Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/m0kgiTT_WYsp23pJuD7SLX4KQwM.roa
File: m0kgiTT_WYsp23pJuD7SLX4KQwM.roa (raw, json)
Hash identifier: VIdUf2MaaJNNuBUU6XlHsX2gourJRTd5TApzwygVz+Y=
Subject key identifier: 9B:49:20:89:34:FF:59:8B:29:DB:7A:49:B8:3E:D2:2D:7E:0A:43:03
Certificate issuer: /CN=3bdfd7604dfa0eb8ae20e90fcf130393b8a8564a
Certificate serial: 019425223C370A0CCA2AC7A5F96057F3D4A0
Authority key identifier: 3B:DF:D7:60:4D:FA:0E:B8:AE:20:E9:0F:CF:13:03:93:B8:A8:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/m0kgiTT_WYsp23pJuD7SLX4KQwM.roa
Signing time: Thu 02 Jan 2025 03:49:48 +0000
ROA not before: Thu 02 Jan 2025 03:49:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34987
IP address blocks: 185.90.4.0/24 maxlen: 24
185.90.5.0/24 maxlen: 24
185.90.6.0/24 maxlen: 24
185.90.7.0/24 maxlen: 24
2a05:dd00::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:3c:37:0a:0c:ca:2a:c7:a5:f9:60:57:f3:d4:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bdfd7604dfa0eb8ae20e90fcf130393b8a8564a
Validity
Not Before: Jan 2 03:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b49208934ff598b29db7a49b83ed22d7e0a4303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:97:ed:eb:f2:23:e9:de:96:88:e3:7f:75:73:
8a:3d:92:b7:76:e0:c1:b0:d8:6b:32:fc:92:14:57:
e8:bb:48:7b:d5:03:77:71:e8:78:84:6d:bd:71:e1:
c2:b6:3b:ca:9d:ea:f7:f6:2f:d2:0e:da:43:16:30:
48:f1:d6:13:6b:e9:d7:9d:61:05:64:99:af:47:0c:
2e:d7:7a:43:cb:47:56:96:ca:dc:eb:ed:29:7f:71:
48:64:9b:4d:a4:9d:af:4e:e9:32:bc:e8:5b:a7:cb:
c7:a0:2e:0c:1a:e8:cb:18:4d:51:7d:72:12:ce:64:
5e:f8:7d:f0:1b:40:f3:53:af:b0:a9:8b:bd:9d:a1:
19:14:85:ce:35:18:ad:83:e7:56:d9:2f:a0:c4:58:
4a:56:ed:19:da:ba:1c:8c:96:57:45:3b:d4:7d:ee:
51:f7:ab:98:0a:22:b2:77:ab:f7:92:6f:a8:85:38:
8a:c9:c5:21:2a:1a:2e:66:c9:a6:c5:71:8e:c3:03:
c3:bb:ad:95:cc:8f:22:db:54:86:b5:65:26:32:6a:
df:62:2b:57:eb:58:d0:6b:cc:c2:28:c7:f8:1d:9a:
66:28:cf:73:0d:1f:bf:49:cf:a5:5a:67:6b:9d:a5:
73:a6:64:84:0b:63:e3:2c:59:15:3b:1d:e9:68:bc:
ef:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:49:20:89:34:FF:59:8B:29:DB:7A:49:B8:3E:D2:2D:7E:0A:43:03
X509v3 Authority Key Identifier:
keyid:3B:DF:D7:60:4D:FA:0E:B8:AE:20:E9:0F:CF:13:03:93:B8:A8:56:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/m0kgiTT_WYsp23pJuD7SLX4KQwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.90.4.0/22
IPv6:
2a05:dd00::/29
Signature Algorithm: sha256WithRSAEncryption
b4:1d:21:d7:23:73:bb:69:75:d7:21:95:0c:0b:3f:18:9b:48:
b8:70:89:ce:93:7f:12:98:0e:68:eb:d6:48:cc:af:db:1e:a3:
67:78:52:20:48:2f:7c:05:8c:27:b0:87:6a:4a:3a:52:82:41:
16:6b:d5:b9:a2:1f:78:09:db:73:0e:ed:bd:89:97:15:d1:36:
da:96:8c:9d:f1:78:2e:31:ad:61:ad:0a:81:cb:ce:cc:42:e4:
e3:3e:66:b3:a9:43:0d:7b:cd:32:82:0f:53:35:15:2a:51:7c:
82:89:aa:8d:fb:fd:97:92:79:77:ec:ce:cc:87:44:f8:64:be:
f1:96:77:a2:36:80:9a:ad:35:83:89:07:5d:e6:e5:17:9e:53:
44:30:db:50:c2:a9:66:d3:20:61:b2:d0:f7:62:53:bc:e7:0f:
12:2c:81:b0:6a:e2:14:a6:4a:6c:30:f1:2e:9e:08:c7:25:67:
87:2d:36:21:47:8a:3f:ab:87:0e:e8:e7:8e:f1:21:9d:92:e8:
78:3f:ea:71:24:dc:30:7c:9d:f5:78:f8:ad:78:b7:a5:a0:62:
99:a1:30:3d:10:6a:9c:9b:b3:24:d5:d0:83:b8:9f:6f:ae:7a:
ed:f7:c8:65:2f:a1:26:b8:a7:ee:78:4b:fc:db:50:11:b5:50:
c5:5f:46:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:57:34 2025 by rpki-client