Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/eTSGbM90RwI5mmDiAfeQq1tr3uY.roa
File: eTSGbM90RwI5mmDiAfeQq1tr3uY.roa (raw, json)
Hash identifier: Z3ARgNB2gdroKhId6j9/sVdTHM1Y23fh2zHIni+idcQ=
Subject key identifier: 79:34:86:6C:CF:74:47:02:39:9A:60:E2:01:F7:90:AB:5B:6B:DE:E6
Certificate issuer: /CN=a26855980b273e5ae57dc1b9eb22e9f5f3a7cdf7
Certificate serial: 0194282446AEF9254E8F4914059FC3B571BE
Authority key identifier: A2:68:55:98:0B:27:3E:5A:E5:7D:C1:B9:EB:22:E9:F5:F3:A7:CD:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/omhVmAsnPlrlfcG56yLp9fOnzfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/eTSGbM90RwI5mmDiAfeQq1tr3uY.roa
Signing time: Thu 02 Jan 2025 17:50:53 +0000
ROA not before: Thu 02 Jan 2025 17:50:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137
IP address blocks: 90.147.0.0/16 maxlen: 16
138.41.0.0/16 maxlen: 16
185.191.180.0/22 maxlen: 22
192.167.0.0/16 maxlen: 16
192.167.59.0/24 maxlen: 24
193.204.0.0/15 maxlen: 15
193.205.16.0/20 maxlen: 20
193.206.0.0/16 maxlen: 16
212.189.128.0/17 maxlen: 17
2001:760::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:46:ae:f9:25:4e:8f:49:14:05:9f:c3:b5:71:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a26855980b273e5ae57dc1b9eb22e9f5f3a7cdf7
Validity
Not Before: Jan 2 17:50:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7934866ccf744702399a60e201f790ab5b6bdee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:91:16:12:ea:d9:fd:37:6c:92:58:9a:bc:cc:
fd:ea:b0:2d:21:5a:f4:df:01:50:ba:12:9e:6f:23:
a6:cc:40:53:ba:9d:fe:19:41:d0:96:d4:b8:35:76:
f0:29:e8:a0:42:6a:00:24:ae:ed:d0:90:d7:fb:5c:
06:a6:69:72:75:e1:44:bd:6c:86:bc:96:4e:68:b4:
cc:af:db:91:56:d0:3c:ec:cd:ff:ff:59:30:e2:4e:
0c:1a:1d:82:c8:88:eb:aa:63:c2:ce:57:7c:a3:ff:
29:1e:12:c3:27:72:f2:70:37:c3:fe:3f:b1:01:a8:
17:79:27:06:95:46:8d:55:a8:b1:98:15:a0:69:48:
71:0c:17:51:c3:85:25:d0:63:57:23:3c:b3:3d:6d:
7c:4a:ba:69:57:70:9b:d2:01:21:f5:6c:d0:ce:0c:
1a:f1:b7:f5:55:67:0e:60:3e:96:48:d4:38:30:72:
71:d8:6e:11:b5:4f:7f:43:13:45:39:e8:27:eb:61:
7b:f6:fd:6d:12:ae:da:50:f8:1e:fb:42:c0:85:a7:
b3:a8:dd:d5:e7:77:af:a7:48:3c:04:56:1c:30:9c:
21:df:35:e3:b0:f8:96:74:9c:72:2a:6c:bb:9c:55:
f1:ce:13:9d:e4:1d:3d:2b:cf:aa:32:9d:a6:b9:8f:
34:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:34:86:6C:CF:74:47:02:39:9A:60:E2:01:F7:90:AB:5B:6B:DE:E6
X509v3 Authority Key Identifier:
keyid:A2:68:55:98:0B:27:3E:5A:E5:7D:C1:B9:EB:22:E9:F5:F3:A7:CD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/omhVmAsnPlrlfcG56yLp9fOnzfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/eTSGbM90RwI5mmDiAfeQq1tr3uY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8afdda-6c6b-4587-8a21-81eb61f5b71e/1/omhVmAsnPlrlfcG56yLp9fOnzfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.147.0.0/16
138.41.0.0/16
185.191.180.0/22
192.167.0.0/16
193.204.0.0-193.206.255.255
212.189.128.0/17
IPv6:
2001:760::/32
Signature Algorithm: sha256WithRSAEncryption
45:af:65:c2:06:70:ff:a3:f5:e9:d9:db:79:c9:b9:04:d3:80:
c1:43:ee:5e:40:ff:a3:62:70:19:87:33:bc:0f:9a:0c:56:bd:
10:1d:4c:10:63:e5:b8:8f:33:2d:85:10:ec:c1:0d:16:19:96:
5f:18:37:89:ed:c6:da:d9:27:43:3b:06:7a:bd:3f:b2:be:c5:
01:ce:6a:cc:23:1f:1c:37:61:4b:de:6e:11:72:b0:01:36:b4:
54:13:67:ba:39:b9:9e:f5:bf:7b:23:97:c8:59:29:b6:ae:79:
43:1b:cb:f1:47:ee:9b:1c:3c:a0:be:21:18:52:6d:1e:80:b5:
f6:9b:28:10:47:db:ae:96:99:47:42:86:be:a2:f5:ff:22:5b:
ac:6a:c8:61:b6:44:51:6c:5d:01:4b:89:7c:a0:ff:17:f8:30:
b1:d2:ba:80:1a:17:32:17:51:a2:d9:09:ab:34:69:e7:7d:fc:
05:25:f6:d5:da:cc:bc:6f:8e:6f:a1:b2:8e:ed:6b:68:78:1c:
48:c5:cc:2b:03:e1:90:de:cf:a3:fb:09:74:c2:ef:1d:86:07:
5f:32:be:2c:37:34:e5:a5:d9:09:96:73:3b:7e:ba:2a:d4:5e:
25:ac:c3:06:62:2f:e5:02:9e:6a:dd:c8:44:ae:69:ec:e2:8e:
92:45:82:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 02:19:47 2025 by rpki-client