Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/FtnpIr2pujhwajP_siKFZdhKHhk.roa
File: FtnpIr2pujhwajP_siKFZdhKHhk.roa (raw, json)
Hash identifier: q2tZyUsnrVDVgYlVos7MxOQuJnOA8CAJo2C/in3BKag=
Subject key identifier: 16:D9:E9:22:BD:A9:BA:38:70:6A:33:FF:B2:22:85:65:D8:4A:1E:19
Certificate issuer: /CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef
Certificate serial: 0194258F03E6443062502FF393E037857346
Authority key identifier: 08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/FtnpIr2pujhwajP_siKFZdhKHhk.roa
Signing time: Thu 02 Jan 2025 05:48:37 +0000
ROA not before: Thu 02 Jan 2025 05:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42229
IP address blocks: 185.1.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:03:e6:44:30:62:50:2f:f3:93:e0:37:85:73:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef
Validity
Not Before: Jan 2 05:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16d9e922bda9ba38706a33ffb2228565d84a1e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a0:bd:72:30:76:f7:2a:99:48:21:b3:f0:61:
0b:00:a1:22:7f:3e:35:02:e1:ec:25:8c:75:df:e4:
11:e1:ad:f7:0d:51:b8:67:23:95:13:40:73:28:34:
5b:a4:53:ee:32:52:5f:63:4b:8e:f4:f1:ac:1b:24:
c2:f0:fd:d4:4d:1d:65:27:a0:e6:6d:78:61:b2:90:
1d:03:db:8b:2a:02:f2:d9:ac:d5:03:7f:08:4c:0f:
1b:fe:0f:9b:33:29:e8:8c:04:f2:1c:2a:8d:67:59:
9c:85:79:d0:03:1a:8f:50:8b:bf:91:c3:38:35:3d:
d2:b5:bc:d1:8d:89:ab:41:85:4c:aa:0d:f1:1c:0b:
3b:6a:6b:b1:74:12:53:19:e6:0f:70:2e:8b:eb:d6:
2b:47:9c:68:11:e8:ef:df:2d:88:b0:92:6c:02:58:
6f:c8:ad:d1:dc:c9:ac:6f:69:11:5b:3a:07:89:83:
94:02:c7:2c:27:34:0d:a1:19:39:87:18:25:50:d3:
3d:08:cc:a2:54:ea:83:24:0d:9e:53:ca:10:5c:3c:
25:ee:cc:67:86:24:7f:49:ae:9b:44:92:56:68:a7:
8e:c5:bd:0f:91:20:4d:98:26:18:1c:a6:62:14:2f:
e9:3e:83:5f:b2:9b:9e:40:91:6b:ec:9a:55:ba:49:
46:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D9:E9:22:BD:A9:BA:38:70:6A:33:FF:B2:22:85:65:D8:4A:1E:19
X509v3 Authority Key Identifier:
keyid:08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/FtnpIr2pujhwajP_siKFZdhKHhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.90.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:a7:fa:a2:3f:e4:fe:06:b4:65:9e:6a:d9:52:bc:87:de:61:
c8:4a:ac:b6:a8:fa:3b:23:8d:a3:cc:9a:ec:b1:6b:0b:68:69:
a5:30:89:9f:35:cd:20:e5:01:dd:ac:58:2e:ad:26:1c:d7:1a:
6e:15:76:c7:c2:83:b7:64:db:cd:2b:a1:6e:62:ba:96:61:0c:
6d:ba:93:2f:53:b1:5c:5a:2b:f2:2c:9f:b8:d0:3f:1f:7e:29:
6d:c4:d4:4c:23:62:68:14:48:48:51:9b:7c:d6:bf:90:c4:eb:
47:79:ed:79:85:18:ec:bc:cd:1d:b9:55:e5:c4:c2:38:55:50:
b9:51:5b:8e:f9:1c:85:0b:c6:de:47:ab:fe:cf:53:ad:4a:7d:
30:3b:2e:f4:23:d3:ec:2e:80:2c:53:b6:ff:18:cd:74:5a:68:
0e:cb:5d:fa:82:25:34:ba:06:bf:32:a6:43:0a:49:75:89:4a:
76:af:7c:e9:5c:c0:3d:c3:03:4a:08:76:5c:e1:dd:c5:ee:67:
6a:62:ab:c5:39:ac:3e:82:0a:9d:5c:fa:08:7b:0b:26:34:bb:
01:00:f8:62:37:a4:d2:bd:7d:d2:be:0b:51:19:bc:49:6a:c2:
f3:c5:1f:21:43:40:35:2c:8c:d2:b7:91:0e:47:c5:b9:13:5c:
ed:5b:d9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:40:21 2025 by rpki-client