Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/OdTJWj9XoUMV__wd_V3PMScZHvM.roa
File: OdTJWj9XoUMV__wd_V3PMScZHvM.roa (raw, json)
Hash identifier: AWCzzo9+0IJc3qVNtJEYK1jLMTktq7/ArkrNgUrGCEc=
Subject key identifier: 39:D4:C9:5A:3F:57:A1:43:15:FF:FC:1D:FD:5D:CF:31:27:19:1E:F3
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0194266C7D0E278BB7DD0557FE356C831A83
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/OdTJWj9XoUMV__wd_V3PMScZHvM.roa
Signing time: Thu 02 Jan 2025 09:50:31 +0000
ROA not before: Thu 02 Jan 2025 09:50:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48190
IP address blocks: 90.150.64.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:7d:0e:27:8b:b7:dd:05:57:fe:35:6c:83:1a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 09:50:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39d4c95a3f57a14315fffc1dfd5dcf3127191ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:18:f7:75:6b:57:07:b8:5f:8e:ab:2a:40:50:
0a:87:a8:16:2f:95:e7:55:9a:31:23:7b:65:bb:38:
b5:bd:48:ee:cb:c7:55:68:4b:f5:d5:49:f0:6d:ea:
71:bd:00:c9:a1:6c:88:b8:8c:41:56:14:95:e1:62:
83:36:28:58:64:18:c2:94:d6:c9:d2:43:c0:aa:84:
e4:41:c9:b1:e7:8e:0e:2d:bc:ca:ba:28:15:08:64:
a1:8d:47:21:7f:e3:93:8d:70:41:4d:28:33:c2:40:
93:19:e2:2b:5a:90:2c:e9:82:ab:63:12:f4:b0:e8:
bc:90:e0:b9:e8:35:3d:9b:f6:9c:ee:ad:f2:90:e7:
1c:8d:61:42:5f:4b:77:97:33:8e:f1:f3:f4:fa:98:
bd:ed:d8:75:35:0b:3f:b0:79:ae:72:db:77:69:2e:
98:aa:15:85:87:f8:61:2c:8c:e9:7a:53:75:ca:94:
31:b0:99:0a:e3:95:6d:e5:0e:ac:3e:60:f0:f1:b3:
a2:d4:59:06:89:98:74:54:b5:df:58:10:c4:10:d4:
bb:c9:28:73:29:d9:19:59:d8:ec:55:75:4f:90:ec:
13:95:cd:3b:8d:cd:31:40:73:69:7c:1d:c1:56:c7:
36:ee:06:5f:e3:90:ec:61:8e:f3:ab:eb:7c:62:bc:
66:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D4:C9:5A:3F:57:A1:43:15:FF:FC:1D:FD:5D:CF:31:27:19:1E:F3
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/OdTJWj9XoUMV__wd_V3PMScZHvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.150.64.0/20
Signature Algorithm: sha256WithRSAEncryption
85:4e:42:61:d4:79:50:c6:5e:f8:85:90:05:65:13:bd:ab:93:
89:64:90:69:3f:07:05:d8:fe:7b:88:49:d8:d8:01:8b:6c:53:
0d:b8:be:f9:a8:5a:46:37:76:11:c1:22:c5:a4:f8:65:ad:71:
49:2f:34:bf:ca:6d:98:04:33:82:cb:7e:a6:fb:1a:d7:da:ff:
8c:a4:17:94:eb:6e:a2:7d:6b:8f:7d:3b:28:a0:83:f0:8a:a1:
1b:2a:18:65:56:64:05:d0:b2:c2:c6:af:2f:b2:f5:3b:78:41:
4e:47:de:c8:f9:dd:7c:06:79:ed:82:28:03:b0:0b:a5:ca:11:
1f:3f:2e:4f:88:ba:44:fb:8e:4a:1e:2c:2b:56:1b:1d:e4:d4:
c9:54:8c:89:35:c8:c4:40:6a:4c:fd:d3:26:01:88:7b:a4:2d:
53:1c:28:33:f4:c1:fe:3e:26:eb:b8:fa:78:f5:d5:80:68:20:
5b:1c:54:aa:7c:0c:64:77:92:da:55:b7:85:92:7d:38:f1:08:
7e:14:f3:4b:28:c1:ab:27:6e:5e:09:db:51:ae:c5:03:55:d3:
fb:e6:e4:ce:c8:7a:aa:51:1f:01:7c:6a:2f:d1:cc:c2:43:31:
6b:6e:1b:2f:25:3d:79:8c:bc:83:18:bc:60:49:a9:44:f2:e3:
46:04:75:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:25 2025 by rpki-client