Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Ek4AzyiJdIkxqOX3SRGf9x7SqOc.roa
File: Ek4AzyiJdIkxqOX3SRGf9x7SqOc.roa (raw, json)
Hash identifier: 84vl16f4UN8Lu4ZU0eIFKD+mhLxmm/eMErohwaqU0p0=
Subject key identifier: 12:4E:00:CF:28:89:74:89:31:A8:E5:F7:49:11:9F:F7:1E:D2:A8:E7
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194222003C73CC1983430F0BEE110CC9DC0
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Ek4AzyiJdIkxqOX3SRGf9x7SqOc.roa
Signing time: Wed 01 Jan 2025 13:48:31 +0000
ROA not before: Wed 01 Jan 2025 13:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58087
IP address blocks: 77.90.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:03:c7:3c:c1:98:34:30:f0:be:e1:10:cc:9d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 1 13:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=124e00cf2889748931a8e5f749119ff71ed2a8e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d3:74:b3:cc:d4:02:ec:fd:42:dc:67:cf:e0:
c7:a4:71:38:eb:d8:af:9c:66:4b:6e:da:20:26:1b:
8c:60:39:ea:89:e5:a4:ef:96:84:4e:1e:85:b2:26:
17:1f:b7:bc:36:76:c6:66:08:77:94:29:ee:36:7f:
dd:96:58:de:c2:a1:9b:43:30:8b:5b:2d:06:52:ef:
54:0a:42:c9:62:b7:7f:e0:35:9d:22:0a:50:64:8a:
85:7c:bb:04:01:11:05:f2:2a:10:d4:68:c1:74:12:
b7:b2:0b:b6:a0:f9:da:9d:be:3a:fc:ea:5d:97:94:
c0:80:ab:dc:5e:d3:26:aa:07:bc:d7:d5:49:ae:82:
bd:9c:4c:85:66:eb:08:8d:a4:34:aa:06:b5:64:5f:
80:18:df:d7:dd:29:00:4c:61:a4:ba:6f:78:93:2a:
74:6d:1c:28:d7:1b:b9:ac:bb:81:7a:4a:f8:be:58:
ba:ef:9f:52:9f:1e:51:43:58:e5:0f:81:8b:e5:ca:
e7:aa:3c:8b:21:45:37:57:b5:a4:84:d3:b7:33:a5:
88:56:0b:df:50:0f:cf:09:68:1d:3c:f1:de:bb:e9:
3b:e5:5d:5b:5f:e5:19:bd:58:55:e2:00:b7:87:ae:
65:c8:3b:a7:b9:c5:34:1f:51:63:81:e3:42:f3:b0:
50:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:4E:00:CF:28:89:74:89:31:A8:E5:F7:49:11:9F:F7:1E:D2:A8:E7
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Ek4AzyiJdIkxqOX3SRGf9x7SqOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.59.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:6c:e7:8d:8f:2a:02:94:24:43:22:e1:d8:b1:0f:f9:17:63:
ea:b5:b8:67:3c:89:6a:15:37:a6:1f:d2:7f:19:7b:3b:3b:a8:
02:94:1a:8f:fa:90:d7:8f:93:09:f2:c4:8c:74:e2:3f:fa:74:
90:1c:0f:d4:b8:f3:56:f5:58:d4:82:f5:00:32:76:5c:fc:1c:
86:c4:3f:0a:26:93:83:ff:e7:72:25:f6:4e:5f:49:fd:66:d3:
d2:ae:ac:1d:61:da:04:e9:a8:62:09:65:f7:91:d6:90:95:55:
8c:25:d7:65:84:d4:ff:03:e0:f3:32:d6:52:75:1c:1b:5d:2f:
d2:c2:25:76:fc:f2:a0:84:51:88:c4:48:65:f6:c1:82:df:b2:
3a:fa:fe:98:5f:31:52:ac:7c:be:9d:0a:81:08:ca:60:f8:f1:
c4:b7:83:34:d3:e7:2e:83:0a:a9:6d:2d:e3:8d:15:6c:e1:ef:
25:aa:f4:8d:f0:3a:b8:9d:65:53:c6:d2:f0:dd:ff:e9:1f:f1:
f8:66:95:3b:4d:d1:76:39:6b:c1:ef:6f:18:99:74:1e:38:47:
3a:c6:b1:30:6b:14:83:24:4c:43:36:0c:db:59:e6:69:86:19:
f0:74:09:30:37:7c:e9:9f:58:4b:65:92:68:e2:e4:2c:05:9e:
55:9e:87:38
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiIAPHPMGYNDDwvuEQzJ3AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwMTAxMTM0ODMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjRlMDBjZjI4ODk3NDg5MzFhOGU1Zjc0OTExOWZmNzFlZDJhOGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9N0s8zUAuz9Qtxnz+DHpHE469iv
nGZLbtogJhuMYDnqieWk75aETh6FsiYXH7e8NnbGZgh3lCnuNn/dlljewqGbQzCL
Wy0GUu9UCkLJYrd/4DWdIgpQZIqFfLsEAREF8ioQ1GjBdBK3sgu2oPnanb46/Opd
l5TAgKvcXtMmqge819VJroK9nEyFZusIjaQ0qga1ZF+AGN/X3SkATGGkum94kyp0
bRwo1xu5rLuBekr4vli6759Snx5RQ1jlD4GL5crnqjyLIUU3V7WkhNO3M6WIVgvf
UA/PCWgdPPHeu+k75V1bX+UZvVhV4gC3h65lyDunucU0H1FjgeNC87BQuwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBJOAM8oiXSJMajl90kRn/ce0qjnMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvRWs0QXp5aUpkSWt4cU9YM1NSR2Y5eDdTcU9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVo7MA0G
CSqGSIb3DQEBCwUAA4IBAQBLbOeNjyoClCRDIuHYsQ/5F2PqtbhnPIlqFTemH9J/
GXs7O6gClBqP+pDXj5MJ8sSMdOI/+nSQHA/UuPNW9VjUgvUAMnZc/ByGxD8KJpOD
/+dyJfZOX0n9ZtPSrqwdYdoE6ahiCWX3kdaQlVWMJddlhNT/A+DzMtZSdRwbXS/S
wiV2/PKghFGIxEhl9sGC37I6+v6YXzFSrHy+nQqBCMpg+PHEt4M00+cugwqpbS3j
jRVs4e8lqvSN8Dq4nWVTxtLw3f/pH/H4ZpU7TdF2OWvB728YmXQeOEc6xrEwaxSD
JExDNgzbWeZphhnwdAkwN3zpn1hLZZJo4uQsBZ5Vnoc4
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:53:17 2025 by rpki-client