Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/3rgYqGqnZPklgITV-WBujJljFBU.roa
File: 3rgYqGqnZPklgITV-WBujJljFBU.roa (raw, json)
Hash identifier: Tp2azEsxKTsu2hz5GpPNvovvsk7VOiHcGA1gooaCoRs=
Subject key identifier: DE:B8:18:A8:6A:A7:64:F9:25:80:84:D5:F9:60:6E:8C:99:63:14:15
Certificate issuer: /CN=94ca595385505455b8cb1d90e946ef7b0b6f5d3f
Certificate serial: 01942521F83CC698A1223DF2E7FE9A4E9525
Authority key identifier: 94:CA:59:53:85:50:54:55:B8:CB:1D:90:E9:46:EF:7B:0B:6F:5D:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lMpZU4VQVFW4yx2Q6UbvewtvXT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/3rgYqGqnZPklgITV-WBujJljFBU.roa
Signing time: Thu 02 Jan 2025 03:49:30 +0000
ROA not before: Thu 02 Jan 2025 03:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212637
IP address blocks: 185.190.90.0/24 maxlen: 24
2a13:500::/32 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:f8:3c:c6:98:a1:22:3d:f2:e7:fe:9a:4e:95:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94ca595385505455b8cb1d90e946ef7b0b6f5d3f
Validity
Not Before: Jan 2 03:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=deb818a86aa764f9258084d5f9606e8c99631415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:48:c7:47:6c:f3:31:be:86:db:f3:57:e6:14:
0a:d6:c7:5d:0b:f5:33:32:11:4c:5f:f9:c9:7e:c5:
2e:2e:d9:7c:1c:59:fa:84:81:d5:04:dd:91:d0:88:
d1:a6:eb:51:86:0c:56:5a:e6:cd:81:4c:c8:da:d9:
89:18:0c:63:52:08:25:cf:63:47:84:2c:00:a1:22:
55:12:2e:f9:06:82:26:77:be:fd:bf:cc:47:04:a9:
da:45:3f:9e:cf:44:f1:1f:e2:6c:fa:1b:cc:fa:61:
87:cb:c3:e2:d5:57:b5:46:8b:24:d2:3f:a9:12:8a:
03:4b:9c:c8:17:43:da:ce:f8:fa:ab:2c:73:c1:ce:
ac:18:4c:50:d4:aa:24:d3:0c:07:1a:4d:1b:4f:5b:
21:31:85:54:cd:fd:54:09:e4:a1:51:8a:89:9a:de:
b9:7b:40:42:95:38:06:09:a7:37:28:29:5d:76:19:
1c:97:80:57:33:7a:de:83:08:64:b7:42:57:ee:7a:
96:47:6b:0d:df:8c:c7:35:29:b8:fe:35:70:1e:48:
1f:21:46:61:2f:e3:b1:89:be:c5:ab:d9:7d:03:0f:
10:87:de:7f:fa:3a:5c:b2:92:f9:af:af:93:58:52:
91:32:79:a6:f0:7a:6e:8d:36:69:8a:6f:8a:cd:06:
59:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B8:18:A8:6A:A7:64:F9:25:80:84:D5:F9:60:6E:8C:99:63:14:15
X509v3 Authority Key Identifier:
keyid:94:CA:59:53:85:50:54:55:B8:CB:1D:90:E9:46:EF:7B:0B:6F:5D:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lMpZU4VQVFW4yx2Q6UbvewtvXT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/3rgYqGqnZPklgITV-WBujJljFBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.90.0/24
IPv6:
2a13:500::/32
Signature Algorithm: sha256WithRSAEncryption
27:56:7e:ce:0e:f5:1c:2d:18:5c:f4:4c:48:bc:29:af:3f:5c:
c1:99:1f:57:93:8b:29:f1:3e:9c:0c:ae:8c:d3:a5:31:a9:37:
d8:40:5b:44:58:1e:22:2f:b6:4b:66:94:5e:fb:a1:1a:bc:dd:
f4:2a:44:17:51:88:26:09:50:1b:eb:72:a5:0c:26:30:06:59:
38:ae:98:c5:b2:79:1f:90:46:08:bc:c6:d2:40:f5:9c:85:3d:
cc:61:06:0d:ef:b4:86:f3:28:ca:3c:ea:e5:43:17:0e:11:74:
bc:8d:b4:cf:f2:fb:c2:3b:cb:34:f0:78:bb:83:b4:32:0e:3a:
8f:46:10:39:ca:91:53:8b:51:b7:b0:84:e1:d6:da:d6:26:5d:
1b:2e:43:38:16:22:7f:8c:cb:17:9a:99:88:82:f6:e7:0f:92:
3f:60:c4:fc:c0:28:ab:43:25:2d:b9:2e:c8:43:88:d0:bf:e3:
b3:42:07:6e:58:88:9b:ed:7b:fc:dc:dd:16:5c:45:f9:e0:a7:
b0:e2:84:41:e5:05:95:b3:1a:20:16:b0:f1:06:87:45:68:e5:
39:9c:74:30:01:0a:a2:d5:30:49:c8:c9:e9:8e:06:ea:15:16:
93:37:9d:45:0c:af:16:4e:be:bd:03:52:89:60:90:27:78:c3:
ba:73:60:4d
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQlIfg8xpihIj3y5/6aTpUlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0Y2E1OTUzODU1MDU0NTViOGNiMWQ5MGU5NDZlZjdiMGI2
ZjVkM2YwHhcNMjUwMTAyMDM0OTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZWI4MThhODZhYTc2NGY5MjU4MDg0ZDVmOTYwNmU4Yzk5NjMxNDE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UjHR2zzMb6G2/NX5hQK1sddC/Uz
MhFMX/nJfsUuLtl8HFn6hIHVBN2R0IjRputRhgxWWubNgUzI2tmJGAxjUgglz2NH
hCwAoSJVEi75BoImd779v8xHBKnaRT+ez0TxH+Js+hvM+mGHy8Pi1Ve1Rosk0j+p
EooDS5zIF0Pazvj6qyxzwc6sGExQ1Kok0wwHGk0bT1shMYVUzf1UCeShUYqJmt65
e0BClTgGCac3KClddhkcl4BXM3regwhkt0JX7nqWR2sN34zHNSm4/jVwHkgfIUZh
L+Oxib7Fq9l9Aw8Qh95/+jpcspL5r6+TWFKRMnmm8HpujTZpim+KzQZZmwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFN64GKhqp2T5JYCE1flgboyZYxQVMB8GA1UdIwQY
MBaAFJTKWVOFUFRVuMsdkOlG73sLb10/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbE1wWlU0VlFWRlc0eXgyUTZVYnZld3R2WFQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS81ODkyZDEtNmY1MS00Y2IzLTkzZTIt
MGYwNDk0Y2E2ZDJjLzEvM3JnWXFHcW5aUGtsZ0lUVi1XQnVqSmxqRkJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS81ODkyZDEtNmY1MS00Y2IzLTkzZTItMGYwNDk0Y2E2ZDJj
LzEvbE1wWlU0VlFWRlc0eXgyUTZVYnZld3R2WFQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAub5aMA0E
AgACMAcDBQAqEwUAMA0GCSqGSIb3DQEBCwUAA4IBAQAnVn7ODvUcLRhc9ExIvCmv
P1zBmR9Xk4sp8T6cDK6M06UxqTfYQFtEWB4iL7ZLZpRe+6EavN30KkQXUYgmCVAb
63KlDCYwBlk4rpjFsnkfkEYIvMbSQPWchT3MYQYN77SG8yjKPOrlQxcOEXS8jbTP
8vvCO8s08Hi7g7QyDjqPRhA5ypFTi1G3sITh1trWJl0bLkM4FiJ/jMsXmpmIgvbn
D5I/YMT8wCirQyUtuS7IQ4jQv+OzQgduWIib7Xv83N0WXEX54Kew4oRB5QWVsxog
FrDxBodFaOU5nHQwAQqi1TBJyMnpjgbqFRaTN51FDK8WTr69A1KJYJAneMO6c2BN
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:50:37 2025 by rpki-client