Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1LLfoR73sMJfNbXVIAiAkqKcAo8.roa
File: 1LLfoR73sMJfNbXVIAiAkqKcAo8.roa (raw, json)
Hash identifier: hlZIr26fjOslhhPIBEI8EL2MglWCQLIjBXMhUnU4/lo=
Subject key identifier: D4:B2:DF:A1:1E:F7:B0:C2:5F:35:B5:D5:20:08:80:92:A2:9C:02:8F
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01935A69E66BBA949C5002C4C1EADD5437BC
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1LLfoR73sMJfNbXVIAiAkqKcAo8.roa
Signing time: Sat 23 Nov 2024 19:05:09 +0000
ROA not before: Sat 23 Nov 2024 19:05:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214771
IP address blocks: 77.90.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:5a:69:e6:6b:ba:94:9c:50:02:c4:c1:ea:dd:54:37:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 23 19:05:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d4b2dfa11ef7b0c25f35b5d520088092a29c028f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c6:e8:50:db:c5:dd:7e:d5:26:28:40:9c:f0:
79:4b:bd:4c:39:ac:7b:11:36:fb:2f:ed:1a:76:63:
b0:26:af:81:b9:a3:14:03:d5:10:a7:34:b8:26:77:
b9:7a:45:92:e4:47:4a:66:96:4b:f7:f1:ff:67:91:
da:cf:05:b9:7e:5e:fd:80:f8:7a:8e:50:8d:6c:21:
f7:70:40:6b:53:ea:34:11:d9:e5:95:33:a5:ee:21:
45:18:b4:3d:20:2b:6c:0e:42:2e:e1:3c:e4:6b:0a:
74:b8:40:fa:be:a3:d7:80:82:bd:7d:25:1c:1e:3b:
31:c0:09:36:91:be:26:43:24:5b:f6:95:8e:f6:28:
c7:3a:d3:21:b0:ad:69:45:b5:f5:cf:56:74:a8:a4:
ca:cd:26:30:42:49:d7:ab:91:c6:fc:d7:c1:4e:ed:
a9:76:0d:dc:5a:5a:66:97:a9:5a:4c:39:77:f2:b5:
57:12:2b:7c:22:eb:e2:bd:db:e8:0c:98:5e:c4:11:
dd:ec:bf:d8:69:0a:c1:11:02:cc:33:01:e8:f4:e5:
10:4a:6c:4a:5d:63:95:08:6f:c5:d3:a0:d6:17:d2:
27:1f:46:84:c4:54:d3:09:8e:25:df:69:7a:6c:23:
bb:f0:2a:0a:7e:34:e4:53:60:2d:85:ac:38:8e:dd:
f6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B2:DF:A1:1E:F7:B0:C2:5F:35:B5:D5:20:08:80:92:A2:9C:02:8F
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1LLfoR73sMJfNbXVIAiAkqKcAo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.20.0/24
Signature Algorithm: sha256WithRSAEncryption
e6:4e:a8:d7:c5:28:2e:d8:fc:8e:74:17:1e:dc:7c:88:5e:85:
a1:92:28:48:de:04:59:ee:f8:b8:8b:e7:a6:34:16:a7:e7:0b:
8c:b5:49:cf:55:1f:e6:a2:fc:29:2e:6c:8e:a0:65:e4:1f:bc:
0a:f7:6d:42:1d:7a:26:f2:9b:66:b6:ec:dd:bd:aa:2a:f4:17:
82:c6:0f:29:a0:f3:28:72:48:e6:fb:9c:74:7d:f5:b8:92:c1:
7c:19:99:c1:e2:f9:6f:6b:d3:7d:9d:f8:d7:b5:e8:74:fe:05:
5e:c0:c3:f6:06:ff:1c:79:34:78:07:b6:ab:04:fb:1b:22:14:
07:90:e5:69:8c:71:61:9f:79:9c:c6:31:9b:5e:d4:e3:08:a6:
75:df:fb:bc:d6:19:73:60:8b:aa:1a:58:28:1d:7e:0b:32:88:
ba:1d:46:b8:7c:c3:d5:a8:4d:33:f5:d3:d7:d6:f0:8e:bb:e7:
52:cc:32:9d:cd:7c:56:05:67:e1:1a:95:17:00:86:1e:8a:f8:
2f:fe:73:de:ad:53:dc:0b:8a:e0:f8:41:1f:a7:24:5c:10:2c:
60:ff:a1:6e:82:38:f0:cd:54:e3:80:18:53:7b:7f:7f:c4:85:
1f:62:94:99:8c:e9:be:29:31:9a:73:6c:5a:84:91:fc:e1:7b:
59:1a:48:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:12:53 2025 by rpki-client