Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/P_efas48rvkeOWLowealn6FM2EU.roa
File: P_efas48rvkeOWLowealn6FM2EU.roa (raw, json)
Hash identifier: bHQu5iQgYpW7McRBDPs2F3TVgL2C6692qQjIPdJ6jr0=
Subject key identifier: 3F:F7:9F:6A:CE:3C:AE:F9:1E:39:62:E8:C1:E6:A5:9F:A1:4C:D8:45
Certificate issuer: /CN=7d0213e3e7ebe6170a3600a8e3ae64ed962c0e36
Certificate serial: 01942521251A5E0EE1352DA0DBAF9A2DE775
Authority key identifier: 7D:02:13:E3:E7:EB:E6:17:0A:36:00:A8:E3:AE:64:ED:96:2C:0E:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/P_efas48rvkeOWLowealn6FM2EU.roa
Signing time: Thu 02 Jan 2025 03:48:36 +0000
ROA not before: Thu 02 Jan 2025 03:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204099
IP address blocks: 185.29.90.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:25:1a:5e:0e:e1:35:2d:a0:db:af:9a:2d:e7:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0213e3e7ebe6170a3600a8e3ae64ed962c0e36
Validity
Not Before: Jan 2 03:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ff79f6ace3caef91e3962e8c1e6a59fa14cd845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e4:6a:eb:c2:e1:33:ae:90:42:6d:25:d8:3d:
a7:9c:8c:4f:ba:c0:7d:96:1c:6b:04:75:28:a1:5e:
af:52:b7:44:28:7d:24:2b:64:fb:88:05:03:cf:31:
cb:e5:51:79:ff:3e:e2:50:21:9e:79:90:83:e7:63:
8d:6a:2c:e4:b0:ad:31:6c:fa:44:cf:3e:a7:e0:2e:
b4:d6:2e:70:c3:0f:c7:c0:a0:91:a4:02:d5:d6:17:
d6:42:02:50:2a:2c:17:d1:1c:9e:a5:46:b1:07:19:
b3:d1:0f:1e:a7:71:3e:86:8a:58:3b:1f:ae:9b:ff:
f1:0b:f8:cb:c0:f6:67:22:28:a8:aa:66:e7:f1:00:
35:b1:ff:19:b5:72:90:d0:e7:9c:00:b3:3d:00:23:
ae:36:c2:ef:6c:51:2f:51:cb:62:ee:85:bf:76:f9:
a7:a8:52:06:52:c5:2d:36:37:81:28:b8:15:39:8b:
ea:3e:04:b5:38:cf:bc:3a:b2:d5:e7:6f:ad:27:00:
b8:d1:0f:29:7b:91:c3:72:c6:94:f2:9a:ee:ea:41:
e0:9b:f4:60:fc:c0:e9:b5:cf:51:53:86:35:2d:59:
04:ff:47:42:08:54:2f:15:4c:6c:72:23:c4:52:5f:
de:44:ea:5f:d5:f8:56:03:e2:a1:34:16:1e:1d:6e:
10:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F7:9F:6A:CE:3C:AE:F9:1E:39:62:E8:C1:E6:A5:9F:A1:4C:D8:45
X509v3 Authority Key Identifier:
keyid:7D:02:13:E3:E7:EB:E6:17:0A:36:00:A8:E3:AE:64:ED:96:2C:0E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/P_efas48rvkeOWLowealn6FM2EU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.29.90.0/23
Signature Algorithm: sha256WithRSAEncryption
03:c6:fc:15:a7:8b:ed:ef:74:95:d4:71:0b:50:6f:5e:be:05:
de:40:a2:0e:3b:34:38:78:19:49:06:f3:4b:55:4f:25:08:6e:
7c:42:01:2d:8d:e3:f7:8c:f3:6d:37:74:06:d7:cf:29:7c:6d:
c1:c4:4e:2d:5a:14:bc:e4:76:3c:b7:76:94:24:10:87:1c:45:
69:5c:88:2f:1c:98:47:3d:24:49:49:f2:d0:35:dd:b6:5b:2c:
d5:7f:ea:47:1c:32:a2:a0:8d:2a:02:6f:0e:ec:c3:df:f5:0c:
03:04:2c:91:4d:69:fa:dd:f3:4b:39:f5:1c:4d:2d:df:22:47:
e8:33:01:26:5e:a5:24:df:de:74:19:81:96:17:8e:42:c5:a0:
fb:b0:40:13:21:a1:12:ff:c0:29:ae:e1:99:6b:37:a3:b7:1c:
df:0a:b4:ca:45:db:e8:2e:ea:83:11:38:55:2d:88:cb:5a:03:
76:78:89:08:77:0e:f4:44:5e:6b:f8:0c:0e:d1:c4:c9:2b:49:
55:67:b0:de:41:05:44:78:12:09:f7:09:c9:c3:bd:ae:b8:5e:
4e:3b:e2:a8:eb:31:c2:ea:9b:fe:b4:ea:ad:45:c7:37:38:ed:
b5:c1:e7:e9:65:40:86:6c:82:10:81:21:59:dd:ac:2a:e5:ad:
b2:f9:a2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:11:47 2025 by rpki-client