Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d107de-e2e5-4727-98ad-3821810344e6/1/1uzWQ6awmKNhFk5o-ROmUN7PMdw.roa
File: 1uzWQ6awmKNhFk5o-ROmUN7PMdw.roa (raw, json)
Hash identifier: ugBZ6xSbRGY+1IcSG9pM1xES6ma58HW31MSkxtobsTU=
Subject key identifier: D6:EC:D6:43:A6:B0:98:A3:61:16:4E:68:F9:13:A6:50:DE:CF:31:DC
Certificate issuer: /CN=5df53645843e6d2883dc8f9c4f415c1eadbbf60a
Certificate serial: 0185733144AD467086EA5B700E26AC344144
Authority key identifier: 5D:F5:36:45:84:3E:6D:28:83:DC:8F:9C:4F:41:5C:1E:AD:BB:F6:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfU2RYQ-bSiD3I-cT0FcHq279go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d107de-e2e5-4727-98ad-3821810344e6/1/1uzWQ6awmKNhFk5o-ROmUN7PMdw.roa
Signing time: Mon 02 Jan 2023 15:54:46 +0000
ROA not before: Mon 02 Jan 2023 15:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212806
IP address blocks: 185.175.90.0/24 maxlen: 24
2a10:4740:40::/42 maxlen: 42
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:31:44:ad:46:70:86:ea:5b:70:0e:26:ac:34:41:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df53645843e6d2883dc8f9c4f415c1eadbbf60a
Validity
Not Before: Jan 2 15:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6ecd643a6b098a361164e68f913a650decf31dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:33:34:04:32:98:70:ff:76:bb:61:25:a0:6d:
c2:0d:19:8f:73:65:04:8f:78:67:37:86:38:eb:84:
f5:6a:46:b8:87:82:7b:c5:65:50:bc:0c:f4:1f:bd:
2b:4f:d4:ea:d6:f8:87:1f:44:2b:79:a2:94:f5:7c:
df:b2:f9:25:85:10:01:91:c6:f6:44:e0:b7:4e:9a:
f9:9d:c9:de:94:e7:70:17:9a:50:a1:4b:a4:0d:32:
40:42:a3:88:27:81:f9:11:f5:30:a7:0f:b8:b1:b3:
2a:e6:c2:c0:bf:6d:51:b7:d6:f4:49:c0:5e:23:4c:
ce:36:8c:ca:84:dc:15:80:d1:18:c5:35:3c:56:e7:
84:f5:4a:57:bd:57:a1:f6:15:d5:21:07:f8:48:82:
f2:78:96:b4:52:c0:e4:2b:73:3d:41:35:e2:7d:e4:
e1:6e:6a:05:39:47:0e:3b:cc:36:d5:98:dc:4b:48:
2a:73:5c:f7:12:bd:00:14:6b:fd:5a:68:31:fe:1e:
11:60:d0:05:a8:99:6c:c3:90:7d:4c:a9:f0:f4:af:
09:81:74:5e:b1:df:a9:88:3d:4c:0d:80:55:22:c6:
4f:a6:3f:cb:c5:5d:0d:22:30:fa:a7:ab:0a:cd:fe:
1c:99:c3:f7:09:9c:2b:96:5c:de:9f:d2:3d:5c:86:
0c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:EC:D6:43:A6:B0:98:A3:61:16:4E:68:F9:13:A6:50:DE:CF:31:DC
X509v3 Authority Key Identifier:
keyid:5D:F5:36:45:84:3E:6D:28:83:DC:8F:9C:4F:41:5C:1E:AD:BB:F6:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfU2RYQ-bSiD3I-cT0FcHq279go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d107de-e2e5-4727-98ad-3821810344e6/1/1uzWQ6awmKNhFk5o-ROmUN7PMdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d107de-e2e5-4727-98ad-3821810344e6/1/XfU2RYQ-bSiD3I-cT0FcHq279go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.175.90.0/24
IPv6:
2a10:4740:40::/42
Signature Algorithm: sha256WithRSAEncryption
6c:a0:83:96:e4:d4:5a:08:77:4d:5c:63:81:3c:de:a3:28:18:
7e:0c:60:45:29:8d:32:88:28:4e:19:ab:d2:66:13:3a:97:66:
2e:b3:7f:2c:a3:f2:11:73:2c:fe:f3:f1:97:45:0f:15:97:12:
5d:c2:74:b8:80:26:b3:2a:fc:b2:60:86:71:ff:e0:19:92:43:
3c:d7:eb:d9:e5:85:9d:3b:74:eb:9b:c2:60:c8:2e:39:df:e9:
e0:dc:d7:cd:ca:f8:94:16:e1:7c:26:5a:07:5e:cb:22:8b:8a:
f7:22:e6:4a:ca:a5:58:e2:d8:bc:41:ff:71:9c:c2:79:54:6d:
2f:3e:b0:37:ad:06:c5:78:bc:20:eb:59:18:fd:93:99:c4:30:
bf:1e:b5:76:7b:49:a7:f2:7d:42:1d:6d:f0:94:c5:67:55:51:
4b:33:68:fc:6d:46:a6:4f:f1:9c:e6:e8:e4:ed:70:3f:b9:7a:
a3:28:00:4c:7a:eb:99:74:4e:31:97:94:db:b0:7e:cd:16:8f:
3c:e6:29:1e:bd:0d:23:9f:80:4f:39:f6:82:21:8c:bb:4f:ab:
a2:90:dc:5c:08:da:c2:8c:fc:8c:de:6f:69:36:6c:4e:ba:4b:
ec:5e:35:88:1c:84:dd:f6:84:e4:8a:9c:0f:20:67:24:6f:e3:
55:0a:d4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:57:40 2025 by rpki-client