Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/tIBVHEbpT3B92jmv17nHEdfPfME.roa
File: tIBVHEbpT3B92jmv17nHEdfPfME.roa (raw, json)
Hash identifier: F4q9q1phtloOjlG43lA2x7BlugORaBByvlUxXUgAa14=
Subject key identifier: B4:80:55:1C:46:E9:4F:70:7D:DA:39:AF:D7:B9:C7:11:D7:CF:7C:C1
Certificate issuer: /CN=7ec5f1896e9a44357c9d78acf37d48f4780520d9
Certificate serial: 01942368F9B31BB5AD86B6F4DFF4368C1841
Authority key identifier: 7E:C5:F1:89:6E:9A:44:35:7C:9D:78:AC:F3:7D:48:F4:78:05:20:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsXxiW6aRDV8nXis831I9HgFINk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/tIBVHEbpT3B92jmv17nHEdfPfME.roa
Signing time: Wed 01 Jan 2025 19:47:49 +0000
ROA not before: Wed 01 Jan 2025 19:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205728
IP address blocks: 185.208.132.0/22 maxlen: 24
2a0b:37c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:f9:b3:1b:b5:ad:86:b6:f4:df:f4:36:8c:18:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec5f1896e9a44357c9d78acf37d48f4780520d9
Validity
Not Before: Jan 1 19:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b480551c46e94f707dda39afd7b9c711d7cf7cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fd:6a:4e:00:1a:53:1e:93:57:48:79:ce:c6:
86:ea:83:93:de:a7:5f:c4:dc:4d:68:1d:de:5c:0e:
96:23:a0:f3:80:26:ff:11:57:49:d6:f2:f1:7c:70:
6d:0e:15:3a:c5:62:bc:81:7b:5a:7a:14:1b:c4:29:
4c:d8:17:b9:f4:20:8a:e8:4b:65:0b:80:e4:09:e5:
1b:44:a5:e1:03:e7:4b:48:33:b3:70:cd:6e:1e:fb:
5f:7e:ee:3c:5f:ea:09:eb:ee:d6:23:c6:52:92:ea:
e7:d0:17:1d:ee:9d:f1:19:ac:91:b7:4c:54:c9:35:
a5:81:68:b8:eb:eb:55:1f:ec:ad:5b:0d:91:c3:42:
ce:6e:b2:99:5f:95:f6:1c:de:a3:e7:86:c3:e3:1d:
ae:a4:5c:d3:c9:3f:f6:03:24:5d:b6:04:34:63:e9:
7b:81:cf:a0:e0:27:6c:6c:a3:57:6c:4e:c7:77:01:
7b:a8:06:10:82:eb:7f:a3:c1:74:fd:fa:a2:05:80:
b8:8b:66:75:75:4a:8e:7c:84:ac:ae:36:bc:1d:89:
57:3e:ea:58:00:31:64:35:1a:9f:22:9f:b3:38:50:
e8:b9:6a:0b:3d:43:40:34:98:d8:1a:35:ab:8a:c4:
fc:9d:f8:1f:74:1c:11:e0:3b:cc:ee:20:76:69:79:
d3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:80:55:1C:46:E9:4F:70:7D:DA:39:AF:D7:B9:C7:11:D7:CF:7C:C1
X509v3 Authority Key Identifier:
keyid:7E:C5:F1:89:6E:9A:44:35:7C:9D:78:AC:F3:7D:48:F4:78:05:20:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsXxiW6aRDV8nXis831I9HgFINk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/tIBVHEbpT3B92jmv17nHEdfPfME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.132.0/22
IPv6:
2a0b:37c0::/29
Signature Algorithm: sha256WithRSAEncryption
4a:62:01:6f:5f:4c:c1:56:d8:e9:1a:d4:2d:e3:c7:13:53:0f:
77:ca:74:03:b3:4c:a4:09:77:90:45:6d:8a:c4:62:e2:30:2a:
0c:0f:5c:3f:ee:bc:f3:d7:1f:f6:13:6c:de:8c:c2:dc:b9:b4:
e1:0d:e1:a3:8d:80:08:66:5e:1f:66:c7:64:65:c7:97:5c:58:
21:f6:e6:51:b9:9f:7e:40:cc:41:e5:86:40:8c:96:17:ce:d6:
10:3b:35:04:02:f9:39:e3:0b:06:cb:c9:c4:04:3b:09:17:3e:
e7:47:14:51:90:b8:a6:43:c0:ec:a2:bc:a3:a0:f3:15:9b:fe:
d3:33:45:17:55:af:4d:6b:f5:03:ba:15:cf:d8:aa:b3:bb:ba:
5c:d1:c5:75:ec:93:ef:8b:94:11:e2:4a:4d:e1:9e:bc:f1:f8:
4b:71:b4:77:36:b4:01:ba:9f:99:cb:93:5a:a7:3f:ac:69:ef:
3c:70:e6:17:f6:56:27:58:d9:23:ec:f9:3b:c6:e0:b1:8a:b0:
01:b6:a6:23:c5:9c:9b:ad:1a:0f:9e:db:0f:52:cb:18:be:eb:
9e:3d:d2:15:9a:aa:ba:d0:7a:35:46:8d:02:e1:47:e0:24:9c:
cf:00:05:90:f8:ca:6f:a5:70:89:be:57:f5:6c:94:da:c5:3b:
3a:f3:c8:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:35:37 2025 by rpki-client