Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/60kh56FaZUPgLJjvOPImCleV1_k.roa
File: 60kh56FaZUPgLJjvOPImCleV1_k.roa (raw, json)
Hash identifier: sBtMN9x0xve8koxJRQqfsf0gWURrm8lw+HL5est9AyU=
Subject key identifier: EB:49:21:E7:A1:5A:65:43:E0:2C:98:EF:38:F2:26:0A:57:95:D7:F9
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0193E2805FBF1384F656AB12942DAE8A41EA
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/60kh56FaZUPgLJjvOPImCleV1_k.roa
Signing time: Fri 20 Dec 2024 05:18:04 +0000
ROA not before: Fri 20 Dec 2024 05:18:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44592
IP address blocks: 77.90.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e2:80:5f:bf:13:84:f6:56:ab:12:94:2d:ae:8a:41:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Dec 20 05:18:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb4921e7a15a6543e02c98ef38f2260a5795d7f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d2:a6:b2:50:8b:f9:0d:ec:95:1b:0b:22:28:
91:13:f9:db:5d:ea:8a:95:a9:1c:05:f8:26:52:3e:
4c:c6:66:55:40:c7:87:77:c8:03:6b:05:3e:c1:e2:
10:e0:41:e7:a5:9e:c6:3c:ce:1b:f5:55:83:9e:ee:
aa:33:ab:da:59:af:c3:fd:3e:4e:1a:c6:a1:06:fc:
24:48:51:bd:cf:36:ae:e9:ff:68:b9:d2:a6:00:ab:
d6:95:fa:6e:ed:da:32:04:d0:ad:78:cf:a5:61:99:
92:ec:df:7d:d6:f9:dd:48:60:1c:e5:ce:3f:78:44:
53:e1:8f:9e:40:88:08:14:e8:a6:c9:f8:e7:0d:3b:
56:12:7f:92:a5:35:d1:76:b4:6a:85:39:e4:0a:70:
f5:cf:b4:4e:d8:c6:b4:ce:ba:d9:1a:ba:bb:45:0b:
d9:7a:a5:0f:fd:a7:1f:02:5f:cc:30:37:74:8d:50:
8a:9f:6b:56:a3:61:24:28:12:8d:f7:c6:d7:d5:64:
db:77:54:51:66:52:65:7b:d6:c3:5f:e4:24:4b:cc:
ff:63:5e:21:51:35:6a:ff:c3:eb:79:2d:f8:cc:23:
47:3f:b3:c2:25:03:7a:8d:ee:56:66:fb:23:5b:c2:
28:b9:33:92:ea:6c:e1:5f:5a:bd:5e:3a:62:5e:2b:
be:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:49:21:E7:A1:5A:65:43:E0:2C:98:EF:38:F2:26:0A:57:95:D7:F9
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/60kh56FaZUPgLJjvOPImCleV1_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.17.0/24
Signature Algorithm: sha256WithRSAEncryption
74:db:12:97:c9:a7:46:a3:32:1c:21:f9:39:f4:0d:92:c1:8c:
80:0d:d7:2a:b3:80:07:48:54:80:7a:5c:82:79:5d:5a:18:bd:
7c:38:29:fc:da:aa:5a:f2:d0:5c:dc:0b:fc:8f:f5:e8:e8:e1:
db:75:5c:05:41:1c:bc:5b:7c:6b:20:9d:20:e9:68:62:29:94:
26:14:1e:52:fc:91:9e:9b:69:75:f1:4b:49:8b:98:b6:2e:81:
8e:de:b9:50:90:ce:b4:ae:fa:87:a9:ae:4d:a4:a2:e2:c9:f8:
3e:9f:15:14:19:c8:c8:1d:3d:ba:39:10:f2:57:8d:95:3b:3e:
13:96:1a:cd:d8:d1:17:98:ec:f1:f6:14:89:55:c6:38:72:6d:
12:aa:6a:f8:1c:11:b2:5b:95:e6:be:4f:3b:88:35:ef:8c:e1:
c1:2d:8c:67:4f:d6:32:7e:f9:7a:d7:14:ba:12:77:1c:ca:63:
a0:3c:54:8b:00:88:66:86:1d:a7:60:cd:f3:43:bf:ea:59:7b:
e7:c7:68:b5:f9:76:3e:32:56:d4:82:2d:6b:9d:84:36:c6:a3:
aa:fb:e3:79:86:eb:8b:b9:ba:ed:f3:a7:ea:dd:17:50:5c:28:
c2:41:49:90:ef:42:bf:f4:d0:da:52:80:1a:40:96:4b:9b:a0:
e5:53:5f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:32:06 2025 by rpki-client