Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/1-bEXFjd2XHBdukFCLLuD6UL4BqE.roa
File: 1-bEXFjd2XHBdukFCLLuD6UL4BqE.roa (raw, json)
Hash identifier: 1p5prwmTs6v5eahIbOF3LewhliAFt44o+dPua2cwXss=
Subject key identifier: F9:B1:17:16:37:76:5C:70:5D:BA:41:42:2C:BB:83:E9:42:F8:06:A1
Certificate issuer: /CN=269f4f7143b4067805cba9a40f639732ee7d42e5
Certificate serial: 0194252183CE32B0D5AE6A5AB147DDFBE8F9
Authority key identifier: 26:9F:4F:71:43:B4:06:78:05:CB:A9:A4:0F:63:97:32:EE:7D:42:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jp9PcUO0BngFy6mkD2OXMu59QuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/1-bEXFjd2XHBdukFCLLuD6UL4BqE.roa
Signing time: Thu 02 Jan 2025 03:49:00 +0000
ROA not before: Thu 02 Jan 2025 03:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34574
IP address blocks: 188.64.144.0/23 maxlen: 23
188.64.144.0/24 maxlen: 24
188.64.145.0/24 maxlen: 24
188.64.146.0/24 maxlen: 24
188.64.147.0/24 maxlen: 24
2a00:1120::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:83:ce:32:b0:d5:ae:6a:5a:b1:47:dd:fb:e8:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=269f4f7143b4067805cba9a40f639732ee7d42e5
Validity
Not Before: Jan 2 03:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9b1171637765c705dba41422cbb83e942f806a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6f:60:aa:e5:6e:3a:33:92:a4:f1:12:f3:66:
60:1e:5e:ae:ab:cf:d4:01:3b:5d:72:28:c3:34:24:
9d:93:85:b8:c2:56:a2:69:9d:54:a3:fa:1d:b8:50:
d6:3d:08:83:b0:72:49:19:6c:d1:cf:01:81:5d:4f:
11:31:c7:f0:86:79:71:df:d3:2b:d3:cb:43:5c:f6:
22:87:ba:22:73:fa:9c:f0:39:91:f1:55:3a:d6:40:
0e:67:43:a6:74:6d:7e:1d:75:b3:a2:a2:16:9b:4f:
82:9c:0b:e8:f9:dd:5c:cb:65:71:05:f9:80:39:79:
0c:79:11:4c:49:8a:4c:26:2d:ae:c8:db:7b:65:37:
fb:a9:25:f6:1f:6f:7a:35:94:69:b8:c6:d2:4e:a1:
ab:e0:90:fe:d3:6e:93:24:6a:7d:ac:68:98:e0:b3:
7c:30:02:29:e2:c8:2a:c6:f2:54:f9:91:2e:a1:bc:
87:a1:dd:20:82:ac:3a:e3:11:30:4f:f5:e2:c5:10:
77:7a:c9:42:c6:07:4e:3b:71:4c:ac:ed:54:f5:ff:
f2:a7:75:6a:0f:1e:14:f5:13:e2:0f:dc:29:af:47:
59:7b:92:e1:12:e2:04:a0:75:0d:82:f1:7f:4b:62:
5b:f9:27:cc:c2:6e:6c:1b:23:40:3a:ea:e8:75:82:
a1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B1:17:16:37:76:5C:70:5D:BA:41:42:2C:BB:83:E9:42:F8:06:A1
X509v3 Authority Key Identifier:
keyid:26:9F:4F:71:43:B4:06:78:05:CB:A9:A4:0F:63:97:32:EE:7D:42:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jp9PcUO0BngFy6mkD2OXMu59QuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/1-bEXFjd2XHBdukFCLLuD6UL4BqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c90860-8138-433c-b24f-92c780ca3260/1/Jp9PcUO0BngFy6mkD2OXMu59QuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.64.144.0/22
IPv6:
2a00:1120::/32
Signature Algorithm: sha256WithRSAEncryption
61:85:25:b3:32:60:7a:9c:11:a4:bb:40:cf:7f:2e:41:cf:d7:
81:fa:d5:ca:46:ee:ea:42:39:ce:ef:b5:b0:ab:17:15:6d:4f:
ab:08:b5:97:d5:c3:f8:f9:c3:82:bc:3f:46:ab:8f:60:b8:5f:
26:1a:6d:9d:4f:cf:7f:6b:9f:3f:ad:d2:8f:12:c4:46:74:71:
5f:b3:d2:0f:51:f7:a3:94:9c:e4:0c:70:39:30:67:c2:d5:83:
53:fb:e6:17:7d:9a:bd:4a:63:cb:a4:c1:81:a3:4c:db:80:c5:
69:ff:bb:de:1b:ba:9b:12:6e:bb:e5:31:d8:bb:ff:75:a2:3c:
68:8f:bf:19:aa:2c:00:92:f8:f3:a3:6a:50:7b:da:c4:07:8c:
50:6d:58:fd:92:02:f5:d0:76:22:8c:65:d0:89:a3:53:34:f9:
19:38:c7:a4:17:ce:05:3c:8b:8f:da:5d:6f:52:3b:8f:88:d9:
d9:ff:1e:05:88:ae:7c:83:64:74:10:57:49:7f:c0:e0:2c:3b:
3c:19:13:9a:3c:89:1e:0a:77:92:38:21:3f:b6:10:ba:43:62:
b9:15:88:48:38:1d:ed:a3:c9:02:ba:a8:ae:eb:1b:78:fc:02:
b5:a3:5c:92:20:7b:fc:7f:c5:ec:da:7e:71:ef:69:53:71:8f:
f1:4b:99:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:31 2025 by rpki-client on console.sobornost.net