Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/p3q-BDwRqsq597BmScWC04Uizbg.roa
File: p3q-BDwRqsq597BmScWC04Uizbg.roa (raw, json)
Hash identifier: vEfpkI+83ThIFnHcYAP8l+1vWWpuU+kEjWNLTSj4mUg=
Subject key identifier: A7:7A:BE:04:3C:11:AA:CA:B9:F7:B0:66:49:C5:82:D3:85:22:CD:B8
Certificate issuer: /CN=5dc6245ca820899d7eb4140302c21041b5dbca06
Certificate serial: 0194266C470D0B98DEE4C8C0CE84ADD55A80
Authority key identifier: 5D:C6:24:5C:A8:20:89:9D:7E:B4:14:03:02:C2:10:41:B5:DB:CA:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcYkXKggiZ1-tBQDAsIQQbXbygY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/p3q-BDwRqsq597BmScWC04Uizbg.roa
Signing time: Thu 02 Jan 2025 09:50:17 +0000
ROA not before: Thu 02 Jan 2025 09:50:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 38984
IP address blocks: 185.23.228.0/22 maxlen: 22
185.23.228.0/23 maxlen: 23
185.23.230.0/24 maxlen: 24
185.23.231.0/24 maxlen: 24
188.65.232.0/21 maxlen: 21
188.65.232.0/22 maxlen: 22
188.65.236.0/23 maxlen: 23
188.65.238.0/23 maxlen: 23
195.135.236.0/22 maxlen: 22
195.135.236.0/24 maxlen: 24
195.135.237.0/24 maxlen: 24
195.135.238.0/24 maxlen: 24
195.135.239.0/24 maxlen: 24
2a03:7f00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:47:0d:0b:98:de:e4:c8:c0:ce:84:ad:d5:5a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc6245ca820899d7eb4140302c21041b5dbca06
Validity
Not Before: Jan 2 09:50:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a77abe043c11aacab9f7b06649c582d38522cdb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:77:48:69:6f:d6:a1:3f:0a:ba:ba:37:91:75:
28:fe:ef:bc:53:7e:ef:0e:9b:68:7e:48:85:de:0b:
7d:52:53:e2:f9:4a:5c:a5:22:90:e7:d3:2c:17:e9:
7f:d4:8a:76:4d:8d:f7:c5:b1:1f:33:6d:74:a3:20:
aa:8d:9f:c1:6c:9e:ab:7b:12:54:92:66:e6:48:2e:
fd:6f:b6:df:91:1a:2a:19:42:26:1b:00:2d:66:8c:
6d:25:e9:56:56:8b:29:ec:a0:81:4e:42:fd:f1:35:
92:61:18:fa:75:48:3e:f1:de:f7:51:17:ce:c3:f2:
20:4d:37:78:0e:ed:b4:17:2e:3f:66:e1:b9:a2:e7:
45:63:d9:2a:c4:8c:56:70:0e:a4:a4:36:13:d1:70:
be:e2:da:24:b7:16:17:78:fb:ea:87:0e:c3:ab:20:
88:41:fa:40:09:d5:a1:21:f6:ef:a4:a4:1a:3b:66:
50:7f:d1:3b:52:fc:03:33:01:79:53:4b:31:62:61:
e9:d9:0d:be:76:cd:e3:13:71:49:fe:e8:19:71:49:
3d:4c:28:1a:2f:b2:19:f3:2c:cc:97:ec:31:92:b5:
e0:7c:b8:52:16:a6:03:66:7a:14:22:f9:b5:a2:e2:
a1:c7:7d:94:a9:cb:bb:ed:22:b9:ab:a0:01:ed:9e:
fd:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:7A:BE:04:3C:11:AA:CA:B9:F7:B0:66:49:C5:82:D3:85:22:CD:B8
X509v3 Authority Key Identifier:
keyid:5D:C6:24:5C:A8:20:89:9D:7E:B4:14:03:02:C2:10:41:B5:DB:CA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcYkXKggiZ1-tBQDAsIQQbXbygY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/p3q-BDwRqsq597BmScWC04Uizbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.228.0/22
188.65.232.0/21
195.135.236.0/22
IPv6:
2a03:7f00::/32
Signature Algorithm: sha256WithRSAEncryption
36:ac:e1:d3:7b:e4:17:f3:e7:f9:5a:93:62:a1:bb:e0:48:81:
35:45:15:cf:e2:62:1c:5e:e9:54:7f:bc:5d:23:33:fa:13:c3:
d9:c5:62:8c:6a:c4:9a:55:6f:a7:86:87:b5:84:b0:b7:f6:33:
07:fe:2b:b8:69:f4:bb:a6:1f:3c:34:0a:d6:a0:11:65:c5:7d:
80:91:51:23:7e:77:6d:ef:07:ed:fa:c0:23:53:02:74:1d:b2:
70:70:71:8b:c8:84:4d:8c:3d:db:7f:ef:61:31:c0:f7:fd:59:
a0:67:c7:70:14:05:00:1f:be:a7:66:d7:60:fd:b5:96:a2:d3:
fa:45:1f:aa:7a:1d:5d:24:ab:21:22:60:07:5a:16:e1:12:24:
92:9f:62:d5:b4:48:51:2c:f3:54:a4:e0:46:2d:83:5d:86:e5:
be:87:94:34:80:af:10:e4:79:4c:cf:32:62:26:e5:ef:bc:6e:
57:57:70:6a:7d:a3:e2:9b:cf:d2:fe:6d:d7:55:b4:12:9e:c8:
46:24:f5:8f:8c:6c:1c:35:c6:af:50:d8:cb:11:6f:76:9b:27:
fe:cb:03:6f:1a:fc:94:05:93:0f:13:57:5d:b8:2a:7f:7a:10:
dd:43:d5:9e:e9:85:a5:5f:11:dc:dd:4c:aa:cf:29:ea:82:c3:
a2:49:17:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:25 2025 by rpki-client on console.sobornost.net