Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/hrBvIsZQIOXjaOtw_nmEb4oJVn4.roa
File: hrBvIsZQIOXjaOtw_nmEb4oJVn4.roa (raw, json)
Hash identifier: OgPUQHIj+F21Gc9eM9sn9vY41CmPUtZ10Iu27N0rS8s=
Subject key identifier: 86:B0:6F:22:C6:50:20:E5:E3:68:EB:70:FE:79:84:6F:8A:09:56:7E
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019489C57560B17F94FC4439B5273BDBCBDD
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/hrBvIsZQIOXjaOtw_nmEb4oJVn4.roa
Signing time: Tue 21 Jan 2025 16:50:06 +0000
ROA not before: Tue 21 Jan 2025 16:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200461
IP address blocks: 77.90.44.0/24 maxlen: 24
178.18.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:89:c5:75:60:b1:7f:94:fc:44:39:b5:27:3b:db:cb:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 21 16:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=86b06f22c65020e5e368eb70fe79846f8a09567e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a9:dd:f1:65:f6:3d:c8:ab:4b:0a:ca:5f:4f:
1b:c0:d0:c3:05:fe:f8:4c:bd:c5:38:5f:82:a2:2a:
e7:c2:ae:71:dc:95:71:00:10:57:c6:6d:f3:28:80:
15:fd:01:31:bf:16:5d:a1:c3:a0:49:31:25:ad:54:
1f:7f:72:d5:2f:0a:8e:37:97:89:db:8e:49:89:a7:
a5:bc:26:af:49:da:07:b5:57:38:d6:be:3b:98:eb:
44:c9:cc:4a:1e:f9:e6:4d:8c:1d:a9:0b:c6:c2:6e:
98:f8:8f:63:03:d8:76:c2:d7:b5:ca:7b:93:a9:9c:
e0:2d:2d:dd:c3:f8:40:c1:d7:29:e7:ea:5b:8b:5d:
8a:8e:22:f0:a5:59:01:28:e1:b4:2a:78:ff:61:77:
5e:8b:8f:06:81:da:bc:07:33:a6:92:a8:1c:a1:bb:
9e:7c:ac:73:1b:c8:3f:f0:86:21:2c:8e:5c:64:90:
04:35:67:be:6f:87:89:e8:1d:3e:6d:5e:3e:b2:af:
d9:42:f8:c8:51:04:b3:90:1b:e7:fa:35:25:27:05:
e5:b7:f3:64:53:19:22:97:17:80:dd:8a:2c:b1:f3:
83:97:5d:ce:0c:33:1f:5f:db:06:fc:fd:a6:a9:a5:
94:9e:cf:11:bf:4c:32:5b:92:4b:a6:7a:fc:6e:2f:
e3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B0:6F:22:C6:50:20:E5:E3:68:EB:70:FE:79:84:6F:8A:09:56:7E
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/hrBvIsZQIOXjaOtw_nmEb4oJVn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.44.0/24
178.18.148.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:3f:24:b3:f9:a7:bb:75:e0:1b:72:c2:a9:29:99:76:2c:09:
38:d8:c0:24:09:e1:85:93:92:d2:fa:f7:49:d5:c2:ad:ae:a1:
70:a4:57:16:70:12:5e:6f:1e:d9:db:5f:88:b0:9f:b5:e1:43:
a8:5a:a4:70:c4:c6:d5:de:5b:a7:84:0e:d2:4c:1b:74:f2:39:
63:20:37:22:03:4a:a4:95:dc:43:50:50:ff:82:06:d8:67:fe:
b3:4f:16:40:fc:74:85:dc:0b:e1:80:6b:0c:ef:0d:25:a2:21:
90:bd:05:94:de:5e:5b:79:1a:6b:ad:93:6c:0f:4a:67:bc:22:
8d:93:1c:8c:17:79:46:27:d9:3d:b1:26:18:b2:45:12:61:d2:
01:24:26:eb:df:4f:d8:42:61:85:de:4c:b9:79:e3:77:b6:39:
8a:f9:58:08:98:88:13:0d:6c:ba:6b:1c:5b:da:63:a8:7b:08:
71:6c:4d:6d:5f:b6:e4:6a:79:59:d0:71:60:b6:ce:cb:d5:05:
c6:41:40:ee:a2:bf:41:1e:e3:0d:cd:34:e8:6c:e6:54:e2:ce:
cb:82:8d:14:69:4e:6f:2d:8c:0f:a8:8e:db:e2:ee:e6:94:03:
ed:62:ff:bc:67:f3:e4:81:ef:93:d0:82:12:fc:dd:5c:ad:18:
26:12:7d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:44:23 2025 by rpki-client