Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ilimu5drzIbEeXJ_iwwr0teB2vI.roa
File: ilimu5drzIbEeXJ_iwwr0teB2vI.roa (raw, json)
Hash identifier: G0uJHkhFnDwdbvnSsck9ln3yib23ETChedo+c+GYdog=
Subject key identifier: 8A:58:A6:BB:97:6B:CC:86:C4:79:72:7F:8B:0C:2B:D2:D7:81:DA:F2
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01942824F0788BDC27FE05C4187C705A60A3
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ilimu5drzIbEeXJ_iwwr0teB2vI.roa
Signing time: Thu 02 Jan 2025 17:51:36 +0000
ROA not before: Thu 02 Jan 2025 17:51:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49418
IP address blocks: 194.87.228.0/24 maxlen: 24
212.192.250.0/24 maxlen: 24
212.192.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:f0:78:8b:dc:27:fe:05:c4:18:7c:70:5a:60:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 17:51:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a58a6bb976bcc86c479727f8b0c2bd2d781daf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3b:f0:be:82:f6:c2:f3:f4:ae:ca:16:da:66:
d0:11:2d:de:3e:c8:ed:8a:a0:ed:da:35:49:74:83:
d5:e3:38:d2:b3:54:e0:d5:90:d2:85:f6:27:b4:e4:
33:e2:43:34:7e:9c:48:51:8e:23:db:13:0b:5c:cc:
fc:9b:e1:4e:0a:81:19:36:91:bf:27:dd:19:10:9c:
c9:3a:c8:4d:9d:0c:14:1e:8a:82:23:91:85:5f:8a:
3e:5a:78:73:19:d8:00:0f:f3:c5:0c:fa:18:f5:bd:
82:8a:19:2d:74:36:b8:47:1c:3f:59:73:0e:11:a8:
a9:f5:f1:6e:08:d8:17:9e:1d:9d:13:d0:47:82:45:
1e:4e:88:ec:0f:58:f7:c2:87:ec:56:d4:7b:2b:4b:
e3:b2:7d:b8:0c:e9:44:79:fa:ca:24:9e:bd:99:ef:
42:a3:bb:0b:e5:59:2e:3d:b2:78:bf:7b:38:20:9c:
2e:82:75:5c:8d:e2:31:10:60:21:4a:da:9e:de:a1:
01:13:2c:95:4f:48:c8:6c:16:15:1c:02:db:45:d5:
dc:e4:e6:59:d4:07:38:58:78:a9:25:bd:ef:50:aa:
27:2f:d5:1a:ee:60:8d:4d:9f:54:0c:2a:b8:92:70:
2e:81:d3:fb:b9:f2:4b:a2:f5:53:63:9b:c5:30:80:
ba:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:58:A6:BB:97:6B:CC:86:C4:79:72:7F:8B:0C:2B:D2:D7:81:DA:F2
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ilimu5drzIbEeXJ_iwwr0teB2vI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.228.0/24
212.192.250.0/24
212.192.255.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:da:4e:be:b3:4e:a2:36:99:c4:59:93:86:b6:50:ee:7b:db:
28:4b:69:d9:64:28:54:bd:81:96:d7:0d:a2:b5:84:46:81:d5:
d6:bb:fc:2c:52:71:ff:a4:26:28:20:18:ce:4a:04:f2:a2:8c:
3e:84:23:57:76:e2:31:f2:f1:ba:97:01:b6:92:4b:6d:9a:fd:
90:e8:f3:59:3a:88:af:b5:8f:9e:2e:52:7e:57:19:58:d9:06:
cb:78:38:de:12:2a:e4:ed:ce:2a:9e:54:38:19:24:42:99:a2:
d0:6c:d4:68:b2:97:32:a7:90:99:23:66:1d:72:29:76:54:98:
4c:17:ba:ed:72:be:c2:55:a7:6b:8b:5c:0c:e5:90:37:b4:29:
f0:bf:6a:ce:05:ba:83:0a:6a:f8:07:57:51:0e:99:66:fd:58:
03:02:91:1e:27:e2:a8:51:11:f5:df:9c:69:06:b1:cf:2c:24:
0f:1b:78:d0:34:2c:f0:03:d3:a2:71:9f:c9:00:40:e0:2d:78:
01:a2:fb:18:08:bc:d6:80:a5:c6:27:b0:6b:11:ae:d1:ea:1b:
49:51:67:6b:62:df:61:1e:b0:0c:60:94:28:c5:15:7f:c9:27:
af:fb:b7:46:6f:06:b0:97:2e:83:fa:91:a9:ad:2e:9c:39:20:
a1:46:eb:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:36:04 2025 by rpki-client