Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/d-7CSge_pe3FEk_32xB2fcRVKRI.roa
File: d-7CSge_pe3FEk_32xB2fcRVKRI.roa (raw, json)
Hash identifier: +v9QmfaQLxwqZK5xEYuSWX8+bW7pEeSkdgzhuR9A97I=
Subject key identifier: 77:EE:C2:4A:07:BF:A5:ED:C5:12:4F:F7:DB:10:76:7D:C4:55:29:12
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 019420D59C10D08CAB6B7AC06BDF40B08E5A
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/d-7CSge_pe3FEk_32xB2fcRVKRI.roa
Signing time: Wed 01 Jan 2025 07:47:37 +0000
ROA not before: Wed 01 Jan 2025 07:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2287
IP address blocks: 90.84.157.0/24 maxlen: 24
90.84.158.0/24 maxlen: 24
90.84.166.0/24 maxlen: 24
90.84.167.0/24 maxlen: 24
2a01:ceff::/48 maxlen: 48
2a01:ceff:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:9c:10:d0:8c:ab:6b:7a:c0:6b:df:40:b0:8e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 07:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77eec24a07bfa5edc5124ff7db10767dc4552912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:12:59:4e:ce:cf:50:a8:58:b4:f7:3a:d9:36:
90:83:43:4f:23:22:10:7a:d7:7a:19:55:9e:0c:7e:
87:15:d9:e2:39:84:0a:ff:03:21:3c:9c:91:0d:a0:
e4:6e:f4:da:2f:be:b6:14:23:b0:f7:fc:1c:a9:1f:
00:e3:4d:40:1e:a8:86:98:28:13:ff:43:d5:94:4d:
b4:fc:58:47:55:4a:6b:ce:8c:4c:65:9e:14:44:00:
3b:f5:4e:40:61:0a:27:af:1e:94:f0:68:ac:b8:4a:
fb:99:cc:df:31:be:7e:52:f5:64:50:f0:21:64:fb:
4c:3f:2c:ec:be:db:df:2d:67:8f:64:b0:fe:53:ca:
83:34:fe:fe:a6:3e:f5:be:8d:d6:ff:49:fb:2c:54:
9c:7f:30:93:be:d1:25:a7:80:1a:00:e9:bc:3a:b5:
d0:c5:88:e2:42:48:2e:06:b3:a5:bf:81:2b:c3:90:
d1:fc:4e:4c:92:81:d4:1e:b3:5c:ca:b2:a3:a0:f6:
88:40:48:3c:85:1e:c6:f0:8d:78:3f:ee:98:33:bc:
4c:e9:91:d3:ad:dd:1d:e1:8c:bd:13:61:44:20:d2:
44:d1:9a:d9:71:39:ca:30:f8:f1:2d:b8:51:92:e9:
27:51:5b:16:5e:69:ed:90:6d:2d:2a:16:41:05:b2:
3c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:EE:C2:4A:07:BF:A5:ED:C5:12:4F:F7:DB:10:76:7D:C4:55:29:12
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/d-7CSge_pe3FEk_32xB2fcRVKRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.84.157.0-90.84.158.255
90.84.166.0/23
IPv6:
2a01:ceff::/47
Signature Algorithm: sha256WithRSAEncryption
67:f3:31:73:e1:6c:4f:43:c3:83:17:bb:b6:39:89:99:0a:87:
ca:a2:ee:e2:86:2d:71:a6:7e:ae:38:f9:27:68:d1:8f:2a:00:
97:85:73:dc:aa:80:81:53:4d:fe:24:ee:6c:54:a6:51:d5:36:
61:05:74:98:7f:8f:1f:2d:0e:5c:7f:f9:f2:e3:cb:f6:5a:3e:
dd:9e:cc:f0:90:88:64:67:a0:6c:fc:da:e7:0f:00:f0:20:c6:
b0:62:39:e6:08:b9:28:33:44:3f:07:d2:1a:ba:06:70:94:bb:
f3:65:bb:85:06:68:ad:4e:ce:ec:8f:d2:e3:27:09:c9:44:48:
15:04:06:dd:89:92:0f:d9:d8:6e:af:7b:12:af:82:6f:a3:ef:
42:73:73:67:9f:6f:ab:1d:a2:dc:aa:0d:67:4c:6e:31:c0:d5:
6d:16:82:49:6b:18:a6:35:c1:49:7b:83:e8:39:0c:08:44:5c:
5e:46:6a:7d:6b:3e:3e:98:e3:45:07:e7:f1:03:bc:64:05:e3:
2a:93:c4:81:71:2b:10:bd:61:b9:c2:92:26:37:0e:db:14:bf:
6e:6b:91:0d:f9:4d:89:4a:cf:81:51:06:f0:96:6d:e8:99:d5:
ee:7b:4a:5c:e8:11:ea:af:a5:13:c7:d2:72:46:c0:a3:fd:d7:
71:16:ff:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:10:05 2025 by rpki-client