Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/DTQoB3Vu52dyTKsn38xXSwYIlQ0.roa
File: DTQoB3Vu52dyTKsn38xXSwYIlQ0.roa (raw, json)
Hash identifier: ZdFCYWIasaf//f4zgLVM9d1VQcq8sWh/cpG9mNzIlnw=
Subject key identifier: 0D:34:28:07:75:6E:E7:67:72:4C:AB:27:DF:CC:57:4B:06:08:95:0D
Certificate issuer: /CN=cf4a717f8fa1bb0359274223acdae22b70e66bec
Certificate serial: 01942068649D28B0DC56A3D3EBEA769799EC
Authority key identifier: CF:4A:71:7F:8F:A1:BB:03:59:27:42:23:AC:DA:E2:2B:70:E6:6B:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0pxf4-huwNZJ0IjrNriK3Dma-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/DTQoB3Vu52dyTKsn38xXSwYIlQ0.roa
Signing time: Wed 01 Jan 2025 05:48:19 +0000
ROA not before: Wed 01 Jan 2025 05:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20485
IP address blocks: 188.168.34.0/23 maxlen: 23
188.168.60.0/22 maxlen: 22
188.168.68.0/23 maxlen: 23
188.168.80.0/21 maxlen: 21
188.168.88.0/22 maxlen: 22
188.168.100.0/22 maxlen: 22
188.168.136.0/22 maxlen: 22
188.168.138.0/23 maxlen: 23
188.168.184.0/23 maxlen: 23
188.168.186.0/24 maxlen: 24
188.168.208.0/22 maxlen: 22
188.168.248.0/21 maxlen: 21
188.244.192.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:64:9d:28:b0:dc:56:a3:d3:eb:ea:76:97:99:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf4a717f8fa1bb0359274223acdae22b70e66bec
Validity
Not Before: Jan 1 05:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d342807756ee767724cab27dfcc574b0608950d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:70:3b:46:0f:ce:c0:8a:10:26:77:7a:48:3f:
fb:71:36:d5:e1:2e:5d:61:73:f1:74:a2:4a:c2:20:
af:fc:6a:a4:4f:71:c3:0d:a0:c7:63:41:ef:1d:f3:
28:75:34:ea:1a:26:f5:fb:ce:88:8c:eb:7d:4d:7f:
95:4e:1d:a7:e6:c4:eb:41:fe:28:06:8c:b4:0b:8e:
b0:a2:fe:a7:b9:3c:f4:b7:ca:ee:f8:65:d7:5a:a9:
8b:f8:0f:f3:9d:09:6f:56:37:f6:69:23:24:08:fb:
71:f2:4a:b1:04:6e:75:ab:64:0e:fb:d2:74:ac:5a:
14:ce:71:b9:05:76:33:48:2e:05:68:b0:74:e2:91:
33:e1:6f:9a:9b:26:3f:23:29:f9:3b:d1:dc:59:29:
a8:5f:6a:77:22:3c:c5:d6:13:5b:62:93:95:bf:25:
35:f4:d9:8a:39:fc:b1:e2:92:19:fc:0e:a2:56:d7:
8d:7e:7b:0d:30:ef:94:8b:33:2d:c1:fc:6b:63:84:
85:bd:af:4d:2f:ec:b3:ba:be:0c:fc:0b:b1:7f:60:
54:f2:b1:aa:65:88:55:08:52:ab:86:9f:22:dc:4d:
62:b0:14:bc:44:1c:8a:b8:c7:b8:7d:1e:d3:cc:85:
4a:07:e3:05:dd:4a:10:42:47:ad:f4:00:5d:f2:ce:
7f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:34:28:07:75:6E:E7:67:72:4C:AB:27:DF:CC:57:4B:06:08:95:0D
X509v3 Authority Key Identifier:
keyid:CF:4A:71:7F:8F:A1:BB:03:59:27:42:23:AC:DA:E2:2B:70:E6:6B:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0pxf4-huwNZJ0IjrNriK3Dma-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/DTQoB3Vu52dyTKsn38xXSwYIlQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.168.34.0/23
188.168.60.0/22
188.168.68.0/23
188.168.80.0-188.168.91.255
188.168.100.0/22
188.168.136.0/22
188.168.184.0-188.168.186.255
188.168.208.0/22
188.168.248.0/21
188.244.192.0/20
Signature Algorithm: sha256WithRSAEncryption
6e:27:bd:91:09:dd:04:2f:28:6c:76:04:e5:cd:2c:9e:a1:ff:
3d:80:d0:59:cb:c6:b3:a7:23:ef:e4:32:b7:e8:5f:0e:bc:cc:
9b:b8:19:59:35:7f:8a:22:b2:9c:2b:43:2f:0d:e7:69:f7:53:
8a:01:7e:d5:8e:4f:fc:32:c1:38:a5:20:9a:aa:44:0c:1f:ec:
5d:a1:20:b6:02:ee:10:8e:0f:00:33:93:1d:d3:6b:e4:6b:63:
49:3a:7d:86:87:98:1e:47:a8:1d:82:2e:85:17:de:3e:31:32:
f4:ce:5f:7a:55:75:be:d6:ca:fe:d1:4f:37:d9:ff:16:9d:7b:
5d:a9:26:2d:5b:1e:b4:ce:da:9c:53:c0:5b:cc:cc:09:b0:26:
45:02:d0:fc:11:cc:45:ab:37:36:7f:c9:db:ae:b9:83:c3:5d:
fb:55:50:0d:af:77:85:a8:ef:72:30:f3:89:bd:59:0d:00:87:
0d:f7:83:b9:2e:a5:1b:82:0d:37:ad:3b:96:85:77:1f:c1:39:
30:89:d2:1c:1a:b8:0b:87:02:66:06:54:fc:75:a7:a3:a0:b3:
72:cc:a2:42:2f:85:7a:dc:b9:65:e6:b7:2d:3e:c1:df:0d:3d:
10:69:b1:fe:d6:88:f7:a7:88:d3:71:a3:20:38:ab:ef:c4:3b:
04:8e:a8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:31 2025 by rpki-client on console.sobornost.net