Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/90NkAjkP5P3wZwJqnXSO9AQDG_M.roa
File: 90NkAjkP5P3wZwJqnXSO9AQDG_M.roa (raw, json)
Hash identifier: eK7yCOQkJI1NI1OGTayx19wjsA64ORHdInhLei4bvc8=
Subject key identifier: F7:43:64:02:39:0F:E4:FD:F0:67:02:6A:9D:74:8E:F4:04:03:1B:F3
Certificate issuer: /CN=c546e15819eacd05bccebf80019ca3cb7c4a38e0
Certificate serial: 019427481C4F4B5B4A14BB9F88035515209D
Authority key identifier: C5:46:E1:58:19:EA:CD:05:BC:CE:BF:80:01:9C:A3:CB:7C:4A:38:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/90NkAjkP5P3wZwJqnXSO9AQDG_M.roa
Signing time: Thu 02 Jan 2025 13:50:24 +0000
ROA not before: Thu 02 Jan 2025 13:50:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203137
IP address blocks: 185.130.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:1c:4f:4b:5b:4a:14:bb:9f:88:03:55:15:20:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c546e15819eacd05bccebf80019ca3cb7c4a38e0
Validity
Not Before: Jan 2 13:50:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7436402390fe4fdf067026a9d748ef404031bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fb:b1:b9:45:70:cf:05:78:5c:a1:5f:ea:3b:
13:bb:e0:ec:64:95:f6:f2:ef:1f:54:de:71:a3:93:
e6:37:c6:38:9a:1f:dc:b3:36:2e:0d:43:85:90:37:
85:87:2a:d9:93:65:48:4a:7d:c1:3b:63:77:7c:88:
20:8b:ce:73:13:88:57:c8:0f:f1:b4:f0:f6:76:5e:
15:07:b2:05:e6:92:87:fe:44:0b:99:ce:d0:53:f0:
a7:98:7a:5e:b0:95:1e:4d:bc:74:82:79:02:a1:44:
88:32:ce:0c:53:78:09:82:3c:30:10:ee:f9:0c:fc:
92:44:c8:1d:86:87:dd:7e:c3:2e:73:15:45:cc:8f:
c2:b0:fb:3a:6b:77:0f:44:fb:94:e2:01:43:da:14:
09:4f:8c:05:0e:24:83:74:b2:d2:97:59:28:80:02:
89:37:81:ec:b1:26:08:07:e7:55:74:0e:c8:4a:62:
58:1e:74:a8:69:28:44:66:88:c8:cc:ff:f0:78:8d:
c1:07:0d:3e:e2:4e:23:11:f8:d6:85:09:fc:07:4b:
e3:5e:28:40:29:93:ea:ef:9f:32:01:e5:6b:41:a4:
94:b8:f9:2d:44:91:cc:ab:b1:0d:2a:95:ca:93:aa:
35:be:ef:0c:5b:1a:f1:3c:f4:b5:d8:53:32:03:fe:
0b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:43:64:02:39:0F:E4:FD:F0:67:02:6A:9D:74:8E:F4:04:03:1B:F3
X509v3 Authority Key Identifier:
keyid:C5:46:E1:58:19:EA:CD:05:BC:CE:BF:80:01:9C:A3:CB:7C:4A:38:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/90NkAjkP5P3wZwJqnXSO9AQDG_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.179.0/24
Signature Algorithm: sha256WithRSAEncryption
06:96:d2:13:51:49:73:96:97:5d:9a:f7:50:5b:4a:ed:2f:9b:
1c:16:56:57:4f:dc:28:0f:d7:11:97:f8:f1:b4:d9:b0:bd:70:
93:5e:a0:56:c6:a1:48:67:f8:63:df:d8:e8:bd:92:3b:be:38:
13:a5:8e:f9:de:05:ce:26:d0:28:ec:88:35:33:5b:9e:fc:ad:
3d:d4:97:9d:b7:1d:d3:46:90:0c:a7:7f:bb:ed:f7:2e:10:9f:
b3:d2:b4:24:f8:b7:ac:b0:b9:d6:35:58:f8:d7:a4:69:f7:06:
3f:18:29:58:dd:c2:44:97:ab:39:4f:5d:ae:16:08:66:70:eb:
d7:01:fc:f6:03:d8:fd:bc:28:08:86:1e:52:74:f7:07:00:89:
af:c4:b8:ea:f9:63:22:c3:9c:b2:2e:08:cb:8d:c2:c6:b7:88:
61:4a:a7:a4:4c:dd:6f:aa:ae:12:22:83:d3:e3:7c:07:a4:40:
33:bd:0d:77:89:88:77:ec:14:27:c2:60:00:b5:7d:09:5a:c6:
6a:76:03:ab:d2:61:4c:e4:80:b0:80:ec:05:57:4d:0c:cb:5c:
a4:58:10:92:11:1d:87:e3:af:13:5e:d0:fc:06:35:0f:aa:de:
ae:fd:a2:a3:c4:f9:6f:ec:05:02:2b:5c:67:33:ad:34:f8:5f:
93:0f:4d:d9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnSBxPS1tKFLufiANVFSCdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1NDZlMTU4MTllYWNkMDViY2NlYmY4MDAxOWNhM2NiN2M0
YTM4ZTAwHhcNMjUwMTAyMTM1MDI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzQzNjQwMjM5MGZlNGZkZjA2NzAyNmE5ZDc0OGVmNDA0MDMxYmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPuxuUVwzwV4XKFf6jsTu+DsZJX2
8u8fVN5xo5PmN8Y4mh/cszYuDUOFkDeFhyrZk2VISn3BO2N3fIggi85zE4hXyA/x
tPD2dl4VB7IF5pKH/kQLmc7QU/CnmHpesJUeTbx0gnkCoUSIMs4MU3gJgjwwEO75
DPySRMgdhofdfsMucxVFzI/CsPs6a3cPRPuU4gFD2hQJT4wFDiSDdLLSl1kogAKJ
N4HssSYIB+dVdA7ISmJYHnSoaShEZojIzP/weI3BBw0+4k4jEfjWhQn8B0vjXihA
KZPq758yAeVrQaSUuPktRJHMq7ENKpXKk6o1vu8MWxrxPPS12FMyA/4L5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPdDZAI5D+T98GcCap10jvQEAxvzMB8GA1UdIwQY
MBaAFMVG4VgZ6s0FvM6/gAGco8t8SjjgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFViaFdCbnF6UVc4enItQUFaeWp5M3hLT09BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9mOTVhYzUtMGI4Yi00NWQ2LWJlOWEt
MmRiMjI0NWYyOTg1LzEvOTBOa0Fqa1A1UDN3WndKcW5YU085QVFER19NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9mOTVhYzUtMGI4Yi00NWQ2LWJlOWEtMmRiMjI0NWYyOTg1
LzEveFViaFdCbnF6UVc4enItQUFaeWp5M3hLT09BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYKzMA0G
CSqGSIb3DQEBCwUAA4IBAQAGltITUUlzlpddmvdQW0rtL5scFlZXT9woD9cRl/jx
tNmwvXCTXqBWxqFIZ/hj39jovZI7vjgTpY753gXOJtAo7Ig1M1ue/K091Jedtx3T
RpAMp3+77fcuEJ+z0rQk+LessLnWNVj416Rp9wY/GClY3cJEl6s5T12uFghmcOvX
Afz2A9j9vCgIhh5SdPcHAImvxLjq+WMiw5yyLgjLjcLGt4hhSqekTN1vqq4SIoPT
43wHpEAzvQ13iYh37BQnwmAAtX0JWsZqdgOr0mFM5ICwgOwFV00My1ykWBCSER2H
468TXtD8BjUPqt6u/aKjxPlv7AUCK1xnM600+F+TD03Z
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:37 2025 by rpki-client