Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/keWa76--2wWGsjtnIxMsQrPAq04.roa
File: keWa76--2wWGsjtnIxMsQrPAq04.roa (raw, json)
Hash identifier: /d0JzNS1XUB7IgEz9TY7T8b0jGrw0CKx1AVC77cw2fY=
Subject key identifier: 91:E5:9A:EF:AF:BE:DB:05:86:B2:3B:67:23:13:2C:42:B3:C0:AB:4E
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194C7A992F811DA05ABBED3A32B9F130A08
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/keWa76--2wWGsjtnIxMsQrPAq04.roa
Signing time: Sun 02 Feb 2025 17:16:06 +0000
ROA not before: Sun 02 Feb 2025 17:16:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214603
IP address blocks: 77.90.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c7:a9:92:f8:11:da:05:ab:be:d3:a3:2b:9f:13:0a:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 2 17:16:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=91e59aefafbedb0586b23b6723132c42b3c0ab4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:91:ee:4f:f5:b1:be:87:94:2e:ff:3f:02:4b:
b0:dc:49:de:aa:e9:cb:c6:10:25:24:f8:59:4e:53:
46:83:a5:86:94:ae:43:b0:aa:5c:8f:98:cd:be:6d:
50:24:4f:97:64:c2:b2:55:19:a1:6f:6c:44:8c:ee:
b7:19:8c:5b:c0:48:32:f0:de:85:45:9a:09:69:be:
33:ed:85:e7:40:59:aa:93:7a:28:ad:60:31:52:d2:
7f:b6:02:c3:a6:85:33:80:88:af:2f:8e:ca:04:54:
2c:55:61:4c:f0:a3:b2:18:26:5e:64:aa:46:29:77:
88:a0:84:b7:bc:4c:78:33:46:49:39:e9:46:e4:26:
35:b3:0b:5a:2f:ce:5c:db:06:e1:d1:d3:73:af:64:
4e:8f:fb:9e:fc:74:cb:c7:49:06:62:a9:fd:39:08:
2a:19:14:a1:4b:1c:f1:ab:c4:9d:37:a3:66:92:a0:
28:5e:9e:43:38:79:1c:69:15:99:43:f5:90:8c:7a:
5c:06:1c:63:e2:d9:d5:74:2a:a8:5e:fe:21:66:50:
69:a6:33:36:e6:40:35:30:d1:47:86:77:ab:f4:cb:
1c:a1:a2:ce:eb:e8:b0:9e:84:47:01:fe:03:b2:6e:
0b:af:ec:3f:bd:d3:3f:33:72:c5:05:bf:ba:7d:61:
9d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E5:9A:EF:AF:BE:DB:05:86:B2:3B:67:23:13:2C:42:B3:C0:AB:4E
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/keWa76--2wWGsjtnIxMsQrPAq04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.18.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:62:ff:0f:5f:78:01:36:69:83:7f:47:7f:41:49:30:95:28:
fc:a3:af:96:ed:f5:9b:2e:05:1a:f3:9f:c8:25:8f:dc:95:a5:
3b:2b:5c:30:ec:db:d4:55:94:9e:c6:bb:52:57:74:d2:43:83:
62:17:7f:ed:97:ae:51:77:ae:0e:13:9b:9b:8a:e0:4c:4d:25:
f2:74:e8:83:46:b7:d7:3d:fb:6a:a6:cc:5b:9c:dd:5e:e5:00:
3e:63:6b:9d:cb:d2:ad:7e:da:45:5e:0e:86:ef:9a:cc:51:c4:
04:3d:a2:d3:be:7a:3f:96:04:dd:fa:de:45:d9:01:4d:d5:84:
12:0d:c5:1c:38:1c:06:36:aa:db:7f:e5:9f:27:de:17:fd:ee:
0c:f0:02:bf:32:e7:f7:a3:11:de:d0:6b:ab:08:88:d2:ca:d2:
a4:b2:2d:54:a5:15:14:38:49:66:07:d5:26:c3:c0:3c:01:d0:
84:e9:55:20:25:70:63:1d:87:a9:f1:48:c1:5e:0c:74:59:be:
b9:6c:79:61:e3:2f:ab:8b:a1:a3:2a:48:ad:b8:76:3b:38:2b:
3f:4f:73:e1:07:8a:85:8b:2c:92:3c:ec:62:70:10:e9:4d:b3:
75:4d:ff:e8:60:77:65:6b:11:11:0e:5e:57:d3:0a:43:30:11:
bc:1d:42:e0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZTHqZL4EdoFq77ToyufEwoIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwMjAyMTcxNjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MWU1OWFlZmFmYmVkYjA1ODZiMjNiNjcyMzEzMmM0MmIzYzBhYjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA55HuT/WxvoeULv8/Akuw3EnequnL
xhAlJPhZTlNGg6WGlK5DsKpcj5jNvm1QJE+XZMKyVRmhb2xEjO63GYxbwEgy8N6F
RZoJab4z7YXnQFmqk3oorWAxUtJ/tgLDpoUzgIivL47KBFQsVWFM8KOyGCZeZKpG
KXeIoIS3vEx4M0ZJOelG5CY1swtaL85c2wbh0dNzr2ROj/ue/HTLx0kGYqn9OQgq
GRShSxzxq8SdN6NmkqAoXp5DOHkcaRWZQ/WQjHpcBhxj4tnVdCqoXv4hZlBppjM2
5kA1MNFHhner9MscoaLO6+iwnoRHAf4Dsm4Lr+w/vdM/M3LFBb+6fWGdJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJHlmu+vvtsFhrI7ZyMTLEKzwKtOMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEva2VXYTc2LS0yd1dHc2p0bkl4TXNRclBBcTA0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVoSMA0G
CSqGSIb3DQEBCwUAA4IBAQDGYv8PX3gBNmmDf0d/QUkwlSj8o6+W7fWbLgUa85/I
JY/claU7K1ww7NvUVZSexrtSV3TSQ4NiF3/tl65Rd64OE5ubiuBMTSXydOiDRrfX
PftqpsxbnN1e5QA+Y2udy9KtftpFXg6G75rMUcQEPaLTvno/lgTd+t5F2QFN1YQS
DcUcOBwGNqrbf+WfJ94X/e4M8AK/Muf3oxHe0GurCIjSytKksi1UpRUUOElmB9Um
w8A8AdCE6VUgJXBjHYep8UjBXgx0Wb65bHlh4y+ri6GjKkituHY7OCs/T3PhB4qF
iyySPOxicBDpTbN1Tf/oYHdlaxERDl5X0wpDMBG8HULg
-----END CERTIFICATE-----
Generated at Sat Apr 12 03:18:10 2025 by rpki-client