Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/3ac043-9914-4a7d-96f4-799c3697e89e/1/deBMS2BbTIhafXdA2au9aBp9kUI.roa
File: deBMS2BbTIhafXdA2au9aBp9kUI.roa (raw, json)
Hash identifier: mxzI0bwbiSXQRsQNnHuE55CmXzRZJW6Q7L5O3IJizuk=
Subject key identifier: 75:E0:4C:4B:60:5B:4C:88:5A:7D:77:40:D9:AB:BD:68:1A:7D:91:42
Certificate issuer: /CN=754d54115d17dc1eeab1669a080062180a768e22
Certificate serial: 03B25B3E
Authority key identifier: 75:4D:54:11:5D:17:DC:1E:EA:B1:66:9A:08:00:62:18:0A:76:8E:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dU1UEV0X3B7qsWaaCABiGAp2jiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/3ac043-9914-4a7d-96f4-799c3697e89e/1/deBMS2BbTIhafXdA2au9aBp9kUI.roa
Signing time: Sat 01 Jan 2022 13:03:41 +0000
ROA not before: Sat 01 Jan 2022 13:03:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39910
IP address blocks: 185.203.90.0/24 maxlen: 24
2a10:7a40::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62020414 (0x3b25b3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=754d54115d17dc1eeab1669a080062180a768e22
Validity
Not Before: Jan 1 13:03:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=75e04c4b605b4c885a7d7740d9abbd681a7d9142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ee:9c:13:be:eb:bf:08:e0:41:dc:46:c8:60:
d5:b2:d7:6c:ad:29:a0:73:76:1a:df:18:e4:e1:f6:
06:3a:c2:3b:5e:5b:37:fc:4d:b7:16:ac:e4:e0:63:
f3:be:80:ff:68:5c:94:a4:f3:27:92:8e:1e:8a:70:
a3:c4:d1:e1:e5:90:20:17:1e:fb:c7:84:6b:4a:51:
b3:6f:c4:06:6f:a4:79:08:d6:ca:59:ff:8e:67:9e:
0e:33:a2:61:53:88:f9:18:67:62:b3:8c:58:95:8c:
f7:de:b0:f1:3a:d6:0f:15:44:51:0a:8f:ca:f8:08:
45:38:b1:02:11:0b:52:45:85:61:8a:3c:cf:1d:5b:
87:1e:6b:ed:5d:0c:bd:12:73:81:5b:2f:95:8c:34:
7a:73:8d:d4:77:3e:17:2f:f4:0a:b9:44:4e:b3:6e:
35:1b:7e:06:e5:4f:50:2d:2a:61:01:6e:cc:41:7c:
a7:2f:a7:71:51:ab:10:da:88:7f:46:e2:16:b2:77:
1f:4d:c5:ad:b7:da:81:f6:25:12:7c:f9:86:29:1e:
0e:7b:1e:9c:16:d0:8f:72:c8:bb:31:17:5c:bc:e6:
65:51:f3:bf:16:00:b6:fa:b3:80:eb:df:32:76:63:
0e:7e:15:c5:a6:f0:38:89:40:92:c8:a7:38:d8:81:
20:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E0:4C:4B:60:5B:4C:88:5A:7D:77:40:D9:AB:BD:68:1A:7D:91:42
X509v3 Authority Key Identifier:
keyid:75:4D:54:11:5D:17:DC:1E:EA:B1:66:9A:08:00:62:18:0A:76:8E:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dU1UEV0X3B7qsWaaCABiGAp2jiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3ac043-9914-4a7d-96f4-799c3697e89e/1/deBMS2BbTIhafXdA2au9aBp9kUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3ac043-9914-4a7d-96f4-799c3697e89e/1/dU1UEV0X3B7qsWaaCABiGAp2jiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.90.0/24
IPv6:
2a10:7a40::/29
Signature Algorithm: sha256WithRSAEncryption
a9:c3:c2:ca:c3:fd:b9:84:0c:ed:4e:68:2a:12:19:82:87:58:
9c:61:47:69:e1:11:ce:7d:33:5f:b6:57:b5:18:f5:8a:38:32:
6c:0c:a6:f8:50:f5:a1:86:54:2f:92:be:40:19:96:aa:5a:80:
56:e7:b9:f5:8c:0a:f3:5e:54:01:06:3d:87:07:f9:d5:0c:2f:
30:c3:15:da:49:2c:2e:e5:c8:2c:d2:97:3e:6a:0c:5e:e5:08:
47:b9:f2:ed:26:b0:cc:07:24:2e:f1:68:a7:21:5c:28:8e:a4:
78:0c:de:16:40:26:dc:48:4e:17:56:18:8b:fe:b8:4c:58:9e:
23:ac:58:88:fe:5d:a5:d5:f1:9b:70:dd:bd:76:be:f6:ef:5b:
b9:2d:84:27:cd:d1:2d:20:d1:0e:68:ef:19:dc:3f:98:b4:9a:
3c:3f:50:e1:38:e0:8a:20:6f:61:96:eb:12:1a:62:68:01:94:
a4:b8:c9:65:f2:34:32:71:6e:c7:90:14:01:9f:c1:5d:1e:ff:
f1:9a:6a:07:52:80:fc:3d:40:af:dd:7a:dc:6e:3c:98:8a:bb:
53:99:9d:fe:b5:32:f2:91:c4:c7:01:60:78:45:5e:ad:ba:69:
ba:01:b5:d6:6c:12:6c:50:f4:fb:87:bd:23:a8:46:ad:96:c8:
a1:f3:ae:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:21 2025 by rpki-client