Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/kPsQz3rZGj0NaY5zaOwAOAGfhzw.roa
File: kPsQz3rZGj0NaY5zaOwAOAGfhzw.roa (raw, json)
Hash identifier: t4mIO0DzkdS2UrnCzo5GKYBcHXxNS07JIm04JWEYKII=
Subject key identifier: 90:FB:10:CF:7A:D9:1A:3D:0D:69:8E:73:68:EC:00:38:01:9F:87:3C
Certificate issuer: /CN=e208ecb9f34c1fbc3f3589710ab3e349fc6295cc
Certificate serial: 0194244573FD0A2B09F1A459BE335E81AEF2
Authority key identifier: E2:08:EC:B9:F3:4C:1F:BC:3F:35:89:71:0A:B3:E3:49:FC:62:95:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gjsufNMH7w_NYlxCrPjSfxilcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/kPsQz3rZGj0NaY5zaOwAOAGfhzw.roa
Signing time: Wed 01 Jan 2025 23:48:38 +0000
ROA not before: Wed 01 Jan 2025 23:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2856
IP address blocks: 91.90.125.0/24 maxlen: 24
91.90.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:73:fd:0a:2b:09:f1:a4:59:be:33:5e:81:ae:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e208ecb9f34c1fbc3f3589710ab3e349fc6295cc
Validity
Not Before: Jan 1 23:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=90fb10cf7ad91a3d0d698e7368ec0038019f873c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:20:4f:bc:79:78:ca:26:5a:a2:8d:dc:8b:ce:
b8:77:62:3c:a1:4c:95:43:c1:8a:89:12:2a:c3:27:
84:f4:69:b0:6c:c4:fa:fd:74:da:16:dc:d1:c2:a7:
96:7a:e6:9d:00:da:71:19:53:1b:19:2e:79:ae:4c:
14:ac:a9:8c:19:7b:5e:36:8a:f8:28:fe:23:af:8d:
ba:95:13:f0:52:12:e0:1c:e8:8b:64:8c:d5:6d:3c:
4e:e2:9d:7c:6f:4c:dc:65:5b:49:0a:7d:ba:0d:a4:
40:88:81:f8:54:0b:07:7e:7c:78:bc:b5:6d:08:a2:
70:e7:34:11:3f:a4:63:e1:4a:e9:b7:0d:f5:45:1b:
c4:37:be:78:1a:68:5d:b0:d5:60:1e:29:69:3e:da:
a2:2d:86:dd:a3:a8:a2:3f:cf:b9:96:ae:78:94:0a:
62:bc:8d:c8:69:cf:6c:87:cf:ec:bc:f2:5e:7a:c2:
6a:f6:fd:81:87:3e:62:ec:e5:e2:55:34:b3:e2:e2:
6f:bd:46:44:c2:b3:18:16:7f:80:43:39:8b:15:7f:
08:45:20:6c:34:a5:70:0b:89:6d:1f:6b:58:6c:e3:
c2:a2:4e:35:95:13:3d:d3:3b:e9:76:d0:35:96:8f:
45:71:f2:de:ab:6d:71:24:5e:14:29:91:00:eb:af:
07:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:FB:10:CF:7A:D9:1A:3D:0D:69:8E:73:68:EC:00:38:01:9F:87:3C
X509v3 Authority Key Identifier:
keyid:E2:08:EC:B9:F3:4C:1F:BC:3F:35:89:71:0A:B3:E3:49:FC:62:95:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gjsufNMH7w_NYlxCrPjSfxilcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/kPsQz3rZGj0NaY5zaOwAOAGfhzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/4gjsufNMH7w_NYlxCrPjSfxilcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.90.125.0/24
91.90.127.0/24
Signature Algorithm: sha256WithRSAEncryption
82:4a:48:14:f2:18:3c:cb:04:48:86:09:45:0a:56:75:4d:43:
3a:ac:58:81:ed:6a:62:40:ad:2e:81:d0:62:83:d3:6c:1f:c2:
3c:00:0a:13:70:e9:0d:f4:83:be:8b:0b:ce:e0:f4:2a:60:0e:
3e:4f:a5:12:18:10:05:82:a5:5b:b4:2d:76:9b:31:61:8b:d7:
85:44:d4:9b:48:69:86:4f:d7:7b:e3:7c:ec:ba:79:1e:91:3a:
20:2f:6f:c6:a9:11:ad:17:60:ed:8d:12:dc:c6:24:07:ff:af:
e0:39:9a:3b:07:40:66:ad:37:77:5b:e4:40:b8:18:3c:9c:af:
ff:17:6a:6b:e5:a5:11:e4:19:64:73:f1:07:0b:b2:d5:4f:cc:
f7:55:08:ff:2e:70:5a:1a:b9:67:eb:82:b2:7d:c3:07:96:b6:
37:d0:44:6b:3b:51:d2:2a:e6:8b:7b:e7:f8:45:f9:dc:d8:5c:
67:f2:5b:56:8b:19:e7:22:37:15:9d:f4:85:00:a9:35:4f:58:
c1:73:3f:25:4e:ac:4b:8c:65:37:8f:e0:31:dc:52:1c:9a:4b:
19:53:62:8f:4b:2c:5e:b4:26:ca:aa:16:a6:f6:53:db:bf:c8:
f3:17:49:ba:80:91:06:4a:5a:9b:ea:c0:16:f6:13:09:ef:16:
07:07:0f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 16:29:18 2025 by rpki-client