Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/DwTC30oaWKwssRCXrBoUlk9Q5bw.roa
File: DwTC30oaWKwssRCXrBoUlk9Q5bw.roa (raw, json)
Hash identifier: ijzA7vHvds3BxvrPMvxvhrjeIw/3n+d/qJzXMvHrD7s=
Subject key identifier: 0F:04:C2:DF:4A:1A:58:AC:2C:B1:10:97:AC:1A:14:96:4F:50:E5:BC
Certificate issuer: /CN=e4f2a866202f4b8cbc33382d6e82d81d8964c80e
Certificate serial: 01942747A92BB8E3E8E0AA116D04A78A422D
Authority key identifier: E4:F2:A8:66:20:2F:4B:8C:BC:33:38:2D:6E:82:D8:1D:89:64:C8:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5PKoZiAvS4y8MzgtboLYHYlkyA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/DwTC30oaWKwssRCXrBoUlk9Q5bw.roa
Signing time: Thu 02 Jan 2025 13:49:55 +0000
ROA not before: Thu 02 Jan 2025 13:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48807
IP address blocks: 185.90.144.0/22 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:a9:2b:b8:e3:e8:e0:aa:11:6d:04:a7:8a:42:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4f2a866202f4b8cbc33382d6e82d81d8964c80e
Validity
Not Before: Jan 2 13:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f04c2df4a1a58ac2cb11097ac1a14964f50e5bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:31:0b:0b:5b:3e:2b:43:87:f5:43:99:76:1d:
5a:81:2b:b8:cb:b8:e4:ea:78:fc:d9:ee:cc:3c:da:
46:c1:e9:3a:23:ce:8e:fc:66:ef:2f:d6:70:3b:f8:
21:c6:bb:b5:87:f5:0d:07:12:5e:bf:c1:1a:31:6b:
43:5b:60:cb:08:56:e5:22:f5:13:2f:40:44:57:04:
30:07:1a:48:c0:02:6c:20:09:f5:20:c4:f6:0e:98:
44:ce:31:06:52:6d:01:95:f1:8a:c2:8b:29:ca:cb:
24:92:51:39:79:d3:8b:2e:b7:0e:aa:af:45:e9:9d:
79:58:2f:72:6f:c5:78:e7:9d:67:72:8d:1a:bc:59:
fd:85:8a:11:19:72:92:e5:59:cf:33:94:58:2b:6a:
db:2f:8b:69:1b:35:1d:9b:4c:a6:19:86:2b:22:62:
97:5b:84:77:13:30:11:3c:66:e8:c2:92:05:be:a5:
7f:86:4e:5e:05:37:82:2e:9d:99:51:e5:1b:6f:a1:
a9:14:6f:e5:bf:68:b1:81:a2:21:ca:f4:03:fd:59:
c4:9f:94:aa:b6:ad:1a:01:ec:70:7f:c3:65:b1:01:
a9:03:42:91:9b:69:52:64:89:ad:1d:32:27:be:2f:
9a:68:ab:0a:0d:e8:ff:2d:3c:67:92:d8:73:11:46:
b6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:04:C2:DF:4A:1A:58:AC:2C:B1:10:97:AC:1A:14:96:4F:50:E5:BC
X509v3 Authority Key Identifier:
keyid:E4:F2:A8:66:20:2F:4B:8C:BC:33:38:2D:6E:82:D8:1D:89:64:C8:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PKoZiAvS4y8MzgtboLYHYlkyA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/DwTC30oaWKwssRCXrBoUlk9Q5bw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8791a1-e679-4663-a2da-1a513df069fc/1/5PKoZiAvS4y8MzgtboLYHYlkyA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.90.144.0/22
Signature Algorithm: sha256WithRSAEncryption
02:13:5e:29:64:43:ba:58:7f:31:b7:c3:4d:bd:41:cd:99:79:
99:44:75:68:b6:ec:dc:67:8d:af:df:ac:3f:d3:10:af:e7:26:
a5:3d:3e:7c:45:ea:11:a2:47:8c:6d:5b:fa:89:a1:24:7a:db:
b5:18:45:a8:41:ad:7a:44:c3:a4:d1:c9:15:12:9f:23:7a:fb:
19:79:83:0c:ca:75:7d:de:81:2a:bd:ef:0e:54:fd:28:3c:1c:
30:c1:60:d9:f3:5d:3f:b7:d8:43:15:bc:1e:ae:c1:b2:fe:ee:
7d:f4:fd:14:e9:31:18:ae:49:74:b8:b5:4c:bd:78:f5:9d:28:
39:e1:10:6a:78:40:17:51:bf:64:de:8f:3a:1d:14:fe:cb:83:
9a:5e:d0:85:f5:6f:79:59:29:51:0b:21:0c:a1:7e:5e:e9:0c:
2b:60:2f:bb:bc:e3:5a:57:5c:8f:ba:f3:0b:13:e5:71:db:bf:
a3:4a:e9:b4:7b:c8:fb:6a:8e:c3:cf:0b:df:84:f3:61:56:4f:
15:83:51:2e:35:19:87:46:c9:58:ad:43:6a:0a:e9:e5:12:29:
ee:a3:90:ca:45:03:7b:0d:2f:4b:af:82:4d:84:57:2a:c6:40:
98:33:8f:71:51:a8:98:27:c9:02:12:95:d2:0f:a6:a7:c6:47:
49:de:fc:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:20 2025 by rpki-client