Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/1-xYWEWhRA8nM0__wgU5vRp_QcU.roa
File: 1-xYWEWhRA8nM0__wgU5vRp_QcU.roa (raw, json)
Hash identifier: bnYzR+tYP6QenME6qvGbnZ7/wPK7R1RpQJzzDie5Khc=
Subject key identifier: D7:EC:58:58:45:A1:44:0F:27:33:4F:FF:C2:05:39:BD:1A:7F:41:C5
Certificate issuer: /CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Certificate serial: 0194CAE4B9841741C57079644D050FA2B915
Authority key identifier: 54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/1-xYWEWhRA8nM0__wgU5vRp_QcU.roa
Signing time: Mon 03 Feb 2025 08:19:34 +0000
ROA not before: Mon 03 Feb 2025 08:19:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9121
IP address blocks: 188.125.160.0/24 maxlen: 24
188.125.161.0/24 maxlen: 24
188.125.163.0/24 maxlen: 24
188.125.166.0/24 maxlen: 24
188.125.167.0/24 maxlen: 24
188.125.168.0/24 maxlen: 24
188.125.169.0/24 maxlen: 24
188.125.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ca:e4:b9:84:17:41:c5:70:79:64:4d:05:0f:a2:b9:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Validity
Not Before: Feb 3 08:19:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d7ec585845a1440f27334fffc20539bd1a7f41c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3e:fe:80:8a:db:1d:52:66:0d:59:b0:7d:2a:
c8:1c:fe:ce:e5:84:eb:49:f8:1d:31:0d:80:44:bc:
0c:c8:e3:f3:61:4d:83:f6:b1:6e:da:d8:82:72:8f:
a3:f6:3c:85:f4:b0:ea:35:ac:51:8c:b0:38:b8:12:
90:c0:ac:bf:d6:ba:38:80:83:ac:60:9a:bc:be:e2:
dd:01:5f:80:f9:d9:d8:46:05:61:54:9d:38:07:57:
7e:65:aa:04:db:85:17:7f:f1:01:77:08:62:61:af:
97:ed:90:47:d5:92:01:97:15:74:f3:d7:59:03:89:
7f:02:db:e0:a0:f2:52:49:b0:8d:3a:f9:b1:3c:2b:
7d:e9:c2:4a:de:aa:e3:45:62:c6:5b:af:b5:ff:30:
36:46:b8:a7:e6:2d:4f:97:cd:94:f1:a8:bc:76:6d:
16:f6:a0:f0:3e:82:2b:02:60:aa:36:2d:12:21:c5:
0d:9b:b0:f7:5f:60:2a:55:5b:7c:3a:07:29:a8:a1:
79:72:a2:f1:39:4f:90:31:30:70:65:92:95:f2:51:
58:6f:2f:55:55:b0:78:b0:06:27:48:a5:bd:f4:b0:
cd:fa:a7:79:56:66:c1:37:f1:12:58:c7:c8:46:12:
8f:30:c4:c9:4a:92:ff:89:40:51:15:1a:b2:3b:12:
98:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:EC:58:58:45:A1:44:0F:27:33:4F:FF:C2:05:39:BD:1A:7F:41:C5
X509v3 Authority Key Identifier:
keyid:54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/1-xYWEWhRA8nM0__wgU5vRp_QcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.125.160.0/23
188.125.163.0/24
188.125.166.0-188.125.170.255
Signature Algorithm: sha256WithRSAEncryption
a5:fb:67:96:7e:df:7d:73:ff:f1:4a:a7:ef:09:9c:a8:6f:73:
3e:65:08:34:94:1e:64:66:16:e6:b7:14:50:0c:67:70:a3:93:
50:31:7b:26:12:2d:7c:33:72:b6:ac:20:0b:16:76:7e:d7:be:
cf:47:08:4e:09:ed:33:3e:7f:33:17:6b:81:db:2b:18:db:fb:
f7:16:e3:3b:9f:3c:29:1f:a0:65:0f:d4:dd:f7:d9:62:9b:1b:
57:77:b0:d0:f4:3e:ea:a4:24:21:03:3e:f8:d9:9f:e1:2f:d5:
85:4f:54:a5:5b:ab:9a:07:60:cf:57:50:69:b7:41:54:f5:5a:
98:63:e4:ce:32:12:d7:44:97:d1:14:3b:b8:15:06:a2:7d:72:
93:88:63:e1:21:1b:a8:63:63:0a:0d:29:00:d7:35:72:09:40:
5b:5f:f6:aa:d4:77:9d:14:3c:78:ef:ae:e5:04:16:15:e5:17:
19:5f:5f:d1:84:58:26:8d:32:e7:51:12:35:cd:33:29:f8:c8:
53:5c:2b:c8:23:88:93:c8:f0:27:fb:6e:2b:05:f9:16:98:af:
71:e8:28:cb:1e:42:51:b2:22:9d:fa:47:d2:2a:7e:df:10:68:
2b:27:73:25:60:31:3d:98:ab:23:c4:f1:11:0d:a7:56:99:40:
98:ec:93:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:10:11 2025 by rpki-client