Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/IRnumdOdTe5Y570IfagmPhDB9R4.roa
File: IRnumdOdTe5Y570IfagmPhDB9R4.roa (raw, json)
Hash identifier: 4ejWsyzrGJGQ04o1g73Qtpghy6riu2/b4nLV5OMyDtc=
Subject key identifier: 21:19:EE:99:D3:9D:4D:EE:58:E7:BD:08:7D:A8:26:3E:10:C1:F5:1E
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019471016FD1B8B2B71488B01BB13AD32D65
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/IRnumdOdTe5Y570IfagmPhDB9R4.roa
Signing time: Thu 16 Jan 2025 21:25:07 +0000
ROA not before: Thu 16 Jan 2025 21:25:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215224
IP address blocks: 193.124.227.0/24 maxlen: 24
194.87.53.0/24 maxlen: 24
212.192.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:71:01:6f:d1:b8:b2:b7:14:88:b0:1b:b1:3a:d3:2d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 16 21:25:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2119ee99d39d4dee58e7bd087da8263e10c1f51e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:54:15:9b:48:16:ee:75:c5:e5:54:b4:be:9f:
0a:02:98:d8:a0:3c:1b:9e:2d:3e:39:6b:9c:97:75:
b5:9c:ad:81:69:bc:e2:9d:51:21:d4:6f:f3:b5:14:
15:84:75:0a:7b:35:7e:02:dc:eb:aa:eb:54:43:2e:
3d:40:03:bf:74:03:fd:52:ef:18:63:93:3a:28:b5:
7e:f0:cb:bd:27:c9:13:73:f4:8d:50:9d:05:98:4d:
ab:49:ff:36:b0:05:87:f7:b8:4e:8e:38:4f:73:9e:
57:58:69:71:f7:10:7f:06:78:61:08:63:ba:ad:c0:
fe:1b:37:4c:56:18:2b:69:17:90:ed:87:aa:e2:9a:
3e:17:02:06:ee:b6:8a:58:4e:0c:c5:a6:3a:53:ee:
08:61:18:9b:49:61:01:13:80:97:c2:fa:03:25:15:
8b:c1:82:a6:57:cf:f9:5d:54:0d:e6:ab:a8:d6:5d:
83:60:de:d5:b1:de:99:bf:17:eb:1c:36:d1:46:f3:
c7:36:c5:08:2b:c6:92:44:6b:94:d8:d4:55:8d:79:
0d:a4:f4:1a:da:59:6a:af:07:94:32:ad:eb:fc:44:
c4:80:96:d3:35:85:0f:d8:e5:50:29:6b:f4:c7:46:
15:46:21:98:0f:6c:96:74:19:63:55:ef:3e:36:07:
21:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:19:EE:99:D3:9D:4D:EE:58:E7:BD:08:7D:A8:26:3E:10:C1:F5:1E
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/IRnumdOdTe5Y570IfagmPhDB9R4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.227.0/24
194.87.53.0/24
212.192.247.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:b1:36:ab:98:38:70:79:5a:32:1f:a4:d8:af:3f:2a:4c:4d:
da:a8:55:28:cc:2b:2c:81:e9:a6:bd:90:d6:ab:5a:a1:ab:f5:
82:06:7d:9c:3d:85:30:34:c1:0d:7e:14:90:4e:3e:f4:ff:bf:
6a:b6:2e:2b:a3:8b:55:2f:ae:1c:2b:c7:dd:b4:8c:2d:3a:61:
6f:2c:aa:19:41:7c:81:31:4f:30:df:56:35:da:88:2a:88:6e:
e4:a3:f6:81:e8:4a:27:29:09:d5:d9:11:b2:4e:72:b1:30:fb:
cf:02:57:8d:00:53:c1:fc:57:54:9a:ea:6d:c3:25:10:41:7d:
cf:75:1f:97:cc:07:75:f2:33:00:e4:ea:40:b2:d6:1a:99:a0:
b4:4f:51:38:03:38:0b:ce:b5:fd:72:12:e9:34:3a:ad:db:76:
62:f5:af:1c:ba:63:e0:0f:fc:f6:fc:78:57:02:c4:3c:80:7b:
81:f0:2c:34:85:be:0f:b9:2c:cb:1d:53:32:cd:09:fa:4f:39:
22:d4:22:7b:14:91:cf:ad:4a:e6:b2:51:1e:4e:d7:19:d0:46:
2f:39:86:2e:e3:26:bf:82:04:d0:3b:63:8f:46:2c:b9:07:53:
d3:1a:40:ec:e3:0d:f2:87:77:f8:f5:3f:ba:36:97:b6:6e:27:
4d:6d:50:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:49:38 2025 by rpki-client