Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/IbRWuE5EQO-8LgU2mAsS5QizVAY.roa
File: IbRWuE5EQO-8LgU2mAsS5QizVAY.roa (raw, json)
Hash identifier: s+vcUKeYVky97TEOonv9opKh34KAYu2tRcLDRkyQ5gI=
Subject key identifier: 21:B4:56:B8:4E:44:40:EF:BC:2E:05:36:98:0B:12:E5:08:B3:54:06
Certificate issuer: /CN=30aff75209684a354669061d23da29f8ea2f1d5e
Certificate serial: 019424B2974D2900CE9AC449A7942A7474F4
Authority key identifier: 30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/IbRWuE5EQO-8LgU2mAsS5QizVAY.roa
Signing time: Thu 02 Jan 2025 01:47:51 +0000
ROA not before: Thu 02 Jan 2025 01:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202305
IP address blocks: 185.90.208.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:97:4d:29:00:ce:9a:c4:49:a7:94:2a:74:74:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30aff75209684a354669061d23da29f8ea2f1d5e
Validity
Not Before: Jan 2 01:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21b456b84e4440efbc2e0536980b12e508b35406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6c:67:7f:07:1c:97:1f:5a:6d:48:80:d1:26:
fd:9f:b3:a3:9c:0e:c0:c4:0b:a5:5f:ef:fe:17:8b:
1e:3f:ea:0c:fe:c0:1e:3b:01:56:24:96:bf:28:88:
ee:e9:55:32:2b:db:21:55:7a:8c:1e:5e:4f:f8:b1:
da:0e:22:b5:79:78:3b:7b:2b:44:e8:d1:9e:23:40:
b3:65:f4:31:03:91:b8:2a:30:4a:1c:fb:49:e2:52:
ec:a0:8a:57:c0:c3:a7:f7:a9:71:d7:b1:06:02:35:
87:5f:11:11:f9:d5:78:22:60:93:1e:a3:68:70:44:
bc:02:0f:e4:0b:33:3b:70:f3:14:a1:21:3a:33:2a:
d1:53:b6:d2:01:a6:40:36:9b:84:5d:f5:8d:71:17:
4c:17:bf:c3:0c:c7:2b:d4:ba:ef:74:f3:33:32:11:
7e:f5:b5:f7:97:98:57:5e:d6:3b:44:c5:9f:86:83:
73:ae:c1:02:d3:7b:ee:f3:91:fe:83:c9:58:10:c4:
7f:fb:d0:40:3e:e6:94:5b:56:63:95:9f:a8:34:36:
ce:3d:9d:35:b8:41:a1:5f:41:28:b7:8d:6a:d6:4d:
f2:98:a6:3c:fd:ad:75:53:93:5c:7b:2b:34:75:34:
44:04:02:3a:16:dc:15:9f:fe:6c:c0:75:3d:d3:6c:
f8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B4:56:B8:4E:44:40:EF:BC:2E:05:36:98:0B:12:E5:08:B3:54:06
X509v3 Authority Key Identifier:
keyid:30:AF:F7:52:09:68:4A:35:46:69:06:1D:23:DA:29:F8:EA:2F:1D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK_3UgloSjVGaQYdI9op-OovHV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/IbRWuE5EQO-8LgU2mAsS5QizVAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/844a25-a8df-4561-b3e7-9785a335542a/1/MK_3UgloSjVGaQYdI9op-OovHV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.90.208.0/22
Signature Algorithm: sha256WithRSAEncryption
77:a0:5a:54:2f:38:1c:87:e0:4a:05:09:db:be:78:e3:84:a2:
7e:06:cf:b0:51:af:c2:b2:18:ab:ac:cb:5e:1e:bd:d3:b5:39:
1e:0b:c2:b0:d6:3f:7c:7d:aa:4b:58:0a:2e:b8:28:74:87:b6:
14:d6:3e:13:ee:51:1f:b8:dc:d8:8d:03:03:6d:22:a3:ca:12:
37:d2:76:96:59:fd:4f:2c:3d:8e:87:a7:6c:d6:80:1f:c2:54:
53:4e:a5:10:5b:90:ec:d7:07:92:7c:e1:52:4c:73:bb:45:46:
55:6b:a6:65:d7:59:d4:c9:dd:5c:0d:82:49:23:5d:35:98:4f:
5d:86:08:dc:dc:f5:6e:e6:d9:ea:aa:5f:34:ac:d7:07:46:b0:
a9:51:c5:95:86:fa:57:2f:92:91:42:c8:73:9f:7b:4b:79:ab:
51:14:9b:e7:9c:27:ac:cc:5d:80:7d:65:7a:88:25:3c:0b:35:
4b:11:2a:16:98:04:12:ac:42:b3:d2:36:ac:85:63:a8:57:97:
37:fe:aa:17:36:45:91:d2:ee:33:95:62:7f:7c:8b:5d:d5:c1:
3d:f0:ba:b4:5b:b9:fb:d4:68:a8:b1:a5:2c:28:f0:83:4f:00:
75:52:87:55:1c:c1:ec:40:07:63:9c:14:f5:5f:90:88:2f:83:
84:d5:82:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:54 2025 by rpki-client on console.sobornost.net