Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/hrmuoBmU-XfdnyLLXHNLies3Igk.roa
File: hrmuoBmU-XfdnyLLXHNLies3Igk.roa (raw, json)
Hash identifier: caiRfencQzdbdLvFuccSAxDuQid6hmdESjvrmlC/hqY=
Subject key identifier: 86:B9:AE:A0:19:94:F9:77:DD:9F:22:CB:5C:73:4B:89:EB:37:22:09
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194222007697B81AB627BE74B03AE18CA89
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/hrmuoBmU-XfdnyLLXHNLies3Igk.roa
Signing time: Wed 01 Jan 2025 13:48:31 +0000
ROA not before: Wed 01 Jan 2025 13:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197477
IP address blocks: 77.90.10.0/24 maxlen: 24
77.90.11.0/24 maxlen: 24
77.90.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:07:69:7b:81:ab:62:7b:e7:4b:03:ae:18:ca:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 1 13:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=86b9aea01994f977dd9f22cb5c734b89eb372209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f8:e3:17:b6:6e:cf:1a:57:4a:de:07:58:af:
2a:75:b1:48:a6:d7:6e:91:62:11:90:0e:f4:45:70:
f7:de:42:c4:b4:f0:12:d9:16:c0:6d:0c:a6:11:3f:
19:77:9a:e1:bc:00:77:5d:26:11:6e:aa:ad:80:e1:
69:82:20:5e:41:24:d0:f6:c6:7f:ec:fb:1a:6f:b2:
73:72:c7:6f:f0:36:36:87:4c:83:f4:0a:3b:1c:ba:
43:fa:43:3f:cd:14:d2:fd:47:34:9e:08:d9:06:7b:
22:8e:43:69:4f:15:83:7d:50:65:96:3d:64:34:d5:
ba:8c:25:0e:d4:da:75:fc:66:dd:43:c3:4e:fa:49:
81:26:93:4c:86:60:26:9a:ea:d0:cf:1b:22:eb:32:
f9:fa:ba:03:0a:aa:5f:50:1d:5d:12:11:3e:cc:c5:
3b:aa:d3:d8:06:9c:53:b4:df:08:55:c3:35:0d:60:
e8:32:34:02:bf:7f:32:b5:12:35:24:a7:f1:33:3a:
61:fe:7b:c1:67:28:67:38:aa:3f:f9:d7:cd:b2:92:
c7:ca:c9:da:67:dc:7e:d5:eb:fb:3d:a3:1e:dc:4f:
24:7f:fe:8f:7c:73:3b:0c:e6:df:c2:ca:99:96:d6:
75:68:75:08:f7:23:6c:3c:05:2f:14:01:26:db:cb:
8b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B9:AE:A0:19:94:F9:77:DD:9F:22:CB:5C:73:4B:89:EB:37:22:09
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/hrmuoBmU-XfdnyLLXHNLies3Igk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.10.0/23
77.90.50.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:42:56:de:65:df:a0:0b:8e:c6:ee:9c:7b:38:bc:9d:61:1f:
41:9c:92:b1:d8:c7:9f:61:a5:e2:2d:ae:2d:1d:90:ea:d9:b2:
0a:bd:65:c8:a6:77:2b:ad:ad:90:6d:03:4a:82:9e:7c:0c:4c:
27:25:98:d3:41:1c:db:66:1a:e1:ab:3f:90:1f:96:f3:b4:11:
df:93:83:12:cc:30:62:b1:15:a6:50:d2:6d:df:21:6f:38:cc:
c4:2b:94:9e:66:07:89:65:84:4f:2c:63:cf:9f:11:c6:d6:2b:
66:4f:bb:b0:2e:15:b3:9c:1d:bd:bc:13:87:2f:cc:ea:45:b1:
c3:1d:49:38:78:76:9f:97:4d:30:75:77:ba:37:aa:0a:46:a5:
75:9f:45:10:9f:14:48:c3:29:72:6b:96:ee:b5:a9:26:73:06:
3e:ea:83:e3:99:c8:06:6a:d0:28:b2:88:45:d2:36:86:65:b1:
38:09:30:6a:50:07:6e:29:02:93:53:f9:60:04:71:e0:2d:f3:
5c:95:40:70:20:83:6b:b7:1c:83:fb:cf:a1:16:21:7e:7e:f1:
6b:f4:d4:33:e7:13:2b:0f:c1:56:03:80:05:b1:a6:97:20:7e:
19:fd:c9:f3:a0:22:b7:40:83:ba:73:e5:db:f5:b5:1b:f8:bc:
9e:b1:df:66
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQiIAdpe4GrYnvnSwOuGMqJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwMTAxMTM0ODMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NmI5YWVhMDE5OTRmOTc3ZGQ5ZjIyY2I1YzczNGI4OWViMzcyMjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPjjF7ZuzxpXSt4HWK8qdbFIptdu
kWIRkA70RXD33kLEtPAS2RbAbQymET8Zd5rhvAB3XSYRbqqtgOFpgiBeQSTQ9sZ/
7Psab7Jzcsdv8DY2h0yD9Ao7HLpD+kM/zRTS/Uc0ngjZBnsijkNpTxWDfVBllj1k
NNW6jCUO1Np1/GbdQ8NO+kmBJpNMhmAmmurQzxsi6zL5+roDCqpfUB1dEhE+zMU7
qtPYBpxTtN8IVcM1DWDoMjQCv38ytRI1JKfxMzph/nvBZyhnOKo/+dfNspLHysna
Z9x+1ev7PaMe3E8kf/6PfHM7DObfwsqZltZ1aHUI9yNsPAUvFAEm28uLPQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIa5rqAZlPl33Z8iy1xzS4nrNyIJMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvaHJtdW9CbVUtWGZkbnlMTFhITkxpZXMzSWdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBTVoKAwQA
TVoyMA0GCSqGSIb3DQEBCwUAA4IBAQCjQlbeZd+gC47G7px7OLydYR9BnJKx2Mef
YaXiLa4tHZDq2bIKvWXIpncrra2QbQNKgp58DEwnJZjTQRzbZhrhqz+QH5bztBHf
k4MSzDBisRWmUNJt3yFvOMzEK5SeZgeJZYRPLGPPnxHG1itmT7uwLhWznB29vBOH
L8zqRbHDHUk4eHafl00wdXe6N6oKRqV1n0UQnxRIwylya5butakmcwY+6oPjmcgG
atAosohF0jaGZbE4CTBqUAduKQKTU/lgBHHgLfNclUBwIINrtxyD+8+hFiF+fvFr
9NQz5xMrD8FWA4AFsaaXIH4Z/cnzoCK3QIO6c+Xb9bUb+Lyesd9m
-----END CERTIFICATE-----
Generated at Sat Apr 12 03:20:24 2025 by rpki-client