Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/doq0g_q616KoQiCYhBpjnY3GXAI.roa
File: doq0g_q616KoQiCYhBpjnY3GXAI.roa (raw, json)
Hash identifier: 2NaVQRnf2IQ50I0pWc2BZKlLLETET7Nu4U+ng9RipiU=
Subject key identifier: 76:8A:B4:83:FA:BA:D7:A2:A8:42:20:98:84:1A:63:9D:8D:C6:5C:02
Certificate issuer: /CN=b466ac0a49255283cd53066971cd7b3dfe2a3ce8
Certificate serial: 019425212055AD74CCE45B16E119BDA5A0CB
Authority key identifier: B4:66:AC:0A:49:25:52:83:CD:53:06:69:71:CD:7B:3D:FE:2A:3C:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGasCkklUoPNUwZpcc17Pf4qPOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/doq0g_q616KoQiCYhBpjnY3GXAI.roa
Signing time: Thu 02 Jan 2025 03:48:35 +0000
ROA not before: Thu 02 Jan 2025 03:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48101
IP address blocks: 37.25.44.0/24 maxlen: 24
37.25.45.0/24 maxlen: 24
37.25.46.0/23 maxlen: 23
91.151.240.0/20 maxlen: 22
91.228.232.0/23 maxlen: 24
91.228.234.0/24 maxlen: 24
95.166.0.0/18 maxlen: 21
98.96.160.0/20 maxlen: 23
134.19.192.0/22 maxlen: 22
134.19.196.0/22 maxlen: 23
134.65.128.0/21 maxlen: 21
134.65.136.0/22 maxlen: 22
134.65.140.0/22 maxlen: 22
134.65.144.0/22 maxlen: 22
134.65.148.0/22 maxlen: 22
134.65.152.0/21 maxlen: 21
176.20.128.0/18 maxlen: 21
185.16.160.0/22 maxlen: 24
185.122.192.0/22 maxlen: 22
199.15.232.0/22 maxlen: 22
199.15.236.0/24 maxlen: 24
199.15.237.0/24 maxlen: 24
199.15.238.0/24 maxlen: 24
199.15.239.0/24 maxlen: 24
2a04:200::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:20:55:ad:74:cc:e4:5b:16:e1:19:bd:a5:a0:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b466ac0a49255283cd53066971cd7b3dfe2a3ce8
Validity
Not Before: Jan 2 03:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=768ab483fabad7a2a8422098841a639d8dc65c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:33:f0:86:ff:83:62:ee:d5:bc:3a:01:a1:29:
2c:cc:06:04:47:fc:a3:97:b7:4f:8c:89:98:85:60:
8e:f6:d9:f2:ed:c2:99:e3:98:ab:ff:49:9b:d0:f3:
ea:34:e9:2c:0d:06:2e:2e:13:88:8e:b5:31:1f:fe:
a6:a7:d7:c7:54:c3:5e:e1:05:9a:67:22:b0:8b:8e:
d8:62:25:04:0a:9d:29:41:59:63:70:cc:9f:5e:aa:
e4:a2:b8:00:b6:02:38:1c:b2:66:07:59:67:bd:fe:
b1:40:15:1f:70:cd:90:7b:b9:b5:99:fd:0a:6e:76:
72:5c:a7:7a:00:d8:24:35:30:7d:5e:34:6a:4b:db:
34:3c:06:83:73:88:54:7f:bb:70:fe:4a:11:e8:8e:
02:2f:18:3c:11:19:78:cd:56:87:6f:61:3b:a0:1d:
db:c8:09:30:e5:4e:ab:cf:0d:96:ec:5b:1b:de:51:
0f:c0:6f:c2:27:74:5b:51:fd:a9:8e:ce:78:34:78:
ce:08:7b:b6:07:84:c8:6d:0b:2c:c1:7e:85:fc:6d:
53:60:5d:af:5e:d4:15:85:4a:c6:f8:0e:bc:82:af:
7e:71:45:42:23:a8:ed:06:38:c2:35:d8:88:6f:83:
08:c3:5e:c4:e3:78:4d:e6:af:72:8e:e1:b6:a3:d3:
49:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:8A:B4:83:FA:BA:D7:A2:A8:42:20:98:84:1A:63:9D:8D:C6:5C:02
X509v3 Authority Key Identifier:
keyid:B4:66:AC:0A:49:25:52:83:CD:53:06:69:71:CD:7B:3D:FE:2A:3C:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGasCkklUoPNUwZpcc17Pf4qPOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/doq0g_q616KoQiCYhBpjnY3GXAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.25.44.0/22
91.151.240.0/20
91.228.232.0-91.228.234.255
95.166.0.0/18
98.96.160.0/20
134.19.192.0/21
134.65.128.0/19
176.20.128.0/18
185.16.160.0/22
185.122.192.0/22
199.15.232.0/21
IPv6:
2a04:200::/29
Signature Algorithm: sha256WithRSAEncryption
94:b1:0f:f2:22:7d:1b:1d:71:3d:0a:69:0c:bf:5c:66:e7:48:
98:6e:52:0e:0b:a8:05:01:40:29:77:63:66:70:05:02:39:72:
65:1f:eb:2e:e8:f6:dd:30:8d:44:8e:a4:c6:ce:7b:25:da:e5:
6e:d4:1b:1b:0b:5a:8b:0b:e9:69:2a:67:db:a0:f9:1c:5e:32:
7d:bc:51:1c:3e:2d:6f:8a:76:26:3b:5c:b4:85:a0:9b:e2:eb:
25:0b:2c:0e:29:aa:2c:ac:42:a5:32:71:90:9e:5c:2a:18:46:
33:e2:73:e8:ac:ec:2e:73:8d:df:cd:c5:a2:5b:4a:99:ce:8a:
48:ce:e4:0c:e3:05:19:03:a3:8b:5e:a1:34:83:e8:ab:57:52:
50:da:e2:05:b3:0b:44:2b:e8:45:4a:71:ce:06:aa:c2:12:9f:
05:7c:f6:c9:26:c0:3e:87:6e:68:78:c6:c6:52:7f:84:fa:35:
e6:b9:a0:08:12:71:e2:b6:cf:b6:ce:7e:6a:21:f3:a6:be:10:
92:2b:0a:0f:80:c5:22:92:2f:ad:a4:0e:a4:30:c2:b3:66:3e:
7a:b0:3b:95:c2:ba:3a:6a:25:0b:f6:58:4d:e4:61:7f:d2:e8:
b9:7b:b0:09:bf:64:45:c3:c6:4d:0a:12:39:6e:50:49:3f:fc:
27:6f:b7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:35:25 2025 by rpki-client