Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/8ia-FfbPiHzFeisz5Ltz_iH4NuE.roa
File: 8ia-FfbPiHzFeisz5Ltz_iH4NuE.roa (raw, json)
Hash identifier: 2vUluYbn/ZjPa8MjPMnro3n0N0IitO4q9I7893CE2pw=
Subject key identifier: F2:26:BE:15:F6:CF:88:7C:C5:7A:2B:33:E4:BB:73:FE:21:F8:36:E1
Certificate issuer: /CN=b5160326be7e5cdc35b5c036441163cd25a4974d
Certificate serial: 019422FC0A6EDBF4A06806B459B9D6326D55
Authority key identifier: B5:16:03:26:BE:7E:5C:DC:35:B5:C0:36:44:11:63:CD:25:A4:97:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRYDJr5-XNw1tcA2RBFjzSWkl00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/8ia-FfbPiHzFeisz5Ltz_iH4NuE.roa
Signing time: Wed 01 Jan 2025 17:48:50 +0000
ROA not before: Wed 01 Jan 2025 17:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206374
IP address blocks: 185.188.132.0/24 maxlen: 24
185.188.133.0/24 maxlen: 24
2a0b:c480::/32 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:0a:6e:db:f4:a0:68:06:b4:59:b9:d6:32:6d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5160326be7e5cdc35b5c036441163cd25a4974d
Validity
Not Before: Jan 1 17:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f226be15f6cf887cc57a2b33e4bb73fe21f836e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6a:51:09:f6:f0:ec:e3:ba:33:b1:2a:6f:73:
15:c4:f2:c9:5e:28:e0:0d:cb:f1:83:01:ca:17:30:
62:09:90:dc:15:86:3c:cd:22:8f:12:be:41:8a:b7:
ca:39:de:12:fa:31:4a:7a:3d:51:a4:2d:45:b5:eb:
c6:f8:82:4d:cb:98:a6:d9:83:94:42:d2:17:30:d2:
1b:a3:79:8a:5b:93:f2:c2:73:17:fd:dc:fb:b3:f5:
dc:17:80:66:3a:d6:d7:1e:80:56:f7:74:86:a2:46:
7a:7b:12:27:52:58:cf:b3:d3:75:8d:eb:be:b0:75:
d6:71:25:a3:0d:61:b5:88:61:0e:7b:25:95:1f:d5:
8a:67:7a:09:a7:0a:f2:7c:07:b4:7e:49:63:8d:c7:
66:68:56:88:0c:77:81:4f:8b:05:ae:bb:15:4c:ec:
75:17:1f:6d:05:a8:fa:e3:2a:40:0c:17:4f:90:c6:
e5:63:ef:96:eb:0a:04:f4:cd:dc:b2:89:3e:ed:a2:
14:4e:1a:66:31:1b:5f:4a:d0:dc:7c:2d:dd:14:c5:
55:1d:24:f4:7a:43:d7:b7:5e:73:4e:79:d8:66:30:
0d:ae:38:3c:4e:0c:0e:09:b2:bc:60:bf:e8:1f:1b:
d9:af:cd:aa:8c:4a:9b:13:1d:22:ec:74:7c:42:ea:
a9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:26:BE:15:F6:CF:88:7C:C5:7A:2B:33:E4:BB:73:FE:21:F8:36:E1
X509v3 Authority Key Identifier:
keyid:B5:16:03:26:BE:7E:5C:DC:35:B5:C0:36:44:11:63:CD:25:A4:97:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRYDJr5-XNw1tcA2RBFjzSWkl00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/8ia-FfbPiHzFeisz5Ltz_iH4NuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.132.0/23
IPv6:
2a0b:c480::/32
Signature Algorithm: sha256WithRSAEncryption
13:1b:bb:0d:71:4a:71:07:90:13:d7:87:b3:95:bc:c0:df:32:
51:c8:c2:0b:ca:0e:a0:e2:20:84:50:8a:5f:96:f9:0c:3b:db:
32:1f:37:09:72:f7:28:67:6e:58:43:f4:b0:17:40:2f:44:ae:
51:02:88:35:55:c8:04:9e:08:bc:85:8e:bd:79:c5:8a:a2:66:
a2:60:45:de:da:48:e6:1d:42:dd:d8:5f:c9:37:5f:55:bd:34:
09:d7:56:48:d7:7f:27:ef:46:03:a8:ff:35:01:7d:31:90:26:
f4:c1:7a:a3:4f:58:d6:d7:e8:eb:89:61:a2:dd:c3:f3:33:ae:
28:45:ab:b3:8e:49:82:c1:7b:35:52:7d:09:b5:a3:bc:a6:42:
23:12:62:a5:11:ff:00:e6:2f:1a:fa:4e:2f:85:f8:57:4b:30:
40:8e:48:35:b1:f8:e2:2c:de:65:51:99:18:96:b8:d0:57:ab:
26:3e:f8:2a:79:5d:a0:53:c7:f8:b8:d2:67:81:e7:a9:e5:dc:
1b:d5:69:e5:b2:f5:18:76:89:b8:a5:5f:09:d1:d1:fa:5b:1d:
9d:77:82:38:ea:25:d7:e8:0e:42:68:2d:57:2f:33:f8:a1:7e:
11:06:34:fc:fd:78:d2:7f:e1:b6:33:f4:6f:de:f8:94:c2:19:
fa:ce:ef:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:38 2025 by rpki-client on console.sobornost.net