Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/yNgJ74PHW6j6ShCLYVR80g-qs28.roa
File: yNgJ74PHW6j6ShCLYVR80g-qs28.roa (raw, json)
Hash identifier: NFcociFY8RbRnIP6feXbGFrUtff0WpEOuuopuN1v+Ok=
Subject key identifier: C8:D8:09:EF:83:C7:5B:A8:FA:4A:10:8B:61:54:7C:D2:0F:AA:B3:6F
Certificate issuer: /CN=f6090b4db06a4d65935141bac98098127a8b8f5a
Certificate serial: 019423699E0DB5E5F9131F78BFE03C985168
Authority key identifier: F6:09:0B:4D:B0:6A:4D:65:93:51:41:BA:C9:80:98:12:7A:8B:8F:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/yNgJ74PHW6j6ShCLYVR80g-qs28.roa
Signing time: Wed 01 Jan 2025 19:48:31 +0000
ROA not before: Wed 01 Jan 2025 19:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206804
IP address blocks: 185.90.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:9e:0d:b5:e5:f9:13:1f:78:bf:e0:3c:98:51:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6090b4db06a4d65935141bac98098127a8b8f5a
Validity
Not Before: Jan 1 19:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8d809ef83c75ba8fa4a108b61547cd20faab36f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:72:4f:a3:1c:dc:d8:f2:84:ca:d2:4c:45:fb:
70:00:4d:1d:17:b6:67:82:d8:35:e8:3f:48:5a:d3:
4d:87:c9:46:96:2f:4d:60:9f:cb:35:0c:32:cb:87:
4a:df:6e:90:fb:15:e0:4c:b9:89:23:35:11:e2:21:
81:ba:a5:81:fb:c4:69:b7:69:9c:e8:d9:fa:20:39:
c4:c5:35:50:10:bb:03:07:c1:ac:65:0d:8b:9a:c2:
9d:39:27:d8:9b:f5:be:b4:cf:35:e2:7d:a4:55:29:
e9:a5:2f:2a:9b:33:97:d3:0d:01:92:e1:0d:3e:d1:
bf:00:7f:f5:32:9b:c8:13:57:87:9a:49:72:7e:83:
71:4c:a0:f2:e8:c7:14:00:a1:13:18:a4:6c:32:7f:
cd:7f:85:5e:37:54:04:5d:8b:de:c5:0c:38:04:c3:
01:99:bc:66:7a:0f:00:e3:f3:9b:83:d9:d8:1b:e5:
5c:5b:e8:83:59:06:e7:91:c0:49:3d:b8:e3:4f:72:
28:6e:8a:78:b4:8d:b9:89:76:35:5c:1a:86:e6:04:
ac:ce:e4:bf:3f:2c:a9:4f:26:e9:2b:ac:14:58:8a:
26:12:53:da:69:56:69:0d:5e:02:07:1c:a5:4b:9a:
8b:48:14:82:0f:1c:f5:c5:31:03:d5:df:a7:0b:3b:
77:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D8:09:EF:83:C7:5B:A8:FA:4A:10:8B:61:54:7C:D2:0F:AA:B3:6F
X509v3 Authority Key Identifier:
keyid:F6:09:0B:4D:B0:6A:4D:65:93:51:41:BA:C9:80:98:12:7A:8B:8F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/yNgJ74PHW6j6ShCLYVR80g-qs28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.90.60.0/24
Signature Algorithm: sha256WithRSAEncryption
92:60:45:97:97:ea:20:55:66:fe:82:6b:7a:d4:9a:e4:9a:99:
c1:4b:bb:e8:bd:00:6c:a7:5e:77:83:4f:64:3d:c8:da:63:e5:
ce:69:a0:d6:b2:c9:26:be:64:d0:3c:f2:46:95:a5:09:7f:cb:
c9:d6:8e:ae:c2:1c:c0:5b:c7:11:62:44:40:06:af:8f:a7:01:
61:f7:4e:96:20:b9:2f:1e:1c:17:fd:d0:29:14:90:6d:d8:e0:
7c:33:60:76:3f:d5:d8:b1:2c:f8:f3:a0:b3:77:b7:60:2f:7d:
dc:6c:85:2e:43:9d:6f:02:aa:13:54:b7:04:ff:f0:b8:6d:32:
1f:21:91:f1:e9:77:8a:e7:a7:ac:59:ba:d3:2b:47:e4:3e:c9:
03:fa:55:99:53:da:f3:70:f2:0f:65:39:f5:27:98:5f:64:e9:
04:94:04:32:04:0e:cf:db:f9:3a:9f:96:c6:f1:99:3f:75:69:
95:b1:0f:3b:69:fc:64:87:bb:04:c4:fd:c7:9b:d8:b3:7a:a6:
a3:7d:0e:aa:4f:84:56:72:65:56:ea:08:5c:2b:af:1d:18:7b:
1e:7d:e8:52:b2:50:ec:6d:96:cc:c4:24:df:81:bf:38:a4:27:
63:29:0e:d6:00:ca:bb:26:03:4b:b8:83:0e:aa:1a:31:51:7b:
f1:24:0e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:21 2025 by rpki-client