Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/W8VYUTscWXm_5fPXK391Lev4Y8I.roa
File: W8VYUTscWXm_5fPXK391Lev4Y8I.roa (raw, json)
Hash identifier: jqzmOKHuREPVfrtcJ/0te/zL0kTBbKMBx+WS1zBrGeg=
Subject key identifier: 5B:C5:58:51:3B:1C:59:79:BF:E5:F3:D7:2B:7F:75:2D:EB:F8:63:C2
Certificate issuer: /CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Certificate serial: 0194CAE4B9D499AC13D4A723FD7E753E26CC
Authority key identifier: 54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/W8VYUTscWXm_5fPXK391Lev4Y8I.roa
Signing time: Mon 03 Feb 2025 08:19:34 +0000
ROA not before: Mon 03 Feb 2025 08:19:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49632
IP address blocks: 188.125.160.0/24 maxlen: 24
188.125.166.0/24 maxlen: 24
188.125.168.0/24 maxlen: 24
188.125.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ca:e4:b9:d4:99:ac:13:d4:a7:23:fd:7e:75:3e:26:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Validity
Not Before: Feb 3 08:19:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5bc558513b1c5979bfe5f3d72b7f752debf863c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:55:d8:80:f3:0e:4b:20:a8:1d:66:d9:13:fc:
2d:41:9e:f0:90:55:d9:96:43:a9:67:85:22:cc:44:
61:57:ec:3e:81:b4:07:38:ec:b1:6c:df:d1:3e:d5:
ec:45:0e:dd:d5:47:6b:cb:c9:a8:f3:77:e9:40:f9:
39:52:b6:96:24:c5:34:44:4b:fc:07:24:6c:e4:8c:
b5:f7:9a:d5:32:94:c7:eb:29:38:ca:18:72:fb:f6:
dc:5b:cf:b4:52:c9:0e:fd:e4:f5:0c:97:ea:6e:c9:
a9:53:4b:1e:d2:c5:0b:53:0a:12:16:72:5e:d7:05:
83:30:ff:75:c6:47:9e:eb:40:db:d7:e4:cf:06:30:
78:42:a6:30:96:c8:0a:88:6a:ba:b1:08:3e:d8:74:
b8:d8:d2:82:c6:4b:b7:9c:91:fd:f2:eb:98:17:1c:
de:73:33:7c:80:d8:f8:35:54:2d:08:51:45:e1:9d:
f2:d2:02:1c:cd:83:ab:cb:d7:5b:3f:88:0d:52:02:
33:d6:42:b8:d7:6d:5e:64:27:e9:96:9c:16:81:0f:
2a:8b:d1:25:c1:1a:a1:d2:be:20:53:a1:6d:21:56:
45:cf:a0:94:11:83:08:da:a8:83:8a:43:03:a3:51:
1a:0d:15:70:84:de:b4:74:47:79:74:14:8f:3d:ad:
17:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C5:58:51:3B:1C:59:79:BF:E5:F3:D7:2B:7F:75:2D:EB:F8:63:C2
X509v3 Authority Key Identifier:
keyid:54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/W8VYUTscWXm_5fPXK391Lev4Y8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.125.160.0/24
188.125.166.0/24
188.125.168.0/24
188.125.170.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:e6:aa:8e:53:40:21:fa:76:c9:d2:6f:d0:45:b4:c3:14:f6:
c1:4d:8f:02:8c:91:db:8a:cb:37:ee:36:12:d2:8e:0b:38:1f:
6e:4f:aa:3f:85:e1:1a:a2:db:81:70:43:b4:90:be:75:a8:95:
af:06:65:eb:88:fb:b6:3c:2a:92:e9:3c:0e:df:04:3d:2d:52:
87:48:e3:1a:e8:7f:bc:9e:3d:2f:16:48:b1:e4:d4:ca:1a:89:
6d:bd:aa:e2:26:1d:81:b9:01:52:dc:ac:2f:8e:8e:a4:09:86:
a0:11:b9:db:97:3b:c8:6b:c7:d9:ce:b6:68:f9:07:c3:60:14:
62:20:92:9e:8a:d3:a2:bf:b4:45:67:dc:bc:c6:00:66:d7:38:
3c:89:3a:c4:fd:9a:1a:76:e2:1c:54:fe:c6:ec:cd:2f:ec:76:
a6:a0:62:d0:0f:89:4e:64:6e:8f:12:17:91:08:74:21:fc:76:
14:91:97:3a:51:83:80:a5:e3:c8:85:05:3f:52:69:db:20:23:
eb:94:89:b2:f9:2d:fb:b3:90:71:9f:96:68:5c:eb:6a:b3:a5:
a0:c0:1f:82:d1:bc:54:d0:ab:fb:70:05:8a:a2:ab:31:9b:69:
1c:2c:14:91:94:e6:59:01:44:09:d5:11:99:73:84:17:56:19:
4e:a9:1a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:33 2025 by rpki-client on console.sobornost.net