Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/35VpdVY_8NuFOYfjzmVWWyhzXsk.roa
File: 35VpdVY_8NuFOYfjzmVWWyhzXsk.roa (raw, json)
Hash identifier: CgJmD98fn9QOYdCZTYV1jeMz3xtOv6EsoIL1s5N3YEM=
Subject key identifier: DF:95:69:75:56:3F:F0:DB:85:39:87:E3:CE:65:56:5B:28:73:5E:C9
Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial: 0194236A2FA9050D16F2288E5B4B53A50957
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/35VpdVY_8NuFOYfjzmVWWyhzXsk.roa
Signing time: Wed 01 Jan 2025 19:49:09 +0000
ROA not before: Wed 01 Jan 2025 19:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58328
IP address blocks: 188.123.96.0/21 maxlen: 21
188.123.104.0/23 maxlen: 23
188.123.106.0/23 maxlen: 23
188.123.108.0/22 maxlen: 22
188.123.116.0/23 maxlen: 23
188.123.118.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:2f:a9:05:0d:16:f2:28:8e:5b:4b:53:a5:09:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Validity
Not Before: Jan 1 19:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df956975563ff0db853987e3ce65565b28735ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ec:49:c6:bd:0c:c3:d1:77:06:a5:b2:e1:72:
eb:c1:c4:76:f0:92:f6:f7:3a:27:5d:f0:6c:bc:5c:
54:29:33:51:d4:7c:13:02:e1:3b:47:3d:23:ec:cd:
0f:30:86:9f:c8:8f:4e:66:99:94:dc:9d:be:24:20:
e2:a8:ca:63:e9:d6:30:09:a6:ad:e0:d3:6b:2d:9e:
c6:20:ff:6c:bc:f2:a7:fc:40:20:e8:5a:6f:9e:d5:
9b:54:35:2c:b8:2e:6a:30:7c:06:d6:df:2a:84:52:
5b:23:b5:f0:9b:bd:84:e3:a2:d4:e6:cc:fa:6c:e3:
ef:49:94:9e:36:26:48:44:b3:43:09:eb:c3:95:53:
b7:cd:0e:fd:4f:11:4d:d3:30:1e:60:0b:c7:aa:ac:
15:53:6b:fd:1a:d6:1f:10:da:33:90:77:55:31:fd:
0f:38:d9:a8:2a:8b:38:2a:8c:a8:db:cf:2b:1e:54:
0a:69:f1:cb:66:56:70:60:56:84:47:15:65:a5:03:
63:14:3e:18:23:f1:02:26:f1:8a:67:a8:6e:0a:cc:
56:ba:ad:0d:af:06:f9:45:68:38:80:13:36:6d:2c:
09:56:3c:ce:e6:32:da:06:73:87:c5:95:cf:6d:26:
fe:77:75:f7:18:4b:48:c1:74:95:1b:b7:b4:2e:5f:
42:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:95:69:75:56:3F:F0:DB:85:39:87:E3:CE:65:56:5B:28:73:5E:C9
X509v3 Authority Key Identifier:
keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/35VpdVY_8NuFOYfjzmVWWyhzXsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.123.96.0/20
188.123.116.0/22
Signature Algorithm: sha256WithRSAEncryption
96:8e:11:31:7d:85:29:7a:83:54:23:39:48:cc:0a:a7:2e:f2:
1e:3d:68:a7:c1:ae:cb:81:36:ff:ea:ef:8a:7c:3d:18:65:ab:
a9:f0:98:12:c4:5e:0f:35:05:a3:9c:47:e3:59:96:78:b1:97:
ab:54:cd:58:0c:94:2f:5c:70:f5:b3:70:ea:5b:7a:a4:fb:36:
8a:52:4b:5c:45:ca:23:23:33:5f:f4:a5:ac:15:26:6a:02:e4:
82:0c:d0:b0:6d:31:48:3d:0c:8c:d3:d3:a8:63:d2:7e:9a:ee:
50:ec:c8:f3:1a:be:8d:f6:39:6b:7a:c6:38:f6:1f:cc:db:1c:
90:fe:22:fd:7d:df:5b:30:57:c0:bc:1d:ea:d3:14:d9:0c:5d:
ff:ca:65:6c:14:f8:f2:0b:41:e1:8d:b9:8d:48:48:1b:2b:cf:
b3:a8:c5:c4:19:85:0b:cc:45:ca:1f:e8:72:e5:0d:5e:7e:14:
fb:8d:bb:2e:9d:1c:e7:0f:c0:f7:65:93:b0:3c:d3:73:18:4d:
6b:6f:34:22:7c:84:28:e9:d6:4c:a3:dc:34:ab:5f:fb:80:aa:
2a:9d:9e:9d:0c:c6:3f:60:96:1c:6d:e6:58:49:1b:d0:0d:7c:
f7:d4:ed:6a:23:f8:1c:a7:75:e4:64:55:42:ba:0f:74:cb:b4:
6f:3d:e0:ac
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQjai+pBQ0W8iiOW0tTpQlXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3Zjg4MTQwMWFiYWNjODhjOTQxZmRmNzQwZjFhYjE1MzZm
MDVkYmEwHhcNMjUwMTAxMTk0OTA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZjk1Njk3NTU2M2ZmMGRiODUzOTg3ZTNjZTY1NTY1YjI4NzM1ZWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuxJxr0Mw9F3BqWy4XLrwcR28JL2
9zonXfBsvFxUKTNR1HwTAuE7Rz0j7M0PMIafyI9OZpmU3J2+JCDiqMpj6dYwCaat
4NNrLZ7GIP9svPKn/EAg6FpvntWbVDUsuC5qMHwG1t8qhFJbI7Xwm72E46LU5sz6
bOPvSZSeNiZIRLNDCevDlVO3zQ79TxFN0zAeYAvHqqwVU2v9GtYfENozkHdVMf0P
ONmoKos4Koyo288rHlQKafHLZlZwYFaERxVlpQNjFD4YI/ECJvGKZ6huCsxWuq0N
rwb5RWg4gBM2bSwJVjzO5jLaBnOHxZXPbSb+d3X3GEtIwXSVG7e0Ll9CDQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFN+VaXVWP/DbhTmH485lVlsoc17JMB8GA1UdIwQY
MBaAFOf4gUAausyIyUH990DxqxU28F26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNV9pQlFCcTZ6SWpKUWYzM1FQR3JGVGJ3WGJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9mNTUzNGEtYTYxMy00N2JlLWI0MmIt
ZTJmYmMzYTY4ODAwLzEvMzVWcGRWWV84TnVGT1lmanptVldXeWh6WHNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9mNTUzNGEtYTYxMy00N2JlLWI0MmItZTJmYmMzYTY4ODAw
LzEvNV9pQlFCcTZ6SWpKUWYzM1FQR3JGVGJ3WGJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEvHtgAwQC
vHt0MA0GCSqGSIb3DQEBCwUAA4IBAQCWjhExfYUpeoNUIzlIzAqnLvIePWinwa7L
gTb/6u+KfD0YZaup8JgSxF4PNQWjnEfjWZZ4sZerVM1YDJQvXHD1s3DqW3qk+zaK
UktcRcojIzNf9KWsFSZqAuSCDNCwbTFIPQyM09OoY9J+mu5Q7MjzGr6N9jlresY4
9h/M2xyQ/iL9fd9bMFfAvB3q0xTZDF3/ymVsFPjyC0HhjbmNSEgbK8+zqMXEGYUL
zEXKH+hy5Q1efhT7jbsunRznD8D3ZZOwPNNzGE1rbzQifIQo6dZMo9w0q1/7gKoq
nZ6dDMY/YJYcbeZYSRvQDXz31O1qI/gcp3XkZFVCug90y7RvPeCs
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:08 2025 by rpki-client