Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/kNwo0JsX3ICm84nVo9dsXQUG9kE.roa
File: kNwo0JsX3ICm84nVo9dsXQUG9kE.roa (raw, json)
Hash identifier: NK1ts8W0/zMpiUmbhnMjlz816+vYjFkNttYVHl02NWQ=
Subject key identifier: 90:DC:28:D0:9B:17:DC:80:A6:F3:89:D5:A3:D7:6C:5D:05:06:F6:41
Certificate issuer: /CN=c900ef3dd5dd1be15d08bb93cbdd63b4ac860e6b
Certificate serial: 019420D5A5E59E8A9B1B80D698B1164E5581
Authority key identifier: C9:00:EF:3D:D5:DD:1B:E1:5D:08:BB:93:CB:DD:63:B4:AC:86:0E:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yQDvPdXdG-FdCLuTy91jtKyGDms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/kNwo0JsX3ICm84nVo9dsXQUG9kE.roa
Signing time: Wed 01 Jan 2025 07:47:40 +0000
ROA not before: Wed 01 Jan 2025 07:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202544
IP address blocks: 185.149.168.0/22 maxlen: 22
185.151.136.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:a5:e5:9e:8a:9b:1b:80:d6:98:b1:16:4e:55:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c900ef3dd5dd1be15d08bb93cbdd63b4ac860e6b
Validity
Not Before: Jan 1 07:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=90dc28d09b17dc80a6f389d5a3d76c5d0506f641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4a:d5:a1:48:e4:3a:a9:01:66:e2:f1:1e:52:
dc:2d:7d:61:3d:2f:7a:8a:71:f7:68:72:0c:ba:44:
f2:df:8d:47:4b:65:4d:10:63:04:85:ec:4c:59:d1:
44:1a:43:f6:cb:43:48:02:e2:3b:92:26:01:02:4e:
5e:e5:a9:9b:f4:b6:b1:56:a8:aa:d5:39:6f:7e:a7:
69:36:7c:6b:d6:dd:5c:f1:ab:7d:11:70:63:7b:4d:
de:9d:ff:73:94:a6:fb:62:60:44:ec:74:23:8b:d7:
57:a7:0d:2f:fa:47:b6:55:cf:e6:fd:2d:73:64:4a:
5e:1d:d1:c9:d0:b3:e3:03:3b:40:65:de:5c:63:90:
4d:00:fa:a0:80:44:99:87:dc:7f:c3:08:a9:f3:c4:
8e:23:93:04:5b:9e:a8:8c:62:9c:a2:94:90:f2:e8:
af:4e:62:01:be:ff:1a:b0:99:61:f9:1d:73:10:0c:
f0:52:52:ae:c9:1b:2d:c4:58:ce:4b:5c:b1:e9:6d:
79:98:c2:d3:35:75:40:ae:9b:24:7b:dd:e8:6b:cd:
c9:a2:a4:84:e5:d3:c4:c3:31:22:0d:70:c4:fa:1f:
1c:98:98:3b:09:9f:2c:c9:49:f9:d1:dd:22:13:45:
6c:3b:8f:af:26:ec:2d:aa:a3:ac:a9:60:e3:de:84:
cd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:DC:28:D0:9B:17:DC:80:A6:F3:89:D5:A3:D7:6C:5D:05:06:F6:41
X509v3 Authority Key Identifier:
keyid:C9:00:EF:3D:D5:DD:1B:E1:5D:08:BB:93:CB:DD:63:B4:AC:86:0E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQDvPdXdG-FdCLuTy91jtKyGDms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/kNwo0JsX3ICm84nVo9dsXQUG9kE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.168.0/22
185.151.136.0/22
Signature Algorithm: sha256WithRSAEncryption
13:54:55:fe:56:3d:92:58:d1:4f:90:e9:91:d4:7e:17:77:d4:
eb:bf:e6:27:74:9c:72:87:63:4f:07:75:f8:03:12:1a:48:83:
8e:6e:f3:4f:a6:ed:99:28:79:34:20:9d:1a:20:33:19:1b:23:
8d:a0:fb:09:dc:2b:7b:22:e7:34:1e:21:64:40:a2:78:49:a0:
92:f7:42:1b:b4:8b:2c:34:e3:e6:89:81:c5:63:ab:ba:03:ec:
06:69:d7:62:22:f1:0b:f8:67:da:5d:0b:a2:51:98:5c:d3:d4:
b3:62:ca:3f:69:52:df:42:0b:59:46:8c:02:8c:c0:9b:b1:3e:
53:de:6f:02:9b:91:62:0e:6a:3d:fd:55:46:d7:a6:7f:63:a8:
6d:b2:ca:a2:7e:d1:f2:3c:b1:de:c2:ed:15:3b:de:a0:42:ac:
0d:1a:a1:80:bc:92:52:2f:a2:88:1d:8c:dd:e5:58:cd:71:05:
68:35:f3:75:ac:c0:ca:63:fe:9c:bb:ab:23:a1:f1:d7:a1:b2:
60:02:28:72:67:ba:16:46:76:b5:18:c9:55:1e:85:35:c7:3c:
0b:1f:b7:25:ba:6c:97:ac:f4:04:33:bc:14:32:e3:7f:d2:95:
b0:36:4e:49:98:77:3c:7a:bf:fb:b8:7e:ed:e3:3f:59:da:6d:
f8:ef:4a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:06:38 2025 by rpki-client