:af:31:
ce:aa:79:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:35 2025 by rpki-client on console.sobornost.net