Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/44fsOPhLBto54i38jO9Qp6LcR34.roa
File: 44fsOPhLBto54i38jO9Qp6LcR34.roa (raw, json)
Hash identifier: q6FqWEqTwKl4W57zhlt+bCI2esmopnN71WRYkbStb/o=
Subject key identifier: E3:87:EC:38:F8:4B:06:DA:39:E2:2D:FC:8C:EF:50:A7:A2:DC:47:7E
Certificate issuer: /CN=3642bbc83e28c103c17d5a201edef5672634dbe8
Certificate serial: 019424B258BB106BF9D65DCDF971B1D14BF1
Authority key identifier: 36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/44fsOPhLBto54i38jO9Qp6LcR34.roa
Signing time: Thu 02 Jan 2025 01:47:35 +0000
ROA not before: Thu 02 Jan 2025 01:47:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211709
IP address blocks: 188.125.162.0/24 maxlen: 24
193.3.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:58:bb:10:6b:f9:d6:5d:cd:f9:71:b1:d1:4b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3642bbc83e28c103c17d5a201edef5672634dbe8
Validity
Not Before: Jan 2 01:47:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e387ec38f84b06da39e22dfc8cef50a7a2dc477e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e7:03:d2:30:86:93:e6:38:44:dd:6b:31:77:
a4:e8:2b:ab:ed:41:bc:30:e0:4d:1b:aa:ef:83:e3:
f2:8d:ec:4e:57:78:31:73:04:ae:83:10:3e:39:58:
b5:4c:a3:a9:22:5d:40:f6:61:47:9a:5c:14:59:9c:
79:de:31:c6:3c:fc:50:9c:5a:0d:e7:df:3b:ed:38:
a5:42:dc:db:e2:8c:a8:dd:fd:20:af:f9:7c:0b:31:
4e:f0:b7:43:cf:bb:29:a7:5f:8a:3c:3c:da:da:fa:
b3:87:74:bb:7c:ac:f6:2b:9e:96:b1:b3:68:74:65:
f1:b7:9e:06:c8:30:08:35:3a:1a:76:46:56:0f:c6:
79:9d:db:d7:cd:34:74:9a:f4:07:52:0b:50:6d:f0:
ca:41:6f:23:02:c0:31:2a:a3:c3:08:34:58:58:44:
89:e0:20:2a:51:0b:5f:f4:ee:9f:26:52:ca:ca:82:
29:75:6f:66:d3:28:6d:61:e1:43:07:f5:82:77:a2:
69:b5:22:61:b8:f3:c8:ff:71:d8:6b:52:de:c4:1f:
50:1f:f2:f6:9b:61:4f:65:c0:0e:9f:7f:96:6f:a6:
1f:00:10:c2:f4:08:0a:c4:55:55:e5:57:b3:aa:c4:
12:ff:ad:a8:b3:8e:6a:cc:2b:40:ee:a2:bd:a7:7d:
ab:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:87:EC:38:F8:4B:06:DA:39:E2:2D:FC:8C:EF:50:A7:A2:DC:47:7E
X509v3 Authority Key Identifier:
keyid:36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/44fsOPhLBto54i38jO9Qp6LcR34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.125.162.0/24
193.3.41.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:e1:af:95:43:cd:ac:85:64:b8:8f:5e:d4:3f:63:bf:88:d8:
e9:84:4b:d6:48:50:bb:3a:d5:0d:29:5a:cf:2f:7f:9b:5b:f7:
f0:6b:4e:91:5b:8a:80:79:33:f8:af:5b:3e:0d:46:21:55:ad:
f6:fd:64:60:dc:2c:57:5b:3a:4e:c7:7d:39:29:a2:72:b7:b1:
68:f1:46:2c:c8:36:e8:6e:73:91:52:3b:d1:d7:a1:a8:0d:15:
b8:72:b0:d3:06:56:80:05:0d:3c:d9:56:56:af:8d:01:0c:f7:
27:ca:ad:3e:a0:f9:bb:9a:c5:cc:33:81:77:59:27:f7:95:e7:
1c:3c:5d:b4:6d:9a:44:e3:9b:23:e4:f4:d2:eb:00:95:d7:01:
fe:2e:17:67:f1:81:3a:7b:e3:79:a5:2e:d0:4f:0a:09:47:ad:
8b:ba:76:b2:47:68:d6:bc:44:1f:85:30:f6:83:c9:ff:f3:de:
ff:a7:cd:03:dc:ee:bb:54:35:6b:e6:a7:fa:46:ec:bc:43:66:
18:b7:d3:d6:2d:e3:4d:a9:04:a4:f3:09:7c:b3:9b:66:2d:d7:
6e:b5:7d:ce:c9:b1:39:13:b0:aa:27:1f:86:f7:8d:18:f8:bb:
0f:69:5e:2b:12:ff:86:71:9a:f8:ac:95:22:f5:24:46:7a:e1:
dd:a6:6a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:09 2025 by rpki-client on console.sobornost.net