Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/oNGAgQRWUd22iilJRZZ3NKhg6BA.roa
File: oNGAgQRWUd22iilJRZZ3NKhg6BA.roa (raw, json)
Hash identifier: Sl4FGkEn8fDnH4/r71R36hioW72J8jajrVvQ6gi0ySA=
Subject key identifier: A0:D1:80:81:04:56:51:DD:B6:8A:29:49:45:96:77:34:A8:60:E8:10
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 019420D59B4466E3929D548C8E19DC23A476
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/oNGAgQRWUd22iilJRZZ3NKhg6BA.roa
Signing time: Wed 01 Jan 2025 07:47:37 +0000
ROA not before: Wed 01 Jan 2025 07:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2285
IP address blocks: 90.84.248.0/24 maxlen: 24
90.84.249.0/24 maxlen: 24
90.84.250.0/24 maxlen: 24
2a01:c9c0:8010::/48 maxlen: 64
2a01:c9c0:8012::/48 maxlen: 64
2a01:c9c0:8014::/48 maxlen: 64
2a01:c9c0:8016::/48 maxlen: 64
2a01:c9c0:8018::/48 maxlen: 64
2a01:c9c0:801a::/48 maxlen: 64
2a01:c9c0:801c::/48 maxlen: 64
2a01:c9c0:801e::/48 maxlen: 64
2a01:c9c0:8030::/48 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:9b:44:66:e3:92:9d:54:8c:8e:19:dc:23:a4:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 07:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a0d18081045651ddb68a294945967734a860e810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9e:07:b8:bf:03:41:54:72:a8:64:81:93:f2:
72:f0:06:36:25:6d:4d:5c:5c:6b:19:dd:64:e7:bc:
15:16:1b:6a:81:0c:ef:19:1c:7d:c9:8f:57:6f:50:
cc:66:a4:e3:dc:72:2c:83:65:5e:fd:e4:90:4f:5c:
7f:a4:01:8f:0f:07:6c:e9:11:2e:d9:b7:8e:82:0d:
24:54:76:e5:e7:f7:91:18:30:8f:81:7f:16:d9:39:
fc:ca:43:9a:1f:3b:e7:47:04:bb:0a:84:e3:31:96:
a0:c8:59:c6:f3:85:e0:96:96:e9:0e:55:83:69:b9:
78:9f:4b:8e:cd:ac:e7:6d:7e:eb:b7:f7:eb:36:f8:
65:93:c4:cf:20:ff:30:6c:76:33:bd:8d:3e:d6:a4:
f8:0d:39:98:40:08:27:a0:bd:35:33:28:52:d7:fe:
7a:92:ff:f4:04:a7:e2:a6:7b:09:72:55:15:f9:98:
d9:58:26:87:13:90:1e:58:77:c8:f8:a6:f0:f0:34:
0b:f6:c2:c7:60:e9:d3:eb:24:80:5e:0c:5b:96:3f:
a5:32:8b:55:68:10:e5:9d:19:08:e1:32:fe:a7:4b:
67:7a:b4:5c:45:fc:8d:13:b6:a3:95:92:25:fe:69:
dd:53:da:bb:84:04:d5:56:b2:0d:a6:ac:e6:a5:b9:
6f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D1:80:81:04:56:51:DD:B6:8A:29:49:45:96:77:34:A8:60:E8:10
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/oNGAgQRWUd22iilJRZZ3NKhg6BA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.84.248.0-90.84.250.255
IPv6:
2a01:c9c0:8010::/48
2a01:c9c0:8012::/48
2a01:c9c0:8014::/48
2a01:c9c0:8016::/48
2a01:c9c0:8018::/48
2a01:c9c0:801a::/48
2a01:c9c0:801c::/48
2a01:c9c0:801e::/48
2a01:c9c0:8030::/48
Signature Algorithm: sha256WithRSAEncryption
7c:37:cc:b8:76:67:d8:8d:71:5a:be:53:1d:fe:f1:87:ae:19:
6d:7c:65:41:07:4c:40:47:17:55:95:19:eb:7a:57:56:d2:e0:
fa:23:d5:99:72:36:09:5e:2a:34:4f:02:c3:b6:75:62:1f:ae:
c8:6e:ab:0f:6f:c4:7b:22:17:ca:e5:cb:62:87:59:d6:71:bb:
5c:1f:7f:49:69:db:85:8c:5d:26:d6:78:fc:00:58:ef:3c:64:
74:19:44:47:60:71:30:29:3a:0b:4e:04:46:74:48:65:22:b3:
12:36:f5:f1:0d:fe:df:19:c9:79:93:4a:a0:3b:1b:8c:25:a3:
45:ec:b1:72:66:bc:ef:8c:b2:87:0a:46:75:5b:e9:d2:5a:eb:
84:d2:a6:a4:b1:7c:1b:dc:b7:39:7e:ed:d6:84:34:ac:00:e0:
48:b7:ce:ed:fb:4d:2c:b4:6b:a5:d8:ac:ee:d3:f3:cb:e0:b5:
a5:61:2e:00:dd:c6:2b:95:46:83:7a:a4:aa:a8:20:7b:bf:42:
92:43:66:75:2b:45:53:7f:d9:0a:cc:6b:20:9c:99:44:bf:0c:
54:a0:33:94:ff:5e:93:ab:e6:3c:ea:7c:ca:b9:30:f9:fd:fc:
9c:8b:3d:c6:62:64:84:f0:14:63:bc:6e:e4:cc:0e:b1:23:35:
8d:8d:d9:eb
-----BEGIN CERTIFICATE-----
MIIFXzCCBEegAwIBAgISAZQg1ZtEZuOSnVSMjhncI6R2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh
MTA1MTEwHhcNMjUwMTAxMDc0NzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMGQxODA4MTA0NTY1MWRkYjY4YTI5NDk0NTk2NzczNGE4NjBlODEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu54HuL8DQVRyqGSBk/Jy8AY2JW1N
XFxrGd1k57wVFhtqgQzvGRx9yY9Xb1DMZqTj3HIsg2Ve/eSQT1x/pAGPDwds6REu
2beOgg0kVHbl5/eRGDCPgX8W2Tn8ykOaHzvnRwS7CoTjMZagyFnG84XglpbpDlWD
abl4n0uOzaznbX7rt/frNvhlk8TPIP8wbHYzvY0+1qT4DTmYQAgnoL01MyhS1/56
kv/0BKfipnsJclUV+ZjZWCaHE5AeWHfI+Kbw8DQL9sLHYOnT6ySAXgxblj+lMotV
aBDlnRkI4TL+p0tnerRcRfyNE7ajlZIl/mndU9q7hATVVrINpqzmpblvAwIDAQAB
o4ICazCCAmcwHQYDVR0OBBYEFKDRgIEEVlHdtoopSUWWdzSoYOgQMB8GA1UdIwQY
MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt
NDU5MzVmNTA2YTEyLzEvb05HQWdRUldVZDIyaWlsSlJaWjNOS2hnNkJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy
LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGABggrBgEFBQcBBwEB/wRxMG8wFAQCAAEwDjAMAwQDWlT4
AwQAWlT6MFcEAgACMFEDBwAqAcnAgBADBwAqAcnAgBIDBwAqAcnAgBQDBwAqAcnA
gBYDBwAqAcnAgBgDBwAqAcnAgBoDBwAqAcnAgBwDBwAqAcnAgB4DBwAqAcnAgDAw
DQYJKoZIhvcNAQELBQADggEBAHw3zLh2Z9iNcVq+Ux3+8YeuGW18ZUEHTEBHF1WV
Get6V1bS4Poj1ZlyNgleKjRPAsO2dWIfrshuqw9vxHsiF8rly2KHWdZxu1wff0lp
24WMXSbWePwAWO88ZHQZREdgcTApOgtOBEZ0SGUisxI29fEN/t8ZyXmTSqA7G4wl
o0XssXJmvO+MsocKRnVb6dJa64TSpqSxfBvctzl+7daENKwA4Ei3zu37TSy0a6XY
rO7T88vgtaVhLgDdxiuVRoN6pKqoIHu/QpJDZnUrRVN/2QrMayCcmUS/DFSgM5T/
XpOr5jzqfMq5MPn9/JyLPcZiZITwFGO8buTMDrEjNY2N2es=
-----END CERTIFICATE-----
Generated at Fri Apr 25 16:59:33 2025 by rpki-client