Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/TmGH7yXkMz-v6gHvCr9qE37nKcA.roa
File: TmGH7yXkMz-v6gHvCr9qE37nKcA.roa (raw, json)
Hash identifier: n1u54C/BtvIrlKmaScJ2jkmbHT4HONn1UuTucKaDW6g=
Subject key identifier: 4E:61:87:EF:25:E4:33:3F:AF:EA:01:EF:0A:BF:6A:13:7E:E7:29:C0
Certificate issuer: /CN=e55b1a4f1942e4b1d894cbc8cf09073d02890170
Certificate serial: 0194258FB640AD87F537E4E7B44C35D9FFB1
Authority key identifier: E5:5B:1A:4F:19:42:E4:B1:D8:94:CB:C8:CF:09:07:3D:02:89:01:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/TmGH7yXkMz-v6gHvCr9qE37nKcA.roa
Signing time: Thu 02 Jan 2025 05:49:22 +0000
ROA not before: Thu 02 Jan 2025 05:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20836
IP address blocks: 185.112.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:b6:40:ad:87:f5:37:e4:e7:b4:4c:35:d9:ff:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e55b1a4f1942e4b1d894cbc8cf09073d02890170
Validity
Not Before: Jan 2 05:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e6187ef25e4333fafea01ef0abf6a137ee729c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6e:5d:8b:29:82:fb:fe:7c:15:6b:3c:c1:a0:
ea:bb:5e:bd:3a:f0:e0:5b:d2:a6:ef:22:72:31:fc:
3a:b0:e1:60:c8:94:27:63:ed:62:bb:90:ef:6a:9b:
4a:e9:12:17:d5:a1:02:22:ed:22:24:de:8a:7a:7e:
9e:99:81:b7:9c:9a:83:a5:dd:4e:b8:79:df:5b:5e:
e2:cd:6c:07:80:dd:e8:13:76:d5:f8:c4:b5:37:52:
9c:c4:1f:5f:5a:18:ec:e3:24:90:19:ac:12:18:f5:
e9:e6:66:e5:34:2d:32:e2:95:51:10:18:d4:84:80:
f2:80:cb:e2:77:20:f8:82:ed:7a:dd:d2:1b:9f:16:
e3:11:9b:b1:1c:33:88:91:81:63:b9:b6:ce:70:4e:
36:49:7e:d1:d4:e2:e0:b2:a7:ce:f7:04:b3:4c:fe:
cb:ff:53:ff:af:6e:8a:ec:93:28:f2:86:78:e6:b2:
13:06:4a:24:c2:6e:79:6c:39:77:cb:a4:eb:c2:80:
dd:e4:9e:b5:e0:a1:e8:3f:9c:cb:5a:be:39:68:e4:
3e:ed:43:d0:e6:d4:e2:8f:87:98:88:dd:0b:ea:1d:
30:bb:a5:dd:a3:f9:55:58:61:82:5b:c1:4e:ab:81:
00:73:8e:fe:08:0a:e4:a3:37:d0:2a:2c:0b:c7:b9:
f5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:61:87:EF:25:E4:33:3F:AF:EA:01:EF:0A:BF:6A:13:7E:E7:29:C0
X509v3 Authority Key Identifier:
keyid:E5:5B:1A:4F:19:42:E4:B1:D8:94:CB:C8:CF:09:07:3D:02:89:01:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/TmGH7yXkMz-v6gHvCr9qE37nKcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.90.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:8e:db:ad:5d:2f:c0:a7:4b:64:30:89:91:81:d7:19:50:6f:
4b:37:3d:92:a4:70:da:16:62:21:e1:57:4a:71:52:0b:98:bd:
a1:61:ac:76:b4:72:80:cb:a4:5a:f9:af:b2:18:08:ec:44:70:
23:1c:2f:06:35:e8:e0:e6:26:ea:89:36:5e:1f:8f:9d:75:8b:
f5:a0:c8:36:cc:f3:ce:24:12:d3:82:80:0f:e2:75:b7:73:4a:
3b:99:70:5b:4c:7b:75:b1:a9:35:6d:05:e2:d8:4e:ff:d1:36:
7f:c8:49:62:f4:da:f7:64:a4:a9:01:a2:d3:43:46:0b:7b:2d:
d4:56:de:fd:f4:15:60:dd:55:d3:31:2e:df:34:d0:58:63:66:
93:bf:22:9d:f3:76:93:26:f8:36:3f:5c:90:aa:a2:fc:97:92:
0c:9e:6f:c3:fd:f0:f0:ee:27:ea:6b:ec:e7:bd:ba:d0:d2:f4:
74:50:75:43:06:2a:50:e9:55:15:df:56:d7:c8:ef:58:1e:e8:
a9:c5:06:63:d2:87:0c:7b:22:86:b4:9e:13:35:d6:74:94:fc:
90:ad:ca:84:21:cf:77:70:59:65:a8:3e:14:f5:8a:19:c6:76:
64:c0:10:97:6f:24:ee:63:b8:eb:92:70:3a:d1:e1:2b:bd:f8:
d8:27:f1:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:09:00 2025 by rpki-client