Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6rKvpzymN2oYJvr7lCrA599e7H0.roa
File: 6rKvpzymN2oYJvr7lCrA599e7H0.roa (raw, json)
Hash identifier: MXu65hOIkkzbhRDUMAUhKbotZXATmzOGdU73gxMr68Y=
Subject key identifier: EA:B2:AF:A7:3C:A6:37:6A:18:26:FA:FB:94:2A:C0:E7:DF:5E:EC:7D
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0195D29EAFE567A4854BD5CEFC66E28E5337
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6rKvpzymN2oYJvr7lCrA599e7H0.roa
Signing time: Wed 26 Mar 2025 13:22:49 +0000
ROA not before: Wed 26 Mar 2025 13:22:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 23506
IP address blocks: 77.90.25.0/24 maxlen: 24
94.249.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d2:9e:af:e5:67:a4:85:4b:d5:ce:fc:66:e2:8e:53:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 26 13:22:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eab2afa73ca6376a1826fafb942ac0e7df5eec7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4d:e2:5e:43:d9:9a:27:08:f1:d0:cd:cc:3f:
35:5c:d7:24:34:67:2d:33:bc:1b:e5:f1:a3:3e:e7:
9a:73:07:c5:c7:fe:49:97:92:3e:3c:3f:b7:9d:85:
60:ef:1d:c7:14:67:a6:6d:c9:e2:a6:03:ab:70:03:
09:f8:ff:3d:ea:d5:08:72:92:bd:ea:06:e5:70:32:
d9:f8:15:e7:a6:30:3c:fe:3f:1e:37:bc:66:b9:34:
61:b7:2a:4a:75:e9:75:4d:f6:9a:d0:66:8c:9b:a1:
d7:68:f7:d9:50:9e:d6:5d:a3:29:8d:f3:fc:72:ec:
f6:d7:45:19:82:3f:40:eb:14:19:03:a6:29:f3:f6:
2c:1c:c1:04:6b:9b:97:ca:2c:cd:23:ea:09:fc:63:
7f:b3:40:c6:e7:06:28:f8:c5:df:90:33:b0:8c:e3:
78:4a:1e:36:07:79:f1:dd:90:94:e8:03:dd:e4:13:
d4:3a:74:c1:29:7a:81:bc:9f:e8:95:41:3f:31:e3:
36:a3:b7:e9:bd:01:c4:17:d9:cf:61:15:88:fc:f2:
a2:72:d8:00:bf:2b:d2:76:55:f4:2e:dd:44:83:73:
4e:6c:32:7c:4f:4b:46:ea:5d:8d:b0:aa:00:2b:86:
e2:f4:52:db:18:b4:3c:7c:0a:27:27:82:ec:c0:c1:
90:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B2:AF:A7:3C:A6:37:6A:18:26:FA:FB:94:2A:C0:E7:DF:5E:EC:7D
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6rKvpzymN2oYJvr7lCrA599e7H0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.25.0/24
94.249.138.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:b5:7c:30:ab:cb:d6:55:85:e4:ec:04:d5:3e:a9:c3:fd:fc:
aa:ee:f7:7b:b3:1b:c3:5d:da:ae:c4:1f:06:ff:f4:3e:b3:38:
70:2b:20:bf:ca:18:0d:08:a7:ed:64:43:73:b3:0b:31:45:5f:
53:81:8c:3a:73:35:24:da:81:c5:06:8f:eb:38:76:ca:85:27:
b2:9c:84:22:a0:93:c7:34:fa:f0:bf:e4:ca:30:84:59:93:d6:
06:04:da:ad:33:80:c4:df:10:9b:48:39:6a:dc:7f:d7:5c:cc:
24:70:0a:68:24:ac:4f:e7:d0:4c:fc:da:2f:4f:0d:6d:1e:35:
dc:20:a7:4a:7b:20:d4:b9:98:4f:2f:cd:5c:5b:4d:87:04:65:
16:39:03:0a:84:52:ae:16:cf:e8:d4:93:8c:ee:3b:57:46:7a:
57:06:cf:81:45:e6:9f:74:23:e0:6d:76:9c:61:ea:d2:08:d8:
0e:84:ea:e2:3c:63:20:2c:49:f6:70:1f:31:97:7c:e5:c5:b7:
84:e2:3a:b2:61:ca:62:87:04:ac:03:2a:5d:f1:35:ce:4f:92:
3a:b0:ce:a5:bc:a2:e6:08:26:19:24:c1:4c:9d:29:e4:a9:22:
da:c6:bd:90:74:b7:75:8b:82:cb:01:d1:e4:6e:cc:1a:52:48:
95:10:34:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:12:52 2025 by rpki-client