Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/IlBURfELoFWggPqib8pIlhXGFmU.roa
File: IlBURfELoFWggPqib8pIlhXGFmU.roa (raw, json)
Hash identifier: EgUxhQwS3XOSvvTKBvdfFMfBmhC3meQBELVSjoVlSO0=
Subject key identifier: 22:50:54:45:F1:0B:A0:55:A0:80:FA:A2:6F:CA:48:96:15:C6:16:65
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 019421B21B583FAF2575DEE62CFD0AC3C8D7
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/IlBURfELoFWggPqib8pIlhXGFmU.roa
Signing time: Wed 01 Jan 2025 11:48:27 +0000
ROA not before: Wed 01 Jan 2025 11:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49664
IP address blocks: 82.177.48.0/24 maxlen: 24
88.220.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:1b:58:3f:af:25:75:de:e6:2c:fd:0a:c3:c8:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 11:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22505445f10ba055a080faa26fca489615c61665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5c:3d:a2:d9:bb:f0:d5:bd:63:a4:c1:a1:70:
45:27:09:5e:53:18:b2:d9:b1:e4:b0:56:8d:17:83:
ab:c0:35:e1:80:c5:f3:5c:41:2e:80:11:a7:b4:3b:
b9:44:2d:8f:be:83:3e:e8:e9:7b:d4:bf:f9:88:e3:
ae:23:ab:68:f6:15:af:27:06:91:7d:a9:51:cc:e2:
b0:92:ae:6f:9f:7e:af:60:5f:eb:ea:94:82:46:ad:
af:2f:8c:e8:ad:28:a6:7b:6d:ff:88:12:7a:f0:3f:
1a:d0:a8:46:bd:9a:59:2e:e9:1f:a1:f2:a4:b3:f4:
bf:14:b3:52:dc:73:0f:2d:84:90:d4:d3:d1:e7:c0:
62:ae:e3:5d:78:16:17:04:71:ad:a7:9e:db:d1:c0:
7a:49:04:13:a2:d2:bd:32:49:12:24:f2:9f:02:43:
c2:22:02:d3:8c:3c:e3:d0:69:52:27:06:3c:e6:34:
63:7f:33:5f:79:56:ba:e8:d4:7d:3b:93:5a:e8:22:
c1:7e:fb:3c:26:b6:6e:0e:98:77:d3:5e:33:4f:66:
80:f1:ae:e6:5d:9f:53:d3:80:49:79:2c:0a:78:02:
98:b3:6e:d7:50:80:2a:fc:d3:e9:37:55:9e:0d:a0:
35:bc:76:24:b7:c8:f8:11:e2:1d:17:38:17:97:73:
01:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:50:54:45:F1:0B:A0:55:A0:80:FA:A2:6F:CA:48:96:15:C6:16:65
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/IlBURfELoFWggPqib8pIlhXGFmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.177.48.0/24
88.220.107.0/24
Signature Algorithm: sha256WithRSAEncryption
36:16:1e:38:c4:ba:66:97:f6:22:47:71:81:de:92:bb:72:c3:
2f:05:e8:17:ac:c3:23:15:61:14:b6:19:d9:91:a2:d4:6f:3d:
7a:32:4c:2e:44:e3:35:52:bf:37:46:56:fd:aa:2d:0f:54:ca:
33:48:7c:d3:c2:94:a7:26:80:ec:c0:f0:90:c9:d1:68:0f:53:
7d:f4:b2:cd:42:42:be:c6:54:52:0d:b0:b4:e1:1e:25:f1:ea:
26:b8:ee:4a:9d:62:8b:e2:31:29:6f:74:98:e1:26:c1:70:81:
a5:03:89:12:f2:ce:4d:2e:7b:27:7c:ec:f1:fe:9d:8c:71:8d:
ec:e4:81:b3:d5:86:da:4c:ec:7f:69:3e:36:c4:e5:1b:54:78:
6d:d5:6c:91:4f:9e:ad:f9:c7:07:db:b3:e9:51:a4:fd:64:74:
e3:4a:ea:db:d0:d2:f6:b0:5e:d3:5a:68:6f:f1:85:8d:d7:06:
bb:93:79:87:78:a7:17:57:23:69:f0:24:e8:53:c1:03:9d:d8:
dd:8e:9f:e6:fb:f3:c2:41:b7:0e:c1:1d:27:a4:c8:ed:c9:6a:
8e:7f:c5:9b:d2:ef:2d:f3:0d:82:fd:62:42:7a:a1:82:76:90:
a1:db:95:f6:5c:b1:69:a4:6a:dd:5f:84:5a:c1:59:24:d5:57:
fd:b0:43:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:58 2025 by rpki-client