Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/Y2m9dQZRR5IryF_5Zz3iwenilus.roa
File: Y2m9dQZRR5IryF_5Zz3iwenilus.roa (raw, json)
Hash identifier: Jz9GiZ+cQjwgpfumcixZsPRulTmHrskYTNVB0A9hwMs=
Subject key identifier: 63:69:BD:75:06:51:47:92:2B:C8:5F:F9:67:3D:E2:C1:E9:E2:96:EB
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01942747AD3E0ED51FEB5E41C7296AAA68DB
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/Y2m9dQZRR5IryF_5Zz3iwenilus.roa
Signing time: Thu 02 Jan 2025 13:49:56 +0000
ROA not before: Thu 02 Jan 2025 13:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134176
IP address blocks: 77.90.154.0/24 maxlen: 24
185.230.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:ad:3e:0e:d5:1f:eb:5e:41:c7:29:6a:aa:68:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jan 2 13:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6369bd75065147922bc85ff9673de2c1e9e296eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:aa:57:10:41:86:11:5c:f6:45:1d:46:32:64:
b0:32:da:1c:cf:15:88:59:fd:82:0e:80:34:ca:8c:
6f:eb:94:18:e1:3f:9a:58:71:e9:92:04:6d:5d:52:
50:02:9b:75:b3:c7:57:25:26:45:94:80:44:32:87:
7f:a4:4c:cb:6e:bc:9f:e7:ed:a1:e5:e3:68:f8:0e:
4c:08:93:95:9b:bb:39:e6:b9:d0:57:c0:de:5a:c7:
9d:04:8d:a2:f4:93:3f:a3:ec:f8:4b:ca:73:cc:83:
7d:5c:e1:50:ba:eb:9b:e8:0c:0e:4a:00:08:7b:1f:
45:af:f0:68:ae:94:cf:d8:d7:85:31:3d:b2:9d:55:
ed:10:2c:0d:da:51:f0:0d:77:1a:81:b4:d8:69:b8:
18:5b:5a:36:fd:cc:7f:c7:d6:c4:bf:36:86:94:02:
3f:2d:fa:6f:17:9e:dd:0c:5d:d9:0e:5d:99:4c:20:
2b:65:0b:a2:a1:9c:5f:a5:4e:70:f0:23:bb:5d:90:
eb:c6:5f:8f:49:46:70:76:08:1e:05:f0:b4:31:36:
9b:10:87:53:0e:d0:8d:f2:2a:7b:db:83:1c:82:05:
8c:b8:c1:a5:c2:80:de:60:1d:dc:51:08:08:ca:26:
01:b0:38:8b:39:8f:4b:e9:fb:d8:90:a8:c3:da:90:
6f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:69:BD:75:06:51:47:92:2B:C8:5F:F9:67:3D:E2:C1:E9:E2:96:EB
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/Y2m9dQZRR5IryF_5Zz3iwenilus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.154.0/24
185.230.14.0/24
Signature Algorithm: sha256WithRSAEncryption
29:e4:2c:40:59:5d:d8:5b:c5:8c:5b:a2:f1:74:d6:e2:da:8f:
cb:1e:45:1c:dc:fa:13:31:89:33:65:c2:0d:11:f0:48:ba:ec:
ec:f7:af:54:c4:06:d0:a8:64:51:08:8a:f8:41:ba:d3:95:a6:
73:e0:74:1b:8e:5f:64:43:ff:8d:2a:05:a4:ce:1c:17:b1:f3:
2b:0a:ae:42:5a:79:db:0d:10:1e:93:bf:f5:11:ba:e9:5f:df:
55:0b:91:cc:73:7e:1f:eb:95:ca:a9:ba:ee:12:37:ca:1a:f3:
1b:fb:fb:5c:13:d4:f2:10:51:93:ae:cd:b0:77:39:ee:c3:51:
f7:d3:6e:c8:79:4d:08:42:ed:6c:ed:a7:c6:c5:16:e8:1f:dd:
4d:65:0f:5a:ac:8c:cc:fc:10:75:d6:7c:a3:55:cb:a6:84:a9:
2a:00:6a:0a:65:d7:12:4e:43:92:e6:01:91:66:47:30:85:0f:
45:05:6f:f8:dd:99:c7:9a:eb:e0:cb:7b:cc:1a:5a:0d:32:31:
63:4e:42:15:78:bf:29:f7:89:81:ec:6f:65:8d:5c:2a:13:dc:
54:58:ca:40:1c:23:be:90:ad:bc:e3:df:9f:72:6e:ef:83:4b:
0f:48:51:0e:8c:e6:a4:05:83:c3:b2:dd:c6:ad:54:b5:94:a8:
ff:f3:4e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:11:44 2025 by rpki-client