Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/f2WkIox2_NCJNCYPfKC5Wn7OgyQ.roa
File: f2WkIox2_NCJNCYPfKC5Wn7OgyQ.roa (raw, json)
Hash identifier: +V9ELoyY44cGJ9kKWzRzjJ+FrbniVFHm/dHB2aZPtPw=
Subject key identifier: 7F:65:A4:22:8C:76:FC:D0:89:34:26:0F:7C:A0:B9:5A:7E:CE:83:24
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194AB4B9DCF3F037B89DFC1961D1C10F3F5
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/f2WkIox2_NCJNCYPfKC5Wn7OgyQ.roa
Signing time: Tue 28 Jan 2025 05:04:06 +0000
ROA not before: Tue 28 Jan 2025 05:04:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208208
IP address blocks: 77.90.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ab:4b:9d:cf:3f:03:7b:89:df:c1:96:1d:1c:10:f3:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 28 05:04:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f65a4228c76fcd08934260f7ca0b95a7ece8324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:58:d9:ba:67:01:bd:2e:a7:79:27:03:98:26:
f7:98:48:e3:eb:3a:c4:93:01:87:8a:9e:3d:7f:04:
5a:bb:17:36:b7:eb:79:f6:a4:f1:fd:63:74:a4:d9:
bf:17:85:86:e9:6e:27:53:58:8d:82:48:dd:5c:ba:
b6:99:ad:ac:81:b4:19:47:2b:1f:28:8b:0e:48:12:
1e:29:a3:1a:37:e6:3f:5f:32:24:fb:e4:7c:34:c7:
55:b6:53:d8:42:13:1b:e1:a3:e0:e5:56:a6:c0:76:
e0:a0:f3:e7:e9:55:9d:0d:73:49:a3:df:d6:15:02:
79:9f:f5:99:54:54:ad:85:d9:78:3c:09:e0:74:df:
d4:21:7b:f5:7a:60:9d:6d:b0:d1:fa:2a:01:f8:c1:
d1:84:b6:fe:3d:39:30:d2:cf:f8:d9:21:05:cb:c9:
83:85:2a:ea:54:e2:0a:fe:4c:3d:ff:57:49:03:94:
71:61:f8:70:8b:d9:a5:a6:2b:17:fa:95:39:1d:5e:
e2:18:28:f5:81:2a:60:b5:c4:ff:00:7f:e3:13:c7:
a1:aa:6f:fc:25:bf:88:b1:30:dd:3e:8d:f2:5d:1e:
51:84:a7:23:70:35:33:cb:ce:1f:58:71:34:51:c5:
aa:6a:28:dc:0f:45:26:10:1e:fa:78:43:b8:af:52:
e9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:65:A4:22:8C:76:FC:D0:89:34:26:0F:7C:A0:B9:5A:7E:CE:83:24
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/f2WkIox2_NCJNCYPfKC5Wn7OgyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.46.0/24
Signature Algorithm: sha256WithRSAEncryption
22:1c:e7:00:6c:aa:48:4b:ba:94:c6:dc:ce:98:a4:5d:65:aa:
42:db:8c:f4:35:ec:6c:d0:a9:e3:5b:90:66:fb:d2:4c:ed:9e:
bb:9d:d2:84:f5:5e:a7:c4:18:37:9d:8b:91:8c:4d:9e:b1:cb:
5e:94:3f:30:9d:c1:5c:1d:5e:ba:13:ae:88:3a:7c:c1:6b:26:
ee:82:fc:d6:35:4d:0a:41:53:e3:af:d1:47:9c:47:54:a0:1f:
6d:1a:e6:69:26:ca:21:9c:64:2c:0c:18:bf:e7:75:40:47:d1:
48:89:35:08:2a:e9:f7:57:66:0a:0a:52:85:ae:43:ac:e7:f0:
8f:e3:fd:4e:cd:b6:77:e5:93:37:1d:48:25:d9:ca:71:eb:ae:
0b:6c:30:7d:bd:b3:04:29:0e:db:cf:0a:d5:2f:f2:dc:5c:13:
04:31:f4:59:8d:60:cc:30:cf:f2:c7:7e:63:a4:88:a9:10:b7:
b7:41:e8:e5:67:49:fc:e3:e4:f4:75:d2:d8:fa:e7:4a:a3:8b:
ec:72:1a:23:22:09:72:1b:6c:34:f2:17:71:b9:6e:c5:49:6c:
3d:df:7b:3a:8e:2b:a3:26:c5:8e:5d:4d:f8:da:5a:ff:fe:2a:
97:6a:6b:41:21:03:72:79:17:a4:bc:70:b4:df:c8:e5:2f:03:
a0:86:32:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:25:19 2025 by rpki-client