Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/aayTQzRiJq9tAMzk8swFje4kTOA.roa
File: aayTQzRiJq9tAMzk8swFje4kTOA.roa (raw, json)
Hash identifier: sZC16XAD3EcE1zhIDvKbW1It71XSPS2OvJcF/8voOKM=
Subject key identifier: 69:AC:93:43:34:62:26:AF:6D:00:CC:E4:F2:CC:05:8D:EE:24:4C:E0
Certificate issuer: /CN=ee1b0899e38a96b54fc4cbcd10ef539c54ed4d38
Certificate serial: 019426D95944FB99BFF1F7BBBD8579BDE5FA
Authority key identifier: EE:1B:08:99:E3:8A:96:B5:4F:C4:CB:CD:10:EF:53:9C:54:ED:4D:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/aayTQzRiJq9tAMzk8swFje4kTOA.roa
Signing time: Thu 02 Jan 2025 11:49:25 +0000
ROA not before: Thu 02 Jan 2025 11:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8789
IP address blocks: 90.155.112.0/20 maxlen: 20
90.155.112.0/21 maxlen: 21
90.155.120.0/21 maxlen: 21
90.155.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:59:44:fb:99:bf:f1:f7:bb:bd:85:79:bd:e5:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1b0899e38a96b54fc4cbcd10ef539c54ed4d38
Validity
Not Before: Jan 2 11:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69ac9343346226af6d00cce4f2cc058dee244ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:36:4a:e8:2a:f3:3b:05:80:a7:ed:58:c7:63:
94:35:33:a3:20:04:14:07:05:36:4b:4a:8b:42:e6:
a1:dc:2e:4f:0e:e2:30:e1:16:c7:fe:9a:11:82:9a:
bf:49:27:9d:5f:cb:ba:fa:d7:2a:d1:99:4f:7f:25:
32:31:6b:45:6b:4c:05:ff:f3:d8:5a:b0:40:c3:4e:
16:fe:51:18:86:4e:67:a5:20:bd:4e:ac:b3:0f:3f:
b1:44:8f:40:7b:07:4c:0e:e6:ae:dd:92:50:29:b3:
88:a9:2d:cd:47:dd:2f:b0:7d:27:2a:0d:79:5d:e6:
2a:5b:f3:4b:10:9a:00:7d:f6:f8:32:ae:28:87:c9:
5f:e9:69:08:2e:97:38:84:2a:e8:02:11:56:8f:e6:
4e:24:ca:a6:64:a4:8d:39:d2:0e:99:58:b7:4d:79:
5a:4b:e2:b1:92:7f:4c:98:d9:6c:4c:9b:ca:ea:d3:
b8:4b:84:b7:9a:a6:4e:5a:f6:fa:84:0f:af:10:e2:
39:95:4d:eb:bc:ae:fb:8d:ec:75:cf:ee:ac:ac:fd:
64:cc:1c:69:97:8d:5f:a5:a9:3e:bb:ab:15:b7:3d:
1e:5b:cd:c1:74:84:db:40:b9:40:fe:7b:ec:b5:c4:
0b:a9:b7:ec:88:f5:1a:b7:59:5a:06:52:08:e3:8b:
87:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:AC:93:43:34:62:26:AF:6D:00:CC:E4:F2:CC:05:8D:EE:24:4C:E0
X509v3 Authority Key Identifier:
keyid:EE:1B:08:99:E3:8A:96:B5:4F:C4:CB:CD:10:EF:53:9C:54:ED:4D:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/aayTQzRiJq9tAMzk8swFje4kTOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.155.112.0/20
Signature Algorithm: sha256WithRSAEncryption
63:9c:3f:22:b4:cf:13:94:50:ff:5e:27:72:69:ee:a7:13:4f:
ef:20:80:ed:06:9e:72:e6:56:4a:26:67:ec:d9:9c:0a:b8:83:
5b:33:d9:0b:6d:d4:ef:ef:d8:e4:cf:e9:31:08:87:27:df:e0:
26:cb:33:91:2e:e1:8c:f7:bd:16:82:4c:5b:aa:15:42:53:e6:
dc:54:0f:b1:89:8a:06:f0:9c:73:ac:c7:cf:8d:71:19:18:b9:
a2:e0:58:43:c8:c6:d2:82:a1:4b:5d:fa:88:74:bb:3c:65:2a:
5a:4d:b9:ad:43:a1:47:53:58:1b:3a:53:6b:0f:58:8f:95:1f:
59:b5:6d:b5:6b:c0:ed:69:02:05:11:9d:d5:8b:19:8a:dd:e0:
21:b1:d4:96:5c:c1:30:ee:01:86:55:26:47:0d:b7:eb:6f:fd:
1a:3f:40:21:8b:62:02:99:31:da:5c:b7:24:89:94:05:2a:5f:
d4:6e:dc:27:f8:4b:72:ea:59:61:bb:7b:e1:b5:07:2b:b6:77:
16:67:72:64:48:50:11:24:e5:d8:b5:68:6e:0a:f8:1b:8e:a0:
7f:f4:5a:9e:a6:88:bd:54:69:11:7a:4f:64:90:37:be:ed:93:
8c:d4:61:90:82:70:57:ba:06:a5:5e:b7:56:65:38:57:19:fc:
3b:d9:63:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:16:27 2025 by rpki-client