Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Bct6dzOmCEx70VFdQlwwwLo6Pqs.roa
File: Bct6dzOmCEx70VFdQlwwwLo6Pqs.roa (raw, json)
Hash identifier: 3XTaaWio2IzGaozOG42JhWE+O0NT/OaeBkJNh/dj+vg=
Subject key identifier: 05:CB:7A:77:33:A6:08:4C:7B:D1:51:5D:42:5C:30:C0:BA:3A:3E:AB
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01950E879A1E919AC3B0FE4DF9BEB06DC489
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Bct6dzOmCEx70VFdQlwwwLo6Pqs.roa
Signing time: Sun 16 Feb 2025 11:32:02 +0000
ROA not before: Sun 16 Feb 2025 11:32:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215039
IP address blocks: 77.90.5.0/24 maxlen: 24
77.90.14.0/24 maxlen: 24
77.90.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:0e:87:9a:1e:91:9a:c3:b0:fe:4d:f9:be:b0:6d:c4:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 16 11:32:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05cb7a7733a6084c7bd1515d425c30c0ba3a3eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:09:7a:b9:43:79:5a:9f:f0:26:bf:c1:1b:f5:
3a:c1:e3:e8:1a:89:38:24:35:84:25:00:14:a6:38:
c5:c9:38:db:2d:9b:19:a0:ec:6b:31:09:44:0a:93:
20:f4:28:d5:95:1d:c5:22:5d:3b:79:05:5c:38:e9:
7a:00:25:75:b7:d4:2e:ae:e5:26:25:ec:98:a4:d8:
70:ea:6a:ef:c9:2c:79:d3:d9:a2:0f:6e:82:3b:cd:
11:2d:64:24:8c:17:51:e3:24:00:ab:21:bd:df:54:
c8:29:a7:14:71:1c:07:b9:bd:87:32:4f:96:59:70:
65:bd:b6:7b:c8:4e:7f:4d:d4:0c:87:bd:32:23:75:
80:9a:e3:7e:49:eb:ef:70:9d:00:9b:18:a6:5a:f9:
eb:c1:9b:5f:b3:e4:b0:ca:5b:62:96:6d:a5:09:8b:
71:70:a4:cd:28:d4:31:4a:29:4f:ca:2a:6a:5f:1a:
8f:d1:d7:e0:d7:44:3d:cc:dc:49:43:07:1c:45:7a:
29:a3:76:50:be:bf:f3:05:74:88:0b:1a:58:b3:1d:
e1:1c:42:43:7e:ad:ca:31:eb:f7:77:ff:47:73:24:
09:b5:12:65:58:f1:5c:77:ca:2a:78:72:33:2a:ee:
54:02:1b:79:e7:3e:c0:82:a1:3c:32:63:56:63:b6:
c9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:CB:7A:77:33:A6:08:4C:7B:D1:51:5D:42:5C:30:C0:BA:3A:3E:AB
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Bct6dzOmCEx70VFdQlwwwLo6Pqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.5.0/24
77.90.14.0/24
77.90.53.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:30:7f:52:db:97:65:28:23:3e:e4:06:6b:c4:a5:73:fd:69:
a8:e7:5a:2c:67:bd:c6:69:fb:78:60:e0:60:25:9a:00:87:02:
b0:ca:f1:19:28:52:0b:89:a4:be:78:f5:be:49:6d:dd:9b:dc:
c1:ed:11:30:f3:98:b0:d0:ff:72:5d:8a:00:a8:aa:b6:c3:73:
e3:36:73:9c:ee:1d:7c:77:37:e8:2e:f1:b7:6f:9b:23:a6:b1:
e5:be:25:d4:6c:7b:8c:e7:bd:69:0a:e0:f8:84:f6:f1:06:24:
f9:05:5d:a5:4d:fc:30:be:e2:b2:d8:4d:bb:d8:4d:fa:77:5f:
b7:eb:96:ed:f0:3f:ec:3f:f3:42:1d:cb:fa:85:8f:d3:a9:b8:
71:3c:0c:4e:49:51:2a:f9:7b:06:ad:9d:4c:42:dc:23:96:0c:
bb:ec:9d:c6:75:31:63:72:23:84:d0:a7:14:3a:88:e3:ee:45:
22:e7:05:cf:35:ca:8c:8c:7a:3d:ad:ad:db:5a:af:b9:52:b1:
b2:58:2e:42:d1:d6:39:24:a8:1d:08:1b:1b:ce:61:e8:8b:a3:
ae:c2:67:12:ff:9d:ba:83:10:f1:0c:c8:e5:e0:b2:e2:60:a0:
92:66:84:a1:bb:dd:34:e4:22:02:40:56:1f:a8:55:bd:2c:7d:
ef:9f:ae:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:42:56 2025 by rpki-client