Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/kFQ6PSw4Kn0tIKYI4BghllwLp1g.roa
File: kFQ6PSw4Kn0tIKYI4BghllwLp1g.roa (raw, json)
Hash identifier: SfEVh3xyHki1i5m20tQ7DcHLSWhwiiYXaD7NngS8LMw=
Subject key identifier: 90:54:3A:3D:2C:38:2A:7D:2D:20:A6:08:E0:18:21:96:5C:0B:A7:58
Certificate issuer: /CN=869569a2526687da91a7ecd4f567f5409cdffe79
Certificate serial: 018BF62C523FFADD86C6D95BB6C1E96B7346
Authority key identifier: 86:95:69:A2:52:66:87:DA:91:A7:EC:D4:F5:67:F5:40:9C:DF:FE:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpVpolJmh9qRp-zU9Wf1QJzf_nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/kFQ6PSw4Kn0tIKYI4BghllwLp1g.roa
Signing time: Wed 22 Nov 2023 08:36:21 +0000
ROA not before: Wed 22 Nov 2023 08:36:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49360
IP address blocks: 45.90.232.0/22 maxlen: 22
31.7.144.0/20 maxlen: 20
91.214.72.0/22 maxlen: 22
2a0a:d3c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f6:2c:52:3f:fa:dd:86:c6:d9:5b:b6:c1:e9:6b:73:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869569a2526687da91a7ecd4f567f5409cdffe79
Validity
Not Before: Nov 22 08:36:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=90543a3d2c382a7d2d20a608e01821965c0ba758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:00:b2:b4:80:c4:06:1e:0b:e7:b8:11:d1:28:
56:a7:df:9f:a0:1e:42:63:3b:02:5a:61:22:c2:bd:
82:fe:3d:a1:22:a6:27:bb:d4:2c:34:97:fa:fa:58:
07:f5:11:84:1c:4d:9f:58:2c:2a:78:53:d0:69:bc:
15:b3:76:e7:3d:b0:6e:67:19:5b:06:86:9e:50:8d:
c7:ac:9d:44:3c:c3:c6:d4:52:57:e7:78:72:6c:fa:
34:8e:cf:1c:88:d7:10:b9:96:47:1a:37:81:11:14:
37:a8:a5:e7:f7:f2:c9:1a:b7:ce:e9:ea:b1:2c:5e:
42:0c:e9:7d:ff:1d:4b:3b:89:a0:f2:74:55:8a:08:
fa:14:2d:59:8c:fb:56:76:75:7a:12:29:82:57:40:
2e:54:0c:6b:8a:46:d7:a2:42:32:b0:e5:53:44:e1:
58:43:a1:e1:3e:3b:a9:cc:e2:4f:e4:c3:0d:80:f3:
07:29:45:de:50:3c:99:f8:4c:c4:1a:00:f1:70:67:
ce:cd:e7:73:1f:8e:23:79:04:f8:15:d1:de:b7:89:
9d:30:66:85:d4:13:d1:9d:86:0c:ff:bd:78:53:58:
cc:ef:ee:be:86:7e:55:d5:1f:a5:d1:9a:7e:8d:77:
ae:1d:f8:35:5d:d8:15:8c:e5:c9:11:84:61:7c:28:
aa:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:54:3A:3D:2C:38:2A:7D:2D:20:A6:08:E0:18:21:96:5C:0B:A7:58
X509v3 Authority Key Identifier:
keyid:86:95:69:A2:52:66:87:DA:91:A7:EC:D4:F5:67:F5:40:9C:DF:FE:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpVpolJmh9qRp-zU9Wf1QJzf_nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/kFQ6PSw4Kn0tIKYI4BghllwLp1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/hpVpolJmh9qRp-zU9Wf1QJzf_nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.7.144.0/20
45.90.232.0/22
91.214.72.0/22
IPv6:
2a0a:d3c0::/29
Signature Algorithm: sha256WithRSAEncryption
4e:95:55:31:e5:6e:b1:05:fb:21:4b:bd:55:dd:df:7e:97:e4:
48:37:a4:68:1d:f8:f9:7d:e2:4a:2c:be:2d:43:1d:a5:4c:c2:
5f:c4:ff:4c:1e:38:f6:b2:c7:13:48:8d:4d:d7:bb:09:5b:1f:
f5:77:79:09:24:29:78:6c:6f:16:47:5d:ba:47:7e:23:c8:b9:
03:8b:3d:ef:ae:1a:89:d6:84:5f:b1:34:9c:f7:b7:b3:37:b8:
56:a9:12:1a:2d:69:f2:4d:46:0b:be:b4:e9:10:71:51:71:26:
a5:d7:b6:68:01:e5:07:ef:9b:7b:fd:ec:09:47:7b:68:96:3f:
5f:dd:e2:7b:ff:c1:5e:4e:24:f1:1b:9a:52:44:79:df:72:a5:
4b:96:23:7a:18:47:dd:4d:ed:11:d4:b4:da:3e:e1:d0:ce:6a:
1c:7e:0a:f6:81:7c:99:68:cd:cd:8c:70:cb:57:78:87:55:89:
88:f9:76:2e:7c:cd:a3:49:76:ae:07:bd:0f:8c:6a:9e:82:b8:
84:e4:be:3d:c1:6d:e5:77:77:36:bc:8d:7f:05:a2:cc:a7:dd:
bd:ab:0f:e4:05:ce:2a:36:e6:8a:45:c1:ce:70:cc:24:4b:80:
2d:cf:66:9e:ce:61:88:98:18:1d:f0:4b:5b:c7:93:e3:e7:70:
59:26:43:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 09:50:53 2025 by rpki-client