Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/KyVtpyRTcvgBS4JaV8NPZOuwdLQ.roa
File: KyVtpyRTcvgBS4JaV8NPZOuwdLQ.roa (raw, json)
Hash identifier: iY3Qd0RfijC3WmQCC9uFX5dUNLie0ZRKHtS62kmKzs8=
Subject key identifier: 2B:25:6D:A7:24:53:72:F8:01:4B:82:5A:57:C3:4F:64:EB:B0:74:B4
Certificate issuer: /CN=c0f0ee9842627031eca264dac65e5fef63943f98
Certificate serial: 019428259149BD9EB63EBA80674EDB8444A6
Authority key identifier: C0:F0:EE:98:42:62:70:31:EC:A2:64:DA:C6:5E:5F:EF:63:94:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPDumEJicDHsomTaxl5f72OUP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/KyVtpyRTcvgBS4JaV8NPZOuwdLQ.roa
Signing time: Thu 02 Jan 2025 17:52:18 +0000
ROA not before: Thu 02 Jan 2025 17:52:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28952
IP address blocks: 90.176.0.0/19 maxlen: 19
90.176.13.0/24 maxlen: 24
185.103.144.0/22 maxlen: 22
2a06:2c40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:91:49:bd:9e:b6:3e:ba:80:67:4e:db:84:44:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0f0ee9842627031eca264dac65e5fef63943f98
Validity
Not Before: Jan 2 17:52:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b256da7245372f8014b825a57c34f64ebb074b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0d:87:82:da:db:71:62:4d:f0:2a:25:a5:d1:
1a:80:9b:68:50:52:9d:4c:f3:90:fa:e1:9b:bc:17:
f2:6e:ff:45:00:4a:b4:a4:2a:8c:a3:98:33:d6:d6:
d2:08:66:bd:65:18:11:09:b0:09:ed:69:ff:50:4b:
64:52:51:80:92:b6:4c:3e:9c:26:3c:e0:97:dd:2f:
b5:e0:d1:02:c2:92:e0:73:b8:4b:20:a1:b0:4e:70:
7e:a0:96:54:9e:fa:ab:de:49:64:82:ef:ae:08:8e:
e2:e3:c4:5f:63:fb:b1:cb:89:50:b0:ca:4a:cb:2a:
33:85:4c:0c:e7:d0:81:5b:b0:34:a2:4a:f7:96:8f:
40:48:08:85:4d:63:e8:f2:79:ac:c8:2a:73:ea:f9:
e6:b0:b8:5c:06:44:f5:25:f5:c4:33:28:04:9a:51:
b4:72:62:6f:db:ea:64:10:a2:96:f3:67:ea:21:65:
24:6f:3e:e6:03:1d:6b:9b:eb:52:04:d7:d6:cb:c3:
ce:af:4a:71:6a:6b:d9:da:5d:32:55:10:9c:d6:f6:
6f:94:68:c9:8b:26:fd:88:b8:d8:ca:64:0b:90:fa:
fb:9c:44:2c:d2:16:6d:be:04:aa:12:d8:be:76:b9:
cb:91:7d:96:ff:97:53:10:8a:5c:d7:59:d0:cc:58:
95:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:25:6D:A7:24:53:72:F8:01:4B:82:5A:57:C3:4F:64:EB:B0:74:B4
X509v3 Authority Key Identifier:
keyid:C0:F0:EE:98:42:62:70:31:EC:A2:64:DA:C6:5E:5F:EF:63:94:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPDumEJicDHsomTaxl5f72OUP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/KyVtpyRTcvgBS4JaV8NPZOuwdLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.176.0.0/19
185.103.144.0/22
IPv6:
2a06:2c40::/29
Signature Algorithm: sha256WithRSAEncryption
2a:57:5e:2c:49:94:6d:fa:f9:be:47:40:e9:a5:7f:fb:04:ff:
17:ac:01:3a:02:e3:06:0e:a4:9e:f9:09:70:d3:02:65:bc:9f:
fe:3b:40:a3:a8:54:c2:d1:fe:48:e5:86:db:a3:12:7c:1e:a6:
bf:b1:df:e9:dd:ee:4c:23:f1:e4:61:33:61:60:19:ef:ac:c1:
fc:b2:f1:ef:1e:cb:bb:aa:b7:54:c9:c6:31:82:d3:35:96:45:
d4:54:6b:b3:9b:0d:97:a7:6c:4a:c9:7e:a7:72:57:01:58:99:
d1:c4:0b:99:a2:7e:63:a7:13:73:e9:e5:96:05:09:e6:18:1e:
79:c0:7a:1c:18:34:da:68:d6:4a:60:21:87:1c:ad:5e:55:b7:
df:81:5b:f7:2d:bd:f7:4a:93:fe:f2:09:e7:c9:97:ff:94:ac:
0d:3b:3e:ff:f7:c6:62:e8:e4:da:41:d4:d4:b7:08:56:05:73:
8c:14:37:fd:f2:42:11:46:1b:53:7d:9a:a5:fa:eb:ca:91:ba:
15:34:a9:7c:09:5c:64:3c:dd:71:e4:a1:63:b7:7d:13:e4:bf:
ab:57:3e:9d:bc:1d:00:45:8a:29:7d:5c:27:ab:2b:11:a1:cc:
7f:b8:b5:57:a5:96:f8:3b:13:c4:66:c6:71:89:28:75:70:31:
43:b5:53:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:28 2025 by rpki-client on console.sobornost.net