Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/ilmUYJP9An2tvy3PssJlCv8HfSc.roa
File: ilmUYJP9An2tvy3PssJlCv8HfSc.roa (raw, json)
Hash identifier: 1qXew5Oe7BdIwNw0qvNlQOP+TeLMGt2S2brGQ7Jg7lc=
Subject key identifier: 8A:59:94:60:93:FD:02:7D:AD:BF:2D:CF:B2:C2:65:0A:FF:07:7D:27
Certificate issuer: /CN=90087236f161c5c705ef73dfe9e5e3986e7126c8
Certificate serial: 01941F8C088BF7C140C05C19D095BB9C2C69
Authority key identifier: 90:08:72:36:F1:61:C5:C7:05:EF:73:DF:E9:E5:E3:98:6E:71:26:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kAhyNvFhxccF73Pf6eXjmG5xJsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/ilmUYJP9An2tvy3PssJlCv8HfSc.roa
Signing time: Wed 01 Jan 2025 01:47:38 +0000
ROA not before: Wed 01 Jan 2025 01:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216152
IP address blocks: 195.182.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:08:8b:f7:c1:40:c0:5c:19:d0:95:bb:9c:2c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90087236f161c5c705ef73dfe9e5e3986e7126c8
Validity
Not Before: Jan 1 01:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a59946093fd027dadbf2dcfb2c2650aff077d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3b:a5:49:3e:67:2c:ab:07:64:c9:b0:7c:c4:
4d:54:5f:57:f5:28:de:1b:a1:a8:7a:8d:2e:8b:9a:
32:c5:c6:25:fe:f2:87:72:bb:10:7a:86:47:10:07:
db:68:d3:ed:dd:cf:8e:02:6b:97:14:0b:39:fd:3d:
8c:a9:71:92:d2:35:2a:df:74:ff:8c:b3:fb:12:f5:
26:43:1b:e6:d6:0f:56:94:a0:21:08:ba:2b:5d:5f:
6f:87:4a:3a:91:30:65:48:4b:cf:05:e5:22:69:0a:
64:4b:b0:82:32:7e:64:84:97:fe:fc:9a:56:1a:7d:
5e:5d:98:6d:d3:5a:a6:ee:2e:5e:37:18:96:e5:e1:
83:b5:25:fa:09:54:7e:2f:09:00:eb:5d:8f:e6:fb:
07:3b:57:49:78:05:3a:50:13:03:cb:30:e9:63:04:
aa:83:0a:dd:89:61:a9:e6:34:cf:b6:6d:0a:e7:a6:
26:10:29:22:11:d4:ea:cc:51:f9:3c:0e:e1:8b:8b:
79:d3:bf:aa:a1:1c:e0:8f:ad:21:cd:07:88:27:f6:
28:13:3d:55:0f:19:ef:7f:e7:18:47:79:d0:f3:e6:
bc:5d:1c:a8:c9:05:66:6a:94:33:70:46:d9:38:83:
68:c6:f8:fe:eb:0b:29:a5:0a:ee:32:cf:11:2f:f7:
35:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:59:94:60:93:FD:02:7D:AD:BF:2D:CF:B2:C2:65:0A:FF:07:7D:27
X509v3 Authority Key Identifier:
keyid:90:08:72:36:F1:61:C5:C7:05:EF:73:DF:E9:E5:E3:98:6E:71:26:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kAhyNvFhxccF73Pf6eXjmG5xJsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/ilmUYJP9An2tvy3PssJlCv8HfSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/df833b-c87a-41fc-ba2e-e53c5ec5d402/1/kAhyNvFhxccF73Pf6eXjmG5xJsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.182.48.0/24
Signature Algorithm: sha256WithRSAEncryption
34:c4:85:1b:bf:a0:38:a0:aa:8a:5b:34:2e:c0:c8:7c:42:06:
f8:3a:aa:5a:6d:89:50:c9:d7:27:6f:84:19:0a:14:48:93:78:
83:89:16:7a:8f:3c:fd:25:9c:69:e8:0a:71:a0:b0:f4:22:41:
45:14:90:84:9f:cb:d4:59:da:9c:81:71:0b:3e:a6:01:a0:97:
6e:32:4c:4c:6e:3e:6e:bb:65:f3:53:8a:5a:52:cb:ce:63:1d:
2f:69:3c:ed:c9:30:28:ae:e5:5a:38:56:68:6d:b2:7a:a4:db:
a0:49:96:ef:b4:11:d1:4e:66:6a:bd:ee:9d:0c:70:46:9b:53:
b3:88:f8:55:11:ce:4b:51:dc:b4:bb:86:ec:ae:4c:2f:90:ee:
88:9e:5a:e4:24:3c:d6:7e:1e:3e:74:88:58:18:17:57:d8:0a:
f0:30:b6:78:9a:99:40:7a:cf:77:c9:20:72:71:60:54:f3:88:
ba:03:46:5f:1c:5b:87:ae:e9:a7:84:a3:bc:ab:ed:1a:de:9c:
34:97:eb:7f:2b:89:a4:a4:43:2e:57:10:5f:dd:b7:f8:54:16:
62:da:09:14:48:09:4f:b0:e3:a0:a4:70:3e:f9:6c:8f:35:22:
97:71:29:dd:41:6a:0c:78:59:25:61:a1:10:7f:9f:83:58:e1:
47:7e:84:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:14 2025 by rpki-client