Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/990939-5f2f-4e60-bcd7-4ce216dbc3e7/1/22RTmeIXvZe_-1CxLkymXNqlrg8.roa
File: 22RTmeIXvZe_-1CxLkymXNqlrg8.roa (raw, json)
Hash identifier: FccHEdmEuUTzGOUTwl640HnfJtN+lwz2MGu89WlTL0k=
Subject key identifier: DB:64:53:99:E2:17:BD:97:BF:FB:50:B1:2E:4C:A6:5C:DA:A5:AE:0F
Certificate issuer: /CN=9b2f900c943f5856add0a0ec69d9e86f005da6f3
Certificate serial: 629219
Authority key identifier: 9B:2F:90:0C:94:3F:58:56:AD:D0:A0:EC:69:D9:E8:6F:00:5D:A6:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/my-QDJQ_WFat0KDsadnobwBdpvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/990939-5f2f-4e60-bcd7-4ce216dbc3e7/1/22RTmeIXvZe_-1CxLkymXNqlrg8.roa
Signing time: Thu 30 Jun 2022 10:43:02 +0000
ROA not before: Thu 30 Jun 2022 10:43:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39767
IP address blocks: 185.90.140.0/22 maxlen: 22
2a05:e200::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6459929 (0x629219)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b2f900c943f5856add0a0ec69d9e86f005da6f3
Validity
Not Before: Jun 30 10:43:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=db645399e217bd97bffb50b12e4ca65cdaa5ae0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d9:e4:13:da:aa:d9:39:90:57:4b:9b:d8:f7:
a0:86:57:15:28:91:a8:b4:b9:7a:63:07:6c:b6:e2:
36:f8:7a:b8:87:79:6e:20:fb:89:c1:07:2e:ed:ed:
2f:ab:70:ff:e2:a7:4f:d0:8c:bd:1c:70:eb:9f:e7:
4a:c8:c6:8b:94:0e:4a:58:c9:79:4d:5f:80:6a:d5:
68:68:96:43:65:1e:c5:a5:5e:fe:ee:12:ef:e7:1f:
33:ab:33:ab:23:15:2e:8c:32:20:68:5b:fa:84:3c:
14:b3:f5:18:0a:6c:d5:e6:4f:c1:32:45:d7:69:c4:
ee:e6:1c:69:95:b1:e5:76:03:9b:e1:41:b8:86:83:
e9:7a:a6:3b:0c:ec:91:95:21:74:61:76:57:ce:e5:
a5:14:df:de:b5:88:84:92:c9:41:7d:e5:fc:65:c8:
0a:16:50:17:e4:48:3a:9e:a3:60:7a:b8:d7:5d:78:
68:ee:f6:13:8a:6b:e0:e6:c0:5a:5e:65:dc:8f:87:
ba:e5:10:da:ae:76:28:48:32:11:8f:1a:97:c4:21:
46:d8:33:ce:bb:00:1e:73:29:4f:f4:0e:e7:4a:06:
b8:73:76:37:3b:49:ed:af:fb:33:e6:d1:3d:a1:a0:
28:b8:b5:27:db:b9:30:8b:9e:c0:af:e9:95:66:30:
6d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:64:53:99:E2:17:BD:97:BF:FB:50:B1:2E:4C:A6:5C:DA:A5:AE:0F
X509v3 Authority Key Identifier:
keyid:9B:2F:90:0C:94:3F:58:56:AD:D0:A0:EC:69:D9:E8:6F:00:5D:A6:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/my-QDJQ_WFat0KDsadnobwBdpvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/990939-5f2f-4e60-bcd7-4ce216dbc3e7/1/22RTmeIXvZe_-1CxLkymXNqlrg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/990939-5f2f-4e60-bcd7-4ce216dbc3e7/1/my-QDJQ_WFat0KDsadnobwBdpvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.90.140.0/22
IPv6:
2a05:e200::/29
Signature Algorithm: sha256WithRSAEncryption
8c:33:1a:1c:a5:3d:2f:5f:d1:cc:15:d0:f2:46:e5:54:69:21:
08:c6:17:17:4c:33:c1:5f:9f:ca:68:66:fc:01:b8:26:84:e0:
b3:c9:53:8c:09:0e:8f:ab:13:3a:86:c1:aa:a3:ea:83:2e:7d:
9c:0a:87:4f:e5:96:89:0b:71:a8:97:90:65:45:cd:9b:d4:80:
df:07:f5:c2:dc:ec:33:db:5f:0d:3d:3a:78:72:81:85:e7:4b:
55:01:90:bf:5f:2f:0d:3c:0f:79:4f:4e:4a:f7:7e:29:44:60:
0e:70:bf:f2:a1:d6:86:55:7e:bd:3c:ae:34:4e:7c:b4:d0:68:
0e:23:eb:61:ff:b9:39:11:6b:2a:cc:68:3f:bc:4f:69:63:52:
87:09:d7:75:84:ee:26:9d:d1:cc:5e:19:91:de:54:b5:5a:7f:
ee:5d:99:38:e3:35:db:40:1a:21:01:d2:67:48:f5:d8:e4:1b:
b4:b4:e4:54:b1:1f:9a:67:e1:25:10:73:df:48:e1:27:9b:fb:
e4:48:05:49:b6:19:d4:08:91:8b:1f:33:21:78:3e:4c:72:19:
3b:3a:b9:2d:e3:92:c6:f5:be:9c:50:b7:fc:59:87:4f:04:d5:
c1:a4:1c:8a:62:45:fc:4d:7b:6d:eb:e8:58:69:76:b2:32:15:
cc:b2:fe:4c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgIDYpIZMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDli
MmY5MDBjOTQzZjU4NTZhZGQwYTBlYzY5ZDllODZmMDA1ZGE2ZjMwHhcNMjIwNjMw
MTA0MzAyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhkYjY0NTM5OWUyMTdi
ZDk3YmZmYjUwYjEyZTRjYTY1Y2RhYTVhZTBmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAptnkE9qq2TmQV0ub2PeghlcVKJGotLl6YwdstuI2+Hq4h3lu
IPuJwQcu7e0vq3D/4qdP0Iy9HHDrn+dKyMaLlA5KWMl5TV+AatVoaJZDZR7FpV7+
7hLv5x8zqzOrIxUujDIgaFv6hDwUs/UYCmzV5k/BMkXXacTu5hxplbHldgOb4UG4
hoPpeqY7DOyRlSF0YXZXzuWlFN/etYiEkslBfeX8ZcgKFlAX5Eg6nqNgerjXXXho
7vYTimvg5sBaXmXcj4e65RDarnYoSDIRjxqXxCFG2DPOuwAecylP9A7nSga4c3Y3
O0ntr/sz5tE9oaAouLUn27kwi57Ar+mVZjBtAQIDAQABo4ICGDCCAhQwHQYDVR0O
BBYEFNtkU5niF72Xv/tQsS5Mplzapa4PMB8GA1UdIwQYMBaAFJsvkAyUP1hWrdCg
7GnZ6G8AXabzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
bXktUURKUV9XRmF0MEtEc2Fkbm9id0JkcHZNLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC84NC85OTA5MzktNWYyZi00ZTYwLWJjZDctNGNlMjE2ZGJjM2U3LzEv
MjJSVG1lSVh2WmVfLTFDeExreW1YTnFscmc4LnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC85
OTA5MzktNWYyZi00ZTYwLWJjZDctNGNlMjE2ZGJjM2U3LzEvbXktUURKUV9XRmF0
MEtEc2Fkbm9id0JkcHZNLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4G
CCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuVqMMA0EAgACMAcDBQMqBeIAMA0G
CSqGSIb3DQEBCwUAA4IBAQCMMxocpT0vX9HMFdDyRuVUaSEIxhcXTDPBX5/KaGb8
AbgmhOCzyVOMCQ6PqxM6hsGqo+qDLn2cCodP5ZaJC3Gol5BlRc2b1IDfB/XC3Owz
218NPTp4coGF50tVAZC/Xy8NPA95T05K934pRGAOcL/yodaGVX69PK40Tny00GgO
I+th/7k5EWsqzGg/vE9pY1KHCdd1hO4mndHMXhmR3lS1Wn/uXZk44zXbQBohAdJn
SPXY5Bu0tORUsR+aZ+ElEHPfSOEnm/vkSAVJthnUCJGLHzMheD5Mchk7Orkt45LG
9b6cULf8WYdPBNXBpByKYkX8TXtt6+hYaXayMhXMsv5M
-----END CERTIFICATE-----
Generated at Thu May 1 01:47:02 2025 by rpki-client