Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/eOKwnHWvBBoHlkPKBFt3GFwzBac.roa
File: eOKwnHWvBBoHlkPKBFt3GFwzBac.roa (raw, json)
Hash identifier: HAKT9/yWddF/zDysa3FAYf7tk37beI50TEjzGa4Iuwg=
Subject key identifier: 78:E2:B0:9C:75:AF:04:1A:07:96:43:CA:04:5B:77:18:5C:33:05:A7
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0193622F582B231C3B158377F1E104C9122D
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/eOKwnHWvBBoHlkPKBFt3GFwzBac.roa
Signing time: Mon 25 Nov 2024 07:18:10 +0000
ROA not before: Mon 25 Nov 2024 07:18:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44592
IP address blocks: 77.90.15.0/24 maxlen: 24
77.90.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:62:2f:58:2b:23:1c:3b:15:83:77:f1:e1:04:c9:12:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 25 07:18:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78e2b09c75af041a079643ca045b77185c3305a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7d:2e:2d:38:85:c4:7c:ba:66:28:c4:5f:06:
4d:40:95:f6:63:18:67:37:95:a7:cd:8a:4f:1c:86:
4b:88:03:15:75:60:65:c3:80:5e:a9:ef:65:c0:19:
3b:ae:86:4b:aa:60:ab:89:1c:db:ed:53:24:45:6e:
85:63:1d:0e:61:5f:f3:fc:d9:3a:4d:52:2a:be:1f:
79:49:5b:59:ff:3a:1f:0c:75:88:bf:60:6f:a1:b5:
4c:67:81:a8:9a:f2:ca:35:f6:3f:4d:33:3e:24:35:
c8:0a:aa:8b:06:4f:2a:a6:f3:80:9f:ed:7b:f4:5e:
a0:29:b0:85:e9:e1:da:57:ca:42:35:16:aa:db:f7:
8e:4c:4e:4a:80:ce:b1:f8:64:02:0b:fc:53:a4:42:
cd:ea:11:ef:4e:a0:7f:c8:f8:ea:59:d5:4b:0b:ea:
1b:26:2e:58:33:ac:1a:27:b7:8e:90:58:8c:50:2f:
9f:c3:a1:10:25:e1:1a:96:f6:04:be:45:a1:ab:76:
d8:08:fe:81:2a:d0:72:3e:02:c3:39:3c:a5:76:5c:
05:32:f7:14:e3:1a:83:bf:8f:db:af:52:16:b6:d3:
7c:e4:9c:21:ea:68:44:b4:68:86:fb:78:b5:b5:29:
88:ee:bf:62:16:32:97:c3:f7:eb:d8:af:ed:d4:3c:
ad:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E2:B0:9C:75:AF:04:1A:07:96:43:CA:04:5B:77:18:5C:33:05:A7
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/eOKwnHWvBBoHlkPKBFt3GFwzBac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.15.0/24
77.90.17.0/24
Signature Algorithm: sha256WithRSAEncryption
92:f7:e4:cc:45:eb:dc:0c:1e:18:51:a4:b1:71:7b:a2:86:45:
8d:02:cb:42:65:7e:c4:20:dc:3a:09:63:04:97:39:22:8f:fb:
eb:ea:38:60:62:68:b6:2f:0c:22:2d:67:13:3a:70:57:fe:9b:
4e:0b:3f:a4:04:db:23:31:7d:6a:6d:26:08:96:93:2c:1d:0d:
41:16:6d:fc:5e:4e:c1:99:ae:3b:84:9a:bd:bf:d9:f7:47:61:
10:75:53:b1:e8:8d:7e:74:13:aa:ac:77:f7:ee:01:26:28:2b:
1e:b0:81:31:d8:e7:06:b5:76:8b:43:c6:36:26:d3:01:c2:d0:
8e:ec:69:f6:d7:95:f6:c9:2d:f5:d5:01:55:4b:be:9a:00:ee:
1c:9c:db:5a:36:12:4c:7b:a3:21:db:67:26:b4:56:12:cb:5a:
ac:10:ae:63:a7:6e:22:f0:67:36:90:a0:c8:26:ec:78:82:39:
8d:8d:59:2f:b4:f3:66:b5:3a:f6:eb:5d:ca:09:9e:bc:b4:c4:
3b:66:af:ca:17:06:2c:0b:55:2f:35:d0:cf:6d:b4:68:95:61:
0b:d2:ae:29:f6:8d:85:e7:e4:4e:96:c2:16:8d:4e:7a:b1:73:
a6:49:16:71:12:5b:21:79:80:45:09:e4:b8:d9:de:96:c2:c2:
d1:6c:d7:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:28:01 2025 by rpki-client