Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/JADoHBRM7Gxz1O50lWsbmOY2wlo.roa
File: JADoHBRM7Gxz1O50lWsbmOY2wlo.roa (raw, json)
Hash identifier: tqoi2TiFDKg8Qm+mffHyoFjBkRMMUOFMuJ8YNtk8lvY=
Subject key identifier: 24:00:E8:1C:14:4C:EC:6C:73:D4:EE:74:95:6B:1B:98:E6:36:C2:5A
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01954683458D91756E82ACE3081C41862191
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/JADoHBRM7Gxz1O50lWsbmOY2wlo.roa
Signing time: Thu 27 Feb 2025 08:26:02 +0000
ROA not before: Thu 27 Feb 2025 08:26:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213851
IP address blocks: 77.90.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:46:83:45:8d:91:75:6e:82:ac:e3:08:1c:41:86:21:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 27 08:26:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2400e81c144cec6c73d4ee74956b1b98e636c25a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:dc:2d:ce:9d:e3:8c:74:e4:59:96:37:b5:34:
bd:6c:38:3a:8a:5a:50:92:f8:69:27:44:d9:bd:76:
85:88:0e:bc:33:f1:0f:6e:6b:80:07:de:06:28:5f:
c1:07:61:e1:ab:71:0b:53:2e:d4:27:c4:ad:1a:17:
87:dd:29:ac:8e:65:11:15:33:1f:56:c5:b6:84:a1:
d3:b1:91:c1:6c:68:03:3e:e9:a3:88:25:db:18:95:
2c:76:67:f4:e9:8b:92:a2:1a:72:89:83:0d:84:ee:
77:ce:53:0c:11:b2:30:f9:a1:14:bf:08:7c:a3:ed:
fb:07:56:4c:89:b3:53:0b:32:a0:60:cf:be:4a:52:
36:1c:8f:ba:86:d6:6a:ee:aa:07:3e:d7:2b:56:59:
5d:08:a7:5d:28:62:51:b8:41:75:b5:b9:4e:48:e6:
a0:4e:d2:94:3b:8d:08:f4:36:95:76:3a:52:37:eb:
a5:2b:12:34:a6:2a:a5:17:be:e7:a6:62:d5:09:17:
f0:39:d7:80:a0:f7:87:4f:04:75:aa:62:db:2c:f1:
d8:13:19:a4:b1:84:88:3d:ae:07:04:c6:18:62:1b:
e6:19:d2:05:ed:a9:c6:74:18:52:4b:fc:0b:9d:81:
b6:02:8b:b8:96:91:9d:56:68:5e:d0:d7:5e:bd:1f:
4c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:00:E8:1C:14:4C:EC:6C:73:D4:EE:74:95:6B:1B:98:E6:36:C2:5A
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/JADoHBRM7Gxz1O50lWsbmOY2wlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.30.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:b6:d3:e0:a6:2c:df:0f:a9:43:50:2c:19:b6:7e:f1:1f:e3:
fb:11:d3:55:3f:e9:76:bd:65:dd:9f:e0:9d:26:4c:4a:9c:2f:
2d:78:9f:ad:46:0d:cf:d2:ff:34:5c:a7:72:d6:f2:58:7d:b5:
6e:2c:fd:db:72:36:03:75:0a:4f:5a:39:3f:42:3e:7f:82:05:
46:2d:54:45:a6:e8:03:bb:d8:88:6e:3e:75:6f:5f:d3:3b:3b:
2b:7e:c1:92:d0:8f:28:bc:30:6b:2b:ee:b2:0c:cf:b9:ae:4a:
f7:be:35:b6:07:9d:05:57:63:2e:8d:52:7f:41:0b:85:81:2c:
a1:90:35:ed:c9:4e:0b:bf:30:0e:79:13:a7:f5:ea:1c:f2:e9:
cb:98:8f:b2:47:4b:41:51:83:4c:6c:89:f4:d3:fe:53:82:c8:
9c:be:61:85:d1:f5:92:b3:f8:be:5c:66:77:cd:14:81:9c:78:
e8:c6:ed:8f:40:78:26:ce:64:91:b7:1c:cc:8d:7c:36:df:7b:
b7:77:d8:2c:21:fb:09:04:1e:75:90:c8:70:11:79:8e:51:6d:
38:7b:a0:c1:da:50:41:3f:cf:87:19:d0:00:93:7b:ff:19:7d:
d7:b0:66:51:c2:32:4b:ba:44:ef:a9:57:f6:40:ed:1e:0b:4a:
80:87:c0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:22:54 2025 by rpki-client