Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/Is94Q2E0TcL99ktPLy3XOhFlG9s.roa
File: Is94Q2E0TcL99ktPLy3XOhFlG9s.roa (raw, json)
Hash identifier: QmvTWH4bMNqja9fgfEB+gdmLSFW4G8IyUfhDS4uj7O4=
Subject key identifier: 22:CF:78:43:61:34:4D:C2:FD:F6:4B:4F:2F:2D:D7:3A:11:65:1B:DB
Certificate issuer: /CN=90a02705006532ef33a0064f875a100923509fd5
Certificate serial: 0194258EEB4094E2B84004B0B510837DFEEC
Authority key identifier: 90:A0:27:05:00:65:32:EF:33:A0:06:4F:87:5A:10:09:23:50:9F:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKAnBQBlMu8zoAZPh1oQCSNQn9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/Is94Q2E0TcL99ktPLy3XOhFlG9s.roa
Signing time: Thu 02 Jan 2025 05:48:30 +0000
ROA not before: Thu 02 Jan 2025 05:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198380
IP address blocks: 185.154.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:eb:40:94:e2:b8:40:04:b0:b5:10:83:7d:fe:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a02705006532ef33a0064f875a100923509fd5
Validity
Not Before: Jan 2 05:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22cf784361344dc2fdf64b4f2f2dd73a11651bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:91:e5:f7:40:70:e1:86:a5:96:d3:93:6b:22:
5e:33:8d:6c:6c:06:47:ca:4b:d6:59:8e:3d:34:35:
96:24:11:76:fc:13:d9:35:42:10:f9:e4:d3:ce:ad:
14:fd:78:6e:54:0d:95:25:8f:7e:a4:4e:f4:03:4e:
12:b1:08:96:34:11:f9:3a:87:4b:f0:14:ce:47:5d:
41:86:b8:a4:9f:bb:20:7a:a6:b3:ab:0d:fe:23:06:
25:eb:be:55:d2:29:2d:98:c4:93:0a:50:af:25:8f:
93:d0:9b:4f:1c:22:33:31:64:2d:1d:fb:75:3b:86:
3e:ea:5c:41:bb:66:69:14:41:8b:d9:1d:75:f9:80:
db:a1:75:20:1f:5a:61:12:c2:c4:ff:a4:d9:76:ab:
fd:4d:31:43:0d:6e:49:bb:51:bd:e3:76:f0:72:20:
64:63:2c:81:dd:22:a6:95:37:c9:f5:e5:0b:68:1b:
e2:18:4e:66:91:30:34:e9:5c:4d:75:f0:bb:12:41:
05:87:18:23:0a:11:66:3c:98:9c:db:1d:70:c5:3d:
7e:79:91:ec:d6:df:e4:60:fa:3e:35:53:01:9e:f8:
ea:b4:ad:f2:ad:03:9e:27:dd:c7:34:f4:0c:1f:39:
ad:b3:30:e9:22:d8:81:45:02:2a:e6:d5:85:e3:a8:
08:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:CF:78:43:61:34:4D:C2:FD:F6:4B:4F:2F:2D:D7:3A:11:65:1B:DB
X509v3 Authority Key Identifier:
keyid:90:A0:27:05:00:65:32:EF:33:A0:06:4F:87:5A:10:09:23:50:9F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKAnBQBlMu8zoAZPh1oQCSNQn9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/Is94Q2E0TcL99ktPLy3XOhFlG9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.154.236.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:7f:a4:5f:29:29:36:b2:dd:cd:ec:d8:68:eb:db:cf:ef:21:
e2:ca:bc:92:34:b9:2e:23:9e:5c:21:83:ea:8f:c8:a8:d9:81:
44:ae:fb:71:ee:19:66:79:26:e8:a1:db:af:b5:bc:84:dd:4a:
d6:b2:b9:ff:d2:3a:6e:f3:d9:e0:f6:14:59:9e:14:85:7e:7b:
cd:f7:84:eb:91:c4:12:59:f0:7c:56:5a:0e:36:0d:4d:dc:16:
71:57:4d:55:e1:d6:9d:a1:52:e2:3f:19:da:18:a0:99:52:98:
ec:8c:0d:47:41:41:99:94:76:c3:dd:94:87:3a:f3:bc:4e:b1:
52:30:cd:7a:bb:ba:a1:e4:b4:2b:1c:c2:45:eb:9e:7c:c8:1c:
ad:8d:99:b6:46:64:80:98:71:de:2f:92:eb:c4:9d:61:61:2e:
78:80:01:cc:73:9d:bd:d6:40:19:0a:0e:8c:cd:3a:15:ac:83:
53:a7:2a:76:9b:5b:57:06:a7:a4:bc:d8:06:f1:8f:1e:fd:b5:
c6:92:e5:da:13:8c:81:46:e2:d9:4c:e5:d3:f0:d6:25:dc:fe:
0c:3c:7c:3e:f7:e7:f0:82:e7:4c:43:19:90:8f:04:99:e0:b9:
12:d1:68:db:83:6b:4a:10:fc:7f:85:c7:ab:70:85:11:aa:83:
e4:42:24:67
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQljutAlOK4QASwtRCDff7sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwYTAyNzA1MDA2NTMyZWYzM2EwMDY0Zjg3NWExMDA5MjM1
MDlmZDUwHhcNMjUwMTAyMDU0ODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMmNmNzg0MzYxMzQ0ZGMyZmRmNjRiNGYyZjJkZDczYTExNjUxYmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05Hl90Bw4YalltOTayJeM41sbAZH
ykvWWY49NDWWJBF2/BPZNUIQ+eTTzq0U/XhuVA2VJY9+pE70A04SsQiWNBH5OodL
8BTOR11Bhrikn7sgeqazqw3+IwYl675V0iktmMSTClCvJY+T0JtPHCIzMWQtHft1
O4Y+6lxBu2ZpFEGL2R11+YDboXUgH1phEsLE/6TZdqv9TTFDDW5Ju1G943bwciBk
YyyB3SKmlTfJ9eULaBviGE5mkTA06VxNdfC7EkEFhxgjChFmPJic2x1wxT1+eZHs
1t/kYPo+NVMBnvjqtK3yrQOeJ93HNPQMHzmtszDpItiBRQIq5tWF46gI6QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCLPeENhNE3C/fZLTy8t1zoRZRvbMB8GA1UdIwQY
MBaAFJCgJwUAZTLvM6AGT4daEAkjUJ/VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0tBbkJRQmxNdTh6b0FaUGgxb1FDU05RbjlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9kOWY0ODItMTM1ZS00N2Y2LTkzMTct
Njc4NWFkYTUyN2MxLzEvSXM5NFEyRTBUY0w5OWt0UEx5M1hPaEZsRzlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9kOWY0ODItMTM1ZS00N2Y2LTkzMTctNjc4NWFkYTUyN2Mx
LzEva0tBbkJRQmxNdTh6b0FaUGgxb1FDU05RbjlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZrsMA0G
CSqGSIb3DQEBCwUAA4IBAQAsf6RfKSk2st3N7Nho69vP7yHiyrySNLkuI55cIYPq
j8io2YFErvtx7hlmeSbooduvtbyE3UrWsrn/0jpu89ng9hRZnhSFfnvN94TrkcQS
WfB8VloONg1N3BZxV01V4dadoVLiPxnaGKCZUpjsjA1HQUGZlHbD3ZSHOvO8TrFS
MM16u7qh5LQrHMJF6558yBytjZm2RmSAmHHeL5LrxJ1hYS54gAHMc5291kAZCg6M
zToVrINTpyp2m1tXBqekvNgG8Y8e/bXGkuXaE4yBRuLZTOXT8NYl3P4MPHw+9+fw
gudMQxmQjwSZ4LkS0Wjbg2tKEPx/hcercIURqoPkQiRn
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:25 2025 by rpki-client on console.sobornost.net