Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/UENIpmP8FrjuW_tD_NxHxc2IJ4Y.roa
File: UENIpmP8FrjuW_tD_NxHxc2IJ4Y.roa (raw, json)
Hash identifier: va0nfW6ne1S84sok2Mgr+RwhiaSo1mT7RN932NLQD/E=
Subject key identifier: 50:43:48:A6:63:FC:16:B8:EE:5B:FB:43:FC:DC:47:C5:CD:88:27:86
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01944FB43A6C482FA1134FB0A390FF976BE1
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/UENIpmP8FrjuW_tD_NxHxc2IJ4Y.roa
Signing time: Fri 10 Jan 2025 10:13:19 +0000
ROA not before: Fri 10 Jan 2025 10:13:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209824
IP address blocks: 77.90.1.0/24 maxlen: 24
77.90.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4f:b4:3a:6c:48:2f:a1:13:4f:b0:a3:90:ff:97:6b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 10 10:13:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=504348a663fc16b8ee5bfb43fcdc47c5cd882786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:17:c4:7b:87:29:1f:59:ff:47:ed:e7:f9:94:
39:1c:20:9f:b4:49:7a:e4:c4:bb:a8:e5:08:12:37:
6f:a5:cb:fa:ef:c9:bd:b2:7b:9c:03:eb:2e:e1:c9:
38:7b:25:86:5e:c5:d7:3c:e9:96:d9:3e:06:5c:37:
5d:ab:2c:22:11:7a:35:aa:1b:ce:72:14:f6:5b:16:
e1:e0:77:f5:21:ec:99:9c:ad:74:bf:61:e7:97:4b:
d1:a8:8e:0a:4c:3e:37:4a:67:e6:b2:d0:cb:52:a0:
45:a0:66:f4:fd:86:28:b9:11:6b:cc:c4:cb:dc:13:
2f:19:6d:0a:27:a9:ed:0f:80:f5:31:f2:9a:31:c2:
5a:1e:e7:a7:f3:60:07:58:30:7a:0c:76:2b:e2:6b:
1c:05:75:2f:70:03:e9:c6:24:28:9c:08:15:b8:56:
30:9d:cd:32:d0:f5:1e:d3:a7:f8:dd:64:df:69:13:
a5:58:56:e1:3a:9d:d2:51:3d:fc:e0:4b:23:06:29:
2b:88:55:d0:7b:87:fa:2d:28:1a:ed:7f:97:1b:2d:
bd:da:fc:e7:21:84:76:bb:fa:16:9b:01:e3:f5:e0:
db:4e:23:8d:1d:b7:aa:39:fa:13:ed:36:13:bd:10:
7d:61:b4:22:0f:08:dc:11:da:2e:f0:78:7a:41:67:
71:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:43:48:A6:63:FC:16:B8:EE:5B:FB:43:FC:DC:47:C5:CD:88:27:86
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/UENIpmP8FrjuW_tD_NxHxc2IJ4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.1.0/24
77.90.29.0/24
Signature Algorithm: sha256WithRSAEncryption
99:f3:c3:bd:43:47:eb:4e:4f:2b:c0:3d:ff:bb:a1:ec:0d:bc:
2c:d4:8e:ec:93:ca:47:cb:f7:a5:42:47:4d:b8:08:fc:7e:35:
64:e2:d0:0f:5f:74:6f:e7:85:27:87:bf:7c:cb:0d:4c:89:0e:
36:e6:a9:d9:82:c2:10:86:66:2e:20:d6:b9:f7:3b:ef:36:ce:
a5:3c:ca:d2:bd:9e:0d:50:17:8c:00:07:3a:40:2d:1f:4c:cd:
7e:62:e1:d8:7a:f1:66:04:35:64:96:2d:32:b7:e8:12:1b:5c:
dc:46:30:7b:7a:ca:fa:db:2c:8d:cf:ef:1b:54:6d:a0:e2:4b:
f1:8c:f4:a6:19:63:5d:21:39:73:9f:74:13:7f:45:69:33:4e:
63:11:2d:cb:6c:77:ad:af:f2:ec:c5:58:32:b4:24:4e:43:1e:
52:b2:77:97:ee:26:af:ce:4f:01:65:07:b4:2a:3a:f1:18:4d:
38:2d:30:3f:84:05:2f:41:4a:ad:38:39:60:a3:f6:1e:ec:87:
f9:ed:92:7a:66:80:5b:cb:7c:53:8b:bf:1c:13:17:aa:88:fa:
fd:67:91:88:21:d8:90:d6:34:df:42:bc:d5:4a:27:bb:ee:1b:
f7:65:3c:1b:29:63:df:c5:3f:b0:10:91:4c:13:fe:ab:d0:8f:
dc:2c:db:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:18:43 2025 by rpki-client