Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/bOFdyKGYt7sWLU1gsq7aGbKqPzE.roa
File: bOFdyKGYt7sWLU1gsq7aGbKqPzE.roa (raw, json)
Hash identifier: /EpNmZsM3PWaSS9OMV6AElXPgKu0FZYu6hRjyr+Tak0=
Subject key identifier: 6C:E1:5D:C8:A1:98:B7:BB:16:2D:4D:60:B2:AE:DA:19:B2:AA:3F:31
Certificate issuer: /CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Certificate serial: 01943FE7DC01E81424BDEB057A33B2CDDDAB
Authority key identifier: 54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/bOFdyKGYt7sWLU1gsq7aGbKqPzE.roa
Signing time: Tue 07 Jan 2025 08:35:47 +0000
ROA not before: Tue 07 Jan 2025 08:35:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49632
IP address blocks: 188.125.160.0/24 maxlen: 24
188.125.164.0/24 maxlen: 24
188.125.165.0/24 maxlen: 24
188.125.166.0/24 maxlen: 24
188.125.168.0/24 maxlen: 24
188.125.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3f:e7:dc:01:e8:14:24:bd:eb:05:7a:33:b2:cd:dd:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Validity
Not Before: Jan 7 08:35:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ce15dc8a198b7bb162d4d60b2aeda19b2aa3f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8b:ce:bf:dc:69:fa:41:bd:4f:3d:d6:93:ee:
28:ce:e6:cd:7a:3b:7a:f5:18:1b:e7:72:6a:6e:27:
46:6b:a0:77:7a:80:da:e8:55:36:25:a2:17:8c:10:
54:dd:b1:51:d4:54:a6:e8:15:c6:5d:e1:08:a6:a9:
11:b7:95:1f:8a:ba:1e:4d:24:70:8f:66:05:0a:54:
27:02:76:e6:0c:ca:e8:1d:d3:2f:cc:49:70:ff:c6:
80:46:a9:95:79:64:20:af:a4:6e:ba:9f:78:5d:99:
c1:e4:4c:c4:84:e1:16:77:e5:39:e7:cd:af:8b:4c:
fe:20:b4:08:ed:2e:e6:59:70:3a:ef:15:2c:c3:a7:
59:5f:6c:71:57:c1:23:c1:af:27:ec:a8:33:05:f8:
df:7a:8f:b3:ec:35:dc:5e:9c:ed:4f:d8:9d:df:ab:
3e:97:61:ce:07:fc:fd:b8:60:c2:27:65:36:28:34:
a0:77:1f:82:c1:b5:d5:30:f0:fe:c3:e0:c7:d6:43:
91:44:f6:0d:ea:32:e8:77:9a:52:61:4b:33:f4:d9:
42:21:13:75:a4:90:65:9e:9b:a9:d0:68:34:10:24:
5b:bf:04:e4:d9:e8:d5:3e:b4:a3:95:bf:59:16:40:
d5:be:57:e5:aa:02:56:2b:f2:4b:b9:6b:e5:6b:30:
03:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E1:5D:C8:A1:98:B7:BB:16:2D:4D:60:B2:AE:DA:19:B2:AA:3F:31
X509v3 Authority Key Identifier:
keyid:54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/bOFdyKGYt7sWLU1gsq7aGbKqPzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.125.160.0/24
188.125.164.0-188.125.166.255
188.125.168.0/24
188.125.170.0/24
Signature Algorithm: sha256WithRSAEncryption
44:fc:fc:c8:6e:e2:22:b9:1b:fa:c8:91:e9:0d:70:26:a2:27:
65:37:e2:d7:dd:7d:8f:de:f9:76:78:84:01:7a:73:ba:0a:f3:
0f:42:1d:c2:8d:80:94:af:97:28:bb:f1:5e:c2:87:49:73:37:
d5:25:7e:a2:4d:32:43:e9:e8:b4:f0:51:4e:5d:31:5c:4c:9b:
7a:00:07:a5:30:f3:ab:61:dd:89:df:4a:f0:a8:4e:e9:7d:95:
65:26:b4:5a:dd:00:2c:64:df:1f:d2:fb:68:ca:fe:fa:71:bc:
12:2a:63:86:42:29:70:c1:9e:28:57:9a:04:91:d4:c2:02:6c:
bc:77:b5:40:3c:4e:60:ad:d4:d6:f6:d4:02:42:53:47:5d:b8:
63:f1:b9:85:0a:0d:09:e7:21:17:ff:d1:2e:20:f0:1e:11:54:
98:21:72:5c:38:e8:29:57:c9:c6:b5:ee:a4:2c:a0:9b:c4:7a:
ed:91:18:11:01:d1:2e:58:0d:9a:f7:62:3d:5a:19:c1:80:84:
d5:2a:54:ee:9b:7e:2f:e2:9b:cc:7e:dd:f2:0e:a8:fa:18:78:
d9:07:1e:59:16:ca:68:42:75:f3:71:33:c6:76:64:51:2e:27:
9a:45:13:28:0e:31:a3:a7:6d:48:40:a5:90:f8:53:c4:18:26:
47:b4:da:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:16:07 2025 by rpki-client on console.sobornost.net