Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/G8f0wEXWB1tYR3DKqc9nmveItHs.roa
File: G8f0wEXWB1tYR3DKqc9nmveItHs.roa (raw, json)
Hash identifier: Eof7m/5p0oJEuONscApURb8snCZ0vFtEHLNAHTVJlsY=
Subject key identifier: 1B:C7:F4:C0:45:D6:07:5B:58:47:70:CA:A9:CF:67:9A:F7:88:B4:7B
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0194236A3CF6DFC01947E4D03DD3D7CBC7DD
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/G8f0wEXWB1tYR3DKqc9nmveItHs.roa
Signing time: Wed 01 Jan 2025 19:49:12 +0000
ROA not before: Wed 01 Jan 2025 19:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42198
IP address blocks: 185.115.125.0/24 maxlen: 24
2a06:7246:1::/48 maxlen: 48
2a06:7246:2::/48 maxlen: 48
2a06:7246:3::/48 maxlen: 48
2a06:7246:4::/48 maxlen: 48
2a06:7246:6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:3c:f6:df:c0:19:47:e4:d0:3d:d3:d7:cb:c7:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 19:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1bc7f4c045d6075b584770caa9cf679af788b47b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7c:e4:42:bc:05:04:fd:ba:cd:ba:26:5f:26:
d5:92:4e:c6:43:44:ae:2a:23:66:ae:6c:db:6e:82:
12:da:26:8b:35:9c:6e:04:33:2e:8d:1c:09:48:aa:
d8:f5:9b:57:b9:bf:9a:7a:ba:09:c1:7e:a7:cf:27:
5c:7b:94:a6:c9:8b:50:4a:8f:42:a6:df:a0:d6:95:
96:a1:47:67:62:51:72:f6:d4:b1:15:9b:4c:94:55:
11:ec:52:ed:01:bb:f0:c7:6f:95:34:d0:da:00:1a:
44:a3:16:83:e7:d0:ea:ba:d7:a4:c6:d3:3f:46:4b:
f2:bd:1c:95:65:47:45:1e:e6:b4:73:33:47:1a:f5:
09:ac:15:82:f4:93:2a:32:5f:13:75:27:03:c9:73:
f4:af:68:9c:50:4b:97:29:87:5b:3a:5b:4c:7a:1c:
6e:86:a4:ec:53:b4:a5:28:33:49:35:3a:75:e8:a5:
c9:06:53:cb:37:a7:15:73:0c:e2:a9:23:12:51:f1:
fd:87:1c:63:97:81:a8:db:d7:63:f6:84:5e:ce:44:
36:fc:14:4c:d1:56:f7:19:01:23:5a:2a:36:45:ac:
86:91:6e:ba:19:bc:73:2f:4d:20:ee:36:61:57:d9:
41:14:92:69:f8:6a:b4:4e:cc:fd:29:7d:e7:33:12:
b0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C7:F4:C0:45:D6:07:5B:58:47:70:CA:A9:CF:67:9A:F7:88:B4:7B
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/G8f0wEXWB1tYR3DKqc9nmveItHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.125.0/24
IPv6:
2a06:7246:1::-2a06:7246:4:ffff:ffff:ffff:ffff:ffff
2a06:7246:6::/48
Signature Algorithm: sha256WithRSAEncryption
78:a3:5b:5d:3c:d4:b4:02:d2:99:13:b8:02:0a:82:c7:a9:13:
77:71:fe:74:2d:d3:fe:53:55:ee:2d:21:8b:6c:45:5e:70:6e:
e1:ac:14:2e:d8:6b:89:c4:d7:7c:a9:ff:1c:13:2c:92:33:3f:
c9:a9:a6:58:46:61:54:73:eb:43:b2:87:1b:60:bb:a0:23:75:
25:35:ef:f0:fb:18:3b:36:71:92:fe:54:fb:8c:77:2a:fe:31:
7c:c1:33:71:79:ce:f9:9b:84:4c:6f:0e:4d:4e:f2:bd:81:1d:
74:56:30:ce:fa:51:ab:a1:f1:c2:2b:02:56:32:c1:92:fc:74:
6a:a1:c2:39:00:73:91:82:92:7a:b7:cb:25:62:fa:10:5a:d3:
a3:d6:2f:19:8b:c2:4e:a4:a8:89:63:02:9e:a5:fe:40:7e:2d:
56:c4:b8:63:05:1f:a8:75:50:dd:5e:26:81:05:ff:a3:c2:f7:
2d:f5:53:af:8b:51:91:fa:db:d7:58:b2:cf:9f:38:d4:aa:55:
6e:a1:e7:08:0f:83:cc:e1:3b:c3:4d:d6:15:e9:c3:ca:78:c7:
7f:56:ae:cb:0a:9d:9f:31:6b:15:e3:32:6d:c4:78:15:ca:e1:
a0:88:6c:d6:3a:00:83:41:04:0a:d9:f1:e2:a6:ac:ce:0b:a6:
e6:2e:16:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 03:26:25 2025 by rpki-client