Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/iMfFrRcXkKBylWT4wUTNTWM0gvg.roa
File: iMfFrRcXkKBylWT4wUTNTWM0gvg.roa (raw, json)
Hash identifier: aWVvm9u/vO6CRtVDhEw6DVsDxsgxXusrFiooyVYC5lM=
Subject key identifier: 88:C7:C5:AD:17:17:90:A0:72:95:64:F8:C1:44:CD:4D:63:34:82:F8
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019428251646AE9004B1B5F6E7714B66FB63
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/iMfFrRcXkKBylWT4wUTNTWM0gvg.roa
Signing time: Thu 02 Jan 2025 17:51:46 +0000
ROA not before: Thu 02 Jan 2025 17:51:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216093
IP address blocks: 194.87.11.0/24 maxlen: 24
194.87.28.0/24 maxlen: 24
195.133.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:16:46:ae:90:04:b1:b5:f6:e7:71:4b:66:fb:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 17:51:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=88c7c5ad171790a0729564f8c144cd4d633482f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c8:5c:dc:95:6e:f4:a8:31:37:b1:7a:d9:2c:
86:3a:4c:57:02:d4:98:3c:92:75:7f:fe:c6:e5:9a:
24:8b:cb:7c:3a:26:b2:a6:f7:eb:e8:3c:88:f0:47:
3a:f9:5d:d3:4c:b9:b0:ec:a8:65:4e:71:97:43:95:
54:f2:0c:9f:86:56:f5:b5:de:e7:db:03:7b:cb:2f:
3f:ca:89:f3:05:fe:13:f6:89:e6:47:9c:91:af:50:
d3:4d:78:37:ec:d9:1a:63:5d:14:f6:f0:64:ba:f4:
89:73:c2:24:e0:f8:32:10:9d:91:b9:ef:9c:8b:cc:
8b:cd:94:89:27:94:7a:2b:f2:a2:8a:fa:ce:43:13:
9c:53:74:89:f1:3c:35:b4:64:0c:00:a8:7f:ab:18:
25:19:75:56:99:ab:1f:f9:0a:da:2b:39:1d:19:2f:
49:dc:57:34:b8:f0:90:65:17:e0:75:b2:cf:a9:2c:
c5:35:b7:f8:1c:f6:38:2c:ab:9d:71:c3:03:c3:68:
29:46:ab:b3:78:3c:27:d8:e8:af:77:13:00:e4:e0:
7d:a4:61:6b:46:1b:bb:18:d5:b3:50:b1:ca:d4:49:
15:90:8d:43:c4:62:35:04:9b:55:f1:63:33:0e:1b:
4b:69:57:ff:6c:e8:a2:b4:54:27:d4:5a:5e:d1:a7:
1d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C7:C5:AD:17:17:90:A0:72:95:64:F8:C1:44:CD:4D:63:34:82:F8
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/iMfFrRcXkKBylWT4wUTNTWM0gvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.11.0/24
194.87.28.0/24
195.133.51.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:a9:c0:54:60:5a:fc:d1:fd:0c:9d:3a:be:da:1e:7f:6e:b7:
45:cc:f1:5f:fa:d3:a5:1e:76:42:32:3b:e9:d6:f0:be:06:c8:
68:ef:9b:93:a3:45:7b:7a:4a:a2:cc:19:4b:63:c3:e2:c5:7e:
05:8f:c0:fb:e7:4a:eb:50:29:45:51:5f:99:38:7a:1a:cd:74:
61:49:11:af:9c:60:27:bf:7f:52:5a:bc:ac:e0:e9:26:25:16:
b9:67:08:04:e4:18:df:23:af:a2:df:7a:14:17:17:77:27:c7:
7b:3c:04:21:b1:6d:1c:f8:b8:da:1c:ee:58:2a:36:19:21:2c:
a8:df:fa:f0:81:91:fc:52:86:08:8f:c8:f5:8c:f6:64:e0:2c:
8f:6f:71:d2:fa:6a:6c:8b:92:84:d1:da:e3:dc:f8:05:c1:83:
1d:62:f5:f0:88:f8:8e:c3:07:07:21:87:1a:2d:d4:0f:72:95:
11:68:7c:c5:ce:89:c6:fa:f7:eb:c1:6d:f7:94:ac:93:55:48:
9f:96:4d:b8:ab:be:60:ba:83:c9:c4:a8:79:2d:13:5c:f4:ce:
17:f8:0d:e4:c7:e0:12:b5:ce:b0:b2:7e:22:62:1c:3f:e7:3d:
9e:84:f1:5c:40:2e:d0:68:26:b9:c1:25:8b:88:c9:b1:7a:a2:
1f:c3:52:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:48:41 2025 by rpki-client