Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/iLXBde_F75m5YfoaIyjI9zn5Jnc.roa
File: iLXBde_F75m5YfoaIyjI9zn5Jnc.roa (raw, json)
Hash identifier: nfxkNObZhKVNWHy4cix7zUaYqAKGAsBbq2jLeW/ghJA=
Subject key identifier: 88:B5:C1:75:EF:C5:EF:99:B9:61:FA:1A:23:28:C8:F7:39:F9:26:77
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01941FFA9E8C88EEEA3C6D4ADA8810582CFC
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/iLXBde_F75m5YfoaIyjI9zn5Jnc.roa
Signing time: Wed 01 Jan 2025 03:48:25 +0000
ROA not before: Wed 01 Jan 2025 03:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61276
IP address blocks: 37.18.21.0/24 maxlen: 24
141.101.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:9e:8c:88:ee:ea:3c:6d:4a:da:88:10:58:2c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 03:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=88b5c175efc5ef99b961fa1a2328c8f739f92677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:28:7e:62:62:bc:cb:09:e9:15:c3:ea:b9:a9:
9a:55:17:1d:2e:fa:91:89:96:a5:2f:96:ce:ef:5a:
fd:b1:ac:9c:9d:b0:c3:c0:71:e2:53:55:8c:aa:1a:
d4:a0:f8:d7:f1:38:27:f1:4b:9c:35:2d:70:82:9f:
12:eb:6c:f1:4d:f1:95:eb:ac:29:cc:32:40:62:06:
b7:41:a7:2d:65:a7:8c:ba:eb:58:51:fd:41:bf:86:
6a:6c:f8:09:90:82:54:d0:23:00:7b:50:76:22:8f:
0f:1a:d5:99:b8:d7:20:79:ed:97:78:85:86:78:a4:
53:1e:c8:db:7e:d4:dd:37:de:2a:26:80:98:83:ae:
52:cb:52:2d:06:22:70:99:4f:84:d6:51:4f:9f:75:
14:d1:fb:af:0b:a8:4a:8c:f0:e3:98:7d:a9:fa:3b:
7d:f6:99:c8:8b:0a:88:81:09:82:cc:82:ef:db:88:
eb:4d:ea:f6:66:d3:6c:dd:77:ef:3d:2c:64:43:2f:
53:d2:fd:4f:be:6a:d8:fc:f8:ee:32:38:72:9e:be:
aa:ac:10:77:9d:a7:09:f8:d1:2d:a0:75:6a:84:39:
01:1d:99:1f:77:49:57:a4:fa:db:2e:d8:99:13:7d:
62:0e:ec:d6:85:2d:41:6a:86:09:af:6c:4f:af:cb:
88:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B5:C1:75:EF:C5:EF:99:B9:61:FA:1A:23:28:C8:F7:39:F9:26:77
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/iLXBde_F75m5YfoaIyjI9zn5Jnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.18.21.0/24
141.101.196.0/24
Signature Algorithm: sha256WithRSAEncryption
25:bf:d7:8e:dc:6f:16:04:15:74:99:4b:96:e3:15:69:7c:f0:
38:34:82:82:ea:31:64:c7:78:ef:35:2c:74:bf:af:1e:37:89:
13:60:a5:68:5f:f1:4f:5f:1f:f7:4b:1d:ad:b2:f8:29:02:0d:
26:d6:52:db:f7:a4:41:31:1a:60:4e:7d:12:93:75:60:d3:4a:
ee:0e:82:7e:af:69:38:78:65:31:44:4a:54:a2:e8:2e:bb:04:
70:8e:50:03:b3:fe:0d:95:de:60:ca:72:35:19:06:f8:8f:19:
17:54:50:63:d3:b3:d1:06:5c:91:ce:a7:b1:20:60:0b:f8:64:
ad:2c:c8:0c:41:18:c0:87:60:c6:41:0c:92:7c:b6:1d:4c:5a:
e9:76:85:72:27:94:78:e4:96:15:6d:d0:8d:34:db:d4:e9:94:
77:27:1c:47:f1:11:36:02:cb:5b:c3:e7:89:58:84:02:1a:43:
e0:66:d0:ec:40:63:90:59:48:c3:e1:2f:10:ea:2e:09:ec:b5:
53:2e:83:c4:9a:cf:65:7a:91:05:b4:f9:ab:21:2b:0f:7d:31:
76:bd:e5:eb:fb:7e:f9:aa:31:00:c2:41:e0:fe:03:0d:0e:f8:
5c:e2:2a:15:49:c6:df:e2:99:ed:b8:44:da:ed:9b:f9:8e:dd:
e2:a4:d6:69
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQf+p6MiO7qPG1K2ogQWCz8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0
NzA2N2UwHhcNMjUwMTAxMDM0ODI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OGI1YzE3NWVmYzVlZjk5Yjk2MWZhMWEyMzI4YzhmNzM5ZjkyNjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCh+YmK8ywnpFcPquamaVRcdLvqR
iZalL5bO71r9saycnbDDwHHiU1WMqhrUoPjX8Tgn8UucNS1wgp8S62zxTfGV66wp
zDJAYga3QactZaeMuutYUf1Bv4ZqbPgJkIJU0CMAe1B2Io8PGtWZuNcgee2XeIWG
eKRTHsjbftTdN94qJoCYg65Sy1ItBiJwmU+E1lFPn3UU0fuvC6hKjPDjmH2p+jt9
9pnIiwqIgQmCzILv24jrTer2ZtNs3XfvPSxkQy9T0v1PvmrY/PjuMjhynr6qrBB3
nacJ+NEtoHVqhDkBHZkfd0lXpPrbLtiZE31iDuzWhS1BaoYJr2xPr8uImQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIi1wXXvxe+ZuWH6GiMoyPc5+SZ3MB8GA1UdIwQY
MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt
OGM5NTgxZDk2ZDhmLzEvaUxYQmRlX0Y3NW01WWZvYUl5akk5em41Sm5jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm
LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJRIVAwQA
jWXEMA0GCSqGSIb3DQEBCwUAA4IBAQAlv9eO3G8WBBV0mUuW4xVpfPA4NIKC6jFk
x3jvNSx0v68eN4kTYKVoX/FPXx/3Sx2tsvgpAg0m1lLb96RBMRpgTn0Sk3Vg00ru
DoJ+r2k4eGUxREpUouguuwRwjlADs/4Nld5gynI1GQb4jxkXVFBj07PRBlyRzqex
IGAL+GStLMgMQRjAh2DGQQySfLYdTFrpdoVyJ5R45JYVbdCNNNvU6ZR3JxxH8RE2
Astbw+eJWIQCGkPgZtDsQGOQWUjD4S8Q6i4J7LVTLoPEms9lepEFtPmrISsPfTF2
veXr+375qjEAwkHg/gMNDvhc4ioVScbf4pntuETa7Zv5jt3ipNZp
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:57:49 2025 by rpki-client