Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/b1EekpPHczR9SbF16iWNQ3damig.roa
File: b1EekpPHczR9SbF16iWNQ3damig.roa (raw, json)
Hash identifier: Fw8tFU/rOTZrNv9R1o3/Px5yWIdWmaPwzJuJsuMKmH0=
Subject key identifier: 6F:51:1E:92:93:C7:73:34:7D:49:B1:75:EA:25:8D:43:77:5A:9A:28
Certificate issuer: /CN=fbd83efdd9996f8c75e7f4114e466ebf836968ea
Certificate serial: 0194A724AE74B4AC6326111C660C31BFD7F6
Authority key identifier: FB:D8:3E:FD:D9:99:6F:8C:75:E7:F4:11:4E:46:6E:BF:83:69:68:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/b1EekpPHczR9SbF16iWNQ3damig.roa
Signing time: Mon 27 Jan 2025 09:43:06 +0000
ROA not before: Mon 27 Jan 2025 09:43:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48803
IP address blocks: 88.206.160.0/20 maxlen: 24
88.206.176.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a7:24:ae:74:b4:ac:63:26:11:1c:66:0c:31:bf:d7:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd83efdd9996f8c75e7f4114e466ebf836968ea
Validity
Not Before: Jan 27 09:43:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f511e9293c773347d49b175ea258d43775a9a28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:41:ff:fe:a4:b7:64:5f:5a:ad:5f:eb:07:f8:
71:8f:52:d7:8c:55:4a:53:5b:3a:9f:96:05:87:f7:
08:b3:cd:17:c9:67:a3:3a:fd:f4:47:1a:fc:5c:76:
bc:7d:28:3f:a1:91:df:f3:15:98:ee:88:41:e4:52:
e1:3c:aa:5f:11:d4:19:c2:48:a3:0d:7c:d3:4f:fa:
fd:ca:5c:da:89:ee:34:d8:7a:ea:7e:5e:e5:fd:e1:
b6:1b:7d:1c:6c:ab:80:70:c4:22:20:d9:51:77:20:
c6:e7:a1:7f:28:9a:38:e2:76:3b:bb:7b:c0:b9:c9:
c3:69:42:70:9b:35:82:11:de:ab:1d:db:19:34:fc:
98:b4:17:02:4b:9b:f8:97:a1:fd:da:9e:4e:85:73:
52:0a:1b:3f:77:4e:e4:01:da:0b:27:4d:cf:ff:61:
e7:5d:ce:54:ab:26:92:fb:ce:32:79:c7:8a:43:5b:
83:4d:80:f8:57:fd:7e:b8:e4:62:0f:ec:4d:dd:83:
85:8b:28:91:16:5b:64:c1:eb:d5:23:17:8d:e6:ca:
31:d8:bb:00:a8:23:e8:64:e5:02:12:0e:37:52:5f:
d1:af:d1:19:74:a8:b2:33:bf:78:0d:99:06:f4:3f:
5c:74:5f:dd:dc:98:e4:94:cb:66:29:71:74:45:5b:
77:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:51:1E:92:93:C7:73:34:7D:49:B1:75:EA:25:8D:43:77:5A:9A:28
X509v3 Authority Key Identifier:
keyid:FB:D8:3E:FD:D9:99:6F:8C:75:E7:F4:11:4E:46:6E:BF:83:69:68:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/b1EekpPHczR9SbF16iWNQ3damig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.206.160.0-88.206.179.255
Signature Algorithm: sha256WithRSAEncryption
78:cc:f8:21:59:03:d9:34:f2:ec:e1:a6:9e:42:c3:36:28:33:
29:ac:fb:99:77:91:c8:4f:da:a7:ab:44:da:78:36:d1:c1:b3:
e1:f0:3f:b9:ab:c5:28:04:4a:22:31:77:06:23:8f:59:07:6c:
43:7b:34:99:bc:f0:bc:d1:08:fd:e6:4b:82:3d:70:23:ca:7a:
0a:79:0d:78:a8:59:bd:83:53:b7:c0:50:e5:6b:70:c3:31:59:
a4:0f:97:3a:4b:4c:77:59:93:dd:e0:a1:d7:2f:02:e9:14:7f:
62:c1:5a:fc:a9:19:8c:65:bc:93:ee:63:4b:48:31:ea:a4:1b:
9a:ee:5d:24:76:df:a2:e5:b9:6a:3b:fc:49:dd:94:3c:9f:c7:
e6:d4:9c:db:95:b1:39:17:7c:ca:f1:b8:3e:94:3c:5d:72:15:
7d:98:3d:68:2b:04:65:03:da:12:58:b4:84:63:c0:be:c3:6d:
f8:2f:00:13:8b:e8:d7:65:68:0b:41:64:99:c2:9b:9d:f1:ad:
7d:e0:44:bb:be:ac:9f:b0:86:1c:0a:f2:73:b3:84:6e:e5:d9:
39:c9:0e:75:84:a1:42:96:d9:67:b9:cd:b7:82:6a:3e:a1:79:
ed:7c:6f:f8:98:33:2c:44:23:0f:d7:ce:87:83:a5:34:51:c3:
37:19:0f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:31 2025 by rpki-client on console.sobornost.net