Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/SMYfuR1vOqwT0gbQyB5G9SKEcQs.roa
File: SMYfuR1vOqwT0gbQyB5G9SKEcQs.roa (raw, json)
Hash identifier: 790cASmrwFRWvIHgSFvW34RkdQVbe9565zpCVGOf6tw=
Subject key identifier: 48:C6:1F:B9:1D:6F:3A:AC:13:D2:06:D0:C8:1E:46:F5:22:84:71:0B
Certificate issuer: /CN=36c7b44e7c5f29b9dea402ac805160b298cf0da6
Certificate serial: 019420D5E161A8CFAE22909228CDBA604259
Authority key identifier: 36:C7:B4:4E:7C:5F:29:B9:DE:A4:02:AC:80:51:60:B2:98:CF:0D:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nse0TnxfKbnepAKsgFFgspjPDaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/SMYfuR1vOqwT0gbQyB5G9SKEcQs.roa
Signing time: Wed 01 Jan 2025 07:47:55 +0000
ROA not before: Wed 01 Jan 2025 07:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200941
IP address blocks: 185.90.172.0/24 maxlen: 24
185.90.173.0/24 maxlen: 24
185.90.174.0/24 maxlen: 24
185.90.175.0/24 maxlen: 24
2a05:e180::/32 maxlen: 32
2a05:e181::/32 maxlen: 32
2a05:e186::/32 maxlen: 32
2a05:e187::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:e1:61:a8:cf:ae:22:90:92:28:cd:ba:60:42:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c7b44e7c5f29b9dea402ac805160b298cf0da6
Validity
Not Before: Jan 1 07:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48c61fb91d6f3aac13d206d0c81e46f52284710b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c9:ce:c4:6e:fe:8a:c6:8c:45:33:b5:b9:4d:
88:ec:08:51:16:5b:54:f0:3b:f1:79:4f:ea:47:9b:
46:94:ed:f9:85:fb:d6:79:a6:c7:61:04:d4:6c:c2:
e6:e0:15:78:98:a3:8a:15:88:23:75:26:1d:80:1f:
06:b6:d6:fe:11:53:0e:93:04:54:c1:35:9b:b0:60:
ee:21:3f:41:16:a4:33:54:ee:7f:54:4a:3d:d3:c4:
77:9c:b3:b1:65:f5:b8:f5:ac:11:3a:29:e6:9f:e2:
1a:8f:ad:20:86:cd:b9:21:ea:2b:c7:cb:87:a4:f5:
c1:62:14:53:e9:06:8c:91:21:3f:21:77:f6:ee:98:
df:38:de:d3:1b:0d:c1:cf:75:85:c8:1d:db:fd:eb:
37:1f:f0:b0:27:2d:2b:00:d8:b5:6f:c5:27:f0:64:
20:3f:49:ca:6c:5e:28:b0:1c:41:7b:3f:b4:c0:60:
fa:27:a3:79:ee:e7:db:44:64:fd:e9:2d:dd:6e:08:
41:ab:c4:37:66:ad:cc:85:b0:d1:97:aa:6f:a8:35:
73:33:f5:8a:17:fa:8d:4e:83:84:6c:47:36:08:6e:
de:b6:a9:86:fa:fb:a4:da:3b:08:78:c9:de:8f:3c:
b6:07:4f:fa:d3:37:29:67:e4:29:01:fd:99:dc:ec:
97:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C6:1F:B9:1D:6F:3A:AC:13:D2:06:D0:C8:1E:46:F5:22:84:71:0B
X509v3 Authority Key Identifier:
keyid:36:C7:B4:4E:7C:5F:29:B9:DE:A4:02:AC:80:51:60:B2:98:CF:0D:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nse0TnxfKbnepAKsgFFgspjPDaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/SMYfuR1vOqwT0gbQyB5G9SKEcQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.90.172.0/22
IPv6:
2a05:e180::/31
2a05:e186::/31
Signature Algorithm: sha256WithRSAEncryption
5b:cc:2e:23:26:b7:99:8c:c6:32:dc:7b:2b:50:7b:9f:76:e4:
61:3b:77:b7:30:7a:d1:c5:3d:1a:30:b6:46:50:ca:53:7e:10:
d9:81:e7:69:eb:df:29:61:19:7e:15:5d:f7:02:aa:48:71:a3:
ab:d5:f3:0b:8a:4d:43:14:cf:29:72:01:7b:42:73:9f:03:e1:
ac:17:f2:32:13:a9:58:3f:4f:80:4f:82:88:7c:21:52:93:66:
b8:05:86:3a:d0:f9:89:10:fc:28:22:58:69:18:7d:c8:1f:7c:
e7:f1:32:21:b4:d6:5e:66:13:56:d2:83:cb:f1:eb:a4:b3:61:
34:47:b2:c0:fd:78:e8:c0:55:c2:e7:20:83:cb:b8:28:bc:71:
02:5f:fd:38:0d:cd:69:ba:d9:66:a3:24:a7:83:88:28:60:eb:
7b:3e:bc:db:29:36:48:f1:d2:b9:34:3f:ae:89:65:5f:43:c6:
3c:53:36:a6:d6:30:6c:69:ff:2f:00:df:6a:9d:72:18:7c:be:
5b:df:8b:a0:10:b7:2a:95:b2:ef:f0:8e:0d:94:45:76:2f:99:
f7:57:be:e2:45:61:cb:81:74:49:03:96:46:0d:94:c4:df:d7:
a6:17:16:13:5b:a2:40:25:4f:7a:c2:59:cc:b6:9b:7e:99:0a:
36:f9:fc:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:11:05 2025 by rpki-client