Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/gDuCjO0DIgLxN7C48R4JfGoQRVc.roa
File: gDuCjO0DIgLxN7C48R4JfGoQRVc.roa (raw, json)
Hash identifier: lP/yR1n5GIu8r34Q5gSsLb2yf1Tw72xt4gkUVUOEXik=
Subject key identifier: 80:3B:82:8C:ED:03:22:02:F1:37:B0:B8:F1:1E:09:7C:6A:10:45:57
Certificate issuer: /CN=b999dd5ac03225844b6b490f92f0347ccf096708
Certificate serial: 0194221FF8AA4FD56E19366D32D59709747E
Authority key identifier: B9:99:DD:5A:C0:32:25:84:4B:6B:49:0F:92:F0:34:7C:CF:09:67:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/gDuCjO0DIgLxN7C48R4JfGoQRVc.roa
Signing time: Wed 01 Jan 2025 13:48:28 +0000
ROA not before: Wed 01 Jan 2025 13:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41071
IP address blocks: 185.90.8.0/22 maxlen: 22
185.90.8.0/23 maxlen: 23
185.90.10.0/24 maxlen: 24
185.90.11.0/24 maxlen: 24
2a05:db80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:f8:aa:4f:d5:6e:19:36:6d:32:d5:97:09:74:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b999dd5ac03225844b6b490f92f0347ccf096708
Validity
Not Before: Jan 1 13:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=803b828ced032202f137b0b8f11e097c6a104557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b7:e2:ca:94:d4:1d:b4:8e:d3:3a:e1:32:3b:
c9:b2:7d:5a:00:53:26:f0:49:26:ac:3c:a9:89:84:
2a:c1:ba:4b:a6:e8:37:2d:e2:5e:b9:8e:12:5b:9f:
a4:f0:c2:e9:3a:45:e3:a8:e2:19:2c:ef:9c:31:6f:
80:3a:fd:0f:6c:f3:6d:17:72:7b:d3:51:ff:e7:a9:
5a:31:07:8d:e2:e6:8a:2d:af:2a:d6:66:e5:71:f3:
e8:b6:f8:1e:2e:36:e3:45:a7:cd:84:93:e4:3f:f1:
00:fc:0f:ce:5e:2c:26:38:15:cf:4f:09:7b:d6:9b:
67:78:dc:9a:7b:09:55:08:8c:aa:eb:b3:2f:30:0d:
0d:1d:1a:45:a4:0d:59:7a:be:52:69:5c:80:ad:6d:
17:3a:f7:4d:f5:7a:ab:ea:54:8c:51:ea:22:85:73:
aa:e3:4d:5d:55:2a:56:d3:c4:2e:af:37:f2:e0:26:
8d:f8:39:be:55:3b:48:65:85:f9:68:87:8e:2d:43:
6f:d0:fb:34:13:a5:b1:fd:fd:6c:21:42:22:a3:c6:
e3:df:25:9d:fb:22:00:a6:00:74:ce:e7:38:84:91:
f1:17:76:54:9a:79:c1:fc:ff:0f:38:5b:3e:de:b0:
6f:c6:4a:f7:81:72:88:7a:17:3d:c1:c1:92:fc:98:
a9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:3B:82:8C:ED:03:22:02:F1:37:B0:B8:F1:1E:09:7C:6A:10:45:57
X509v3 Authority Key Identifier:
keyid:B9:99:DD:5A:C0:32:25:84:4B:6B:49:0F:92:F0:34:7C:CF:09:67:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/gDuCjO0DIgLxN7C48R4JfGoQRVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.90.8.0/22
IPv6:
2a05:db80::/29
Signature Algorithm: sha256WithRSAEncryption
40:d3:f3:06:3c:3d:89:cd:27:76:31:aa:2d:1e:2d:69:2d:56:
90:98:05:ca:63:d6:30:8b:b5:2c:ee:13:03:15:6d:a6:59:71:
67:d2:26:68:e1:d9:22:d6:f7:23:3e:8d:24:7b:2e:c0:37:7d:
81:4a:a9:2e:b3:7a:f9:ba:ab:b9:ff:1e:d4:01:5a:8a:13:30:
ee:51:e6:66:15:60:22:c8:57:63:15:d3:54:91:16:86:ad:f1:
53:c8:1f:80:0c:1b:ec:9c:1c:ec:eb:5e:58:09:ee:75:c8:89:
23:63:bd:c1:c8:e4:de:6c:8d:e0:68:b1:9f:e7:31:19:ad:7a:
f6:7f:c4:09:dc:fb:0d:ef:bd:15:74:9a:88:41:93:c4:f8:c9:
8f:94:58:cc:2e:bf:02:0b:11:e3:e3:69:b6:8f:bb:9f:7b:93:
dd:19:a3:c1:20:f0:58:f9:63:d4:45:4a:74:36:32:3a:a4:7b:
06:7d:63:fc:57:68:c3:da:ea:18:92:cc:d6:1e:19:09:94:0f:
7f:6c:07:b7:f9:f1:bf:ff:79:a1:07:f2:44:d5:a7:3a:ce:c5:
e5:71:c9:d8:21:ce:43:fd:f5:38:7f:b2:e4:5b:d1:d6:08:a3:
67:49:3c:4d:f1:b1:cb:ff:b1:d2:8a:11:36:f6:75:91:61:4b:
be:52:3f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:43 2025 by rpki-client on console.sobornost.net