Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/rrdEpfsB8Gg5zdzJ-FXk4BiB3TE.roa
File: rrdEpfsB8Gg5zdzJ-FXk4BiB3TE.roa (raw, json)
Hash identifier: 4ZmwtT19+5Iz0mku0LqIMr+TT72kqcPqLFHR2qlNxGI=
Subject key identifier: AE:B7:44:A5:FB:01:F0:68:39:CD:DC:C9:F8:55:E4:E0:18:81:DD:31
Certificate issuer: /CN=14fb7c3336acd4189d3fac639a280d9b0020f298
Certificate serial: 019426D9B5440440A4BCA886E348860BD32E
Authority key identifier: 14:FB:7C:33:36:AC:D4:18:9D:3F:AC:63:9A:28:0D:9B:00:20:F2:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FPt8Mzas1BidP6xjmigNmwAg8pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/rrdEpfsB8Gg5zdzJ-FXk4BiB3TE.roa
Signing time: Thu 02 Jan 2025 11:49:49 +0000
ROA not before: Thu 02 Jan 2025 11:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200944
IP address blocks: 185.90.116.0/22 maxlen: 22
185.90.116.0/24 maxlen: 24
185.90.117.0/24 maxlen: 24
185.90.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:b5:44:04:40:a4:bc:a8:86:e3:48:86:0b:d3:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14fb7c3336acd4189d3fac639a280d9b0020f298
Validity
Not Before: Jan 2 11:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aeb744a5fb01f06839cddcc9f855e4e01881dd31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3a:35:24:57:e2:b6:61:6e:bc:92:82:b5:fc:
0b:a6:7b:6e:99:43:e6:3d:bf:ab:fe:bd:16:21:c5:
94:29:ee:fd:fe:a9:69:82:c6:30:19:bc:60:55:35:
4d:9c:1e:d8:70:3f:0e:12:1e:d3:f9:b7:20:09:ed:
28:96:6c:c4:ac:e9:82:14:1c:2a:a5:0c:f3:b8:d0:
98:23:c7:4d:46:9f:a4:f8:00:3f:17:c1:e0:c0:2b:
c9:f3:b2:8b:4d:ff:68:85:a1:b9:ab:38:50:2c:36:
b0:31:88:2f:ef:27:57:00:d6:89:d1:c4:96:6e:6e:
48:c0:b1:8c:a5:29:1e:82:6a:54:b1:ab:cc:ff:01:
77:67:6a:f1:19:97:03:47:df:a6:3f:90:4c:2f:18:
d7:df:c2:61:9a:b8:6f:0c:db:17:4a:44:e0:af:8f:
58:d9:e8:bf:f0:9d:f2:cd:6f:18:ea:26:75:e7:05:
af:91:16:ed:fe:5c:da:10:42:60:30:a6:87:cf:df:
0e:af:ed:ef:d4:3d:d3:fb:33:69:61:16:e0:4a:28:
48:d3:84:c9:b8:82:41:f7:69:3b:dd:ff:a3:5b:1e:
69:52:2d:4d:c4:ac:4f:ef:62:cc:2b:4d:01:ca:77:
42:cd:91:0d:6a:ad:0b:31:4f:53:c8:ec:08:91:73:
c2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B7:44:A5:FB:01:F0:68:39:CD:DC:C9:F8:55:E4:E0:18:81:DD:31
X509v3 Authority Key Identifier:
keyid:14:FB:7C:33:36:AC:D4:18:9D:3F:AC:63:9A:28:0D:9B:00:20:F2:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FPt8Mzas1BidP6xjmigNmwAg8pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/rrdEpfsB8Gg5zdzJ-FXk4BiB3TE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.90.116.0/22
Signature Algorithm: sha256WithRSAEncryption
81:d2:af:39:f5:fb:5f:5a:b2:11:9a:e8:eb:18:62:74:61:e3:
3b:d7:9e:6f:b7:41:5d:c6:e0:ea:dc:3e:e6:ea:5d:56:84:f2:
97:8e:f3:3a:99:67:c9:7a:ae:ac:41:35:ff:28:6e:5a:f2:99:
08:d6:9a:cc:cb:d5:70:8e:f0:0e:76:cb:15:3c:5a:b5:c4:fc:
55:1a:b4:52:b4:07:19:14:d3:05:ac:5f:50:08:ea:0b:75:77:
e8:4d:0c:3c:c4:1e:ae:69:e2:42:c3:6f:ed:5e:8c:df:8c:5d:
91:09:b3:f0:be:d8:75:3d:11:95:c6:bb:47:92:5f:b7:50:2d:
bb:33:b8:81:77:57:af:be:65:bd:88:c5:ac:08:6d:2e:8a:eb:
46:5a:21:8f:86:a1:fa:66:63:f4:9f:76:5a:4f:7e:56:49:bd:
45:3b:87:12:b6:7d:60:fc:f2:a7:11:ff:bc:96:67:36:fd:d9:
73:d5:16:94:4e:90:f0:6c:a6:03:8f:b7:d6:4b:79:08:55:fa:
a7:d1:14:a5:4f:38:02:1d:10:55:04:21:3f:1d:b9:91:a5:d8:
3a:48:85:ed:56:00:03:5a:b2:6f:9b:bf:59:7a:6c:8c:d6:76:
24:58:6f:14:d7:1c:59:5c:e1:2b:65:78:72:3c:e8:cc:5e:a5:
af:0b:96:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:41:58 2025 by rpki-client