Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Vc3zKuNR9mEWPuEwG-D0j2FlBlM.roa
File: Vc3zKuNR9mEWPuEwG-D0j2FlBlM.roa (raw, json)
Hash identifier: 3XLxgCKSTESZFDIW3VKE99BHqIKElBgZb52MmzHDfOc=
Subject key identifier: 55:CD:F3:2A:E3:51:F6:61:16:3E:E1:30:1B:E0:F4:8F:61:65:06:53
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194256DC875E5B61656AE3CFE01BB8B7AA0
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Vc3zKuNR9mEWPuEwG-D0j2FlBlM.roa
Signing time: Thu 02 Jan 2025 05:12:19 +0000
ROA not before: Thu 02 Jan 2025 05:12:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197477
IP address blocks: 77.90.10.0/24 maxlen: 24
77.90.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:6d:c8:75:e5:b6:16:56:ae:3c:fe:01:bb:8b:7a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 2 05:12:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55cdf32ae351f661163ee1301be0f48f61650653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4f:e8:88:be:45:f6:96:a5:03:94:01:19:1d:
f1:45:f7:ce:1a:f2:60:ef:75:f7:9d:bb:0a:61:ab:
bb:7b:17:03:02:54:92:ea:e7:52:0f:a0:04:34:0d:
ab:27:d2:d1:06:2c:30:3f:6d:11:5e:72:51:28:62:
a7:f4:a9:d1:80:a4:d8:b9:ff:35:18:cf:e1:bb:13:
93:fb:99:15:f8:56:77:74:30:e3:d8:4d:6f:fb:20:
f4:e6:d6:bf:fb:e7:99:cb:3d:7e:64:38:4e:bf:54:
94:8c:ba:e5:41:78:fb:fe:bb:33:09:dd:37:8c:7d:
94:02:00:04:fd:8d:dd:7d:cb:9a:5e:c7:9d:e1:72:
65:ce:ae:39:58:66:76:45:f6:73:44:07:b2:c1:f4:
d6:aa:12:f5:e5:da:3d:1f:31:9d:ad:17:e1:34:ed:
20:7f:10:f7:19:9d:da:8c:db:87:68:6b:38:54:ae:
63:f4:fa:59:ff:c3:00:75:90:37:54:6c:e2:db:85:
38:60:f4:23:85:6a:c0:57:28:5d:cd:7c:37:29:4a:
09:c8:51:fe:40:73:68:03:2a:8a:fe:01:57:21:52:
6f:ef:7b:72:75:a7:87:85:bf:4a:db:c2:d1:70:f2:
65:f3:5c:2b:77:5f:a1:6d:4d:a7:b2:ad:ec:18:03:
4e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:CD:F3:2A:E3:51:F6:61:16:3E:E1:30:1B:E0:F4:8F:61:65:06:53
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Vc3zKuNR9mEWPuEwG-D0j2FlBlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.10.0/23
Signature Algorithm: sha256WithRSAEncryption
67:c9:47:5b:40:42:56:70:52:6d:75:7e:34:71:a7:98:b8:21:
f2:bb:31:68:67:07:35:15:f1:9d:fe:27:43:44:4d:0a:8c:df:
0c:19:29:4c:32:eb:3c:0d:08:1d:34:5c:d6:27:7d:29:41:fc:
7a:ef:fc:2a:4a:08:dc:b5:6e:46:d8:75:12:8e:e1:41:57:bc:
b5:91:aa:d6:e2:7e:fe:13:c7:f3:68:57:f6:87:be:63:22:35:
74:5d:60:db:8f:52:71:d9:18:d1:ae:0c:69:8d:a8:97:af:46:
b7:53:8e:ad:30:36:c0:71:bf:0a:08:38:78:4e:39:08:ad:56:
a0:c5:74:8d:28:56:0a:d3:b6:a3:ba:d9:d6:31:ec:8e:8c:50:
a1:1c:04:8b:82:fb:ad:db:72:fd:22:eb:28:72:4a:2e:6a:93:
12:8f:49:45:19:c7:b5:63:1c:56:45:7e:e6:b0:13:6b:62:1a:
ef:f0:95:34:aa:e9:ea:b0:12:b7:18:db:b0:88:ad:22:39:a2:
51:f2:9c:2b:51:b1:81:39:27:6a:d5:4a:14:c7:09:89:08:4f:
b1:22:46:1e:8c:7b:1b:dd:6a:2e:ed:00:c3:d5:e8:a2:79:71:
0f:5c:73:2f:64:3c:3b:6a:12:7a:60:b0:13:58:6a:08:28:c3:
cd:4e:98:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:13:02 2025 by rpki-client