Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/mDnKPC0XY2uwcRkHsi3RmvH7GoU.roa
File: mDnKPC0XY2uwcRkHsi3RmvH7GoU.roa (raw, json)
Hash identifier: lqdPTzO8zfi7RFbP6QensWdit7VgFanNYF80l9B9vnQ=
Subject key identifier: 98:39:CA:3C:2D:17:63:6B:B0:71:19:07:B2:2D:D1:9A:F1:FB:1A:85
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01952F69E02EA88CC9DAF357825905164367
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/mDnKPC0XY2uwcRkHsi3RmvH7GoU.roa
Signing time: Sat 22 Feb 2025 20:47:02 +0000
ROA not before: Sat 22 Feb 2025 20:47:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 23506
IP address blocks: 77.90.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:2f:69:e0:2e:a8:8c:c9:da:f3:57:82:59:05:16:43:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 22 20:47:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9839ca3c2d17636bb0711907b22dd19af1fb1a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3e:2c:0b:6e:58:06:9b:8a:b8:ed:f8:ff:db:
b2:0a:b6:09:80:28:fc:f4:6c:e6:74:ed:62:f6:3e:
9e:da:b6:6b:5c:3b:ac:a8:30:25:75:04:ae:60:33:
f4:df:2b:fc:81:fb:cc:9f:96:6a:80:87:21:09:e7:
6e:ad:30:ab:37:e8:37:ee:36:18:e2:e7:91:66:1a:
25:ca:de:9a:a9:a6:de:a2:a4:be:30:05:86:87:1e:
c8:16:47:66:82:1c:17:f8:ff:34:ce:2e:bf:a6:64:
6e:ac:7c:a7:d7:94:0f:45:92:7e:e6:7e:ed:f3:ba:
e0:c9:10:28:bb:a7:27:ec:9c:5e:ca:90:e3:bc:11:
78:f6:12:2e:fb:ff:15:a6:31:b9:ae:bb:e0:af:13:
6d:66:f5:5b:09:82:ee:a0:51:f1:b2:ff:91:5c:9d:
b4:f0:d4:c2:30:0c:0d:ab:22:7f:64:af:43:84:df:
8d:6f:ec:e6:7f:b8:68:ff:0f:6d:f3:3f:eb:38:61:
d6:61:03:98:33:3b:e6:33:a8:f5:15:55:6a:d6:a9:
1c:a0:45:aa:c1:cd:b7:d1:ef:c6:df:85:3b:7e:c3:
06:37:fa:da:2f:f1:f8:0b:96:d3:99:cf:f5:ea:45:
d0:17:bd:1c:b3:ea:f4:9f:23:e4:3d:00:d5:dd:7a:
b4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:39:CA:3C:2D:17:63:6B:B0:71:19:07:B2:2D:D1:9A:F1:FB:1A:85
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/mDnKPC0XY2uwcRkHsi3RmvH7GoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.25.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:c4:41:d2:53:ba:a7:57:e1:9b:79:f5:56:e8:cf:32:25:f0:
7e:92:c6:24:66:83:0f:27:6a:df:63:7a:f2:c4:00:b8:a5:30:
72:6c:a1:7d:6f:45:d8:ca:49:c4:d9:92:8e:22:c5:bb:cd:96:
d6:ef:17:8f:c7:19:c8:32:3e:6c:1d:db:87:e4:f8:0b:61:49:
f9:cc:1f:3b:5b:3f:d8:08:d8:3f:e1:66:e8:b8:6f:44:76:19:
c4:f5:e9:5e:7a:b2:08:82:04:38:2b:d8:6e:a3:9e:80:79:61:
8a:f3:0e:6d:f6:c2:dd:e9:81:87:e7:6e:4a:21:70:dc:39:2e:
cb:fa:c1:97:71:01:90:d0:59:5f:7f:93:73:80:9b:3f:08:fe:
8e:49:1f:a4:a3:9e:c0:e0:9b:78:8d:93:8e:a7:6d:a6:a0:a3:
90:0c:3f:4a:0c:fe:23:6d:9f:fc:26:3c:37:db:3e:25:64:4d:
ad:fa:23:a3:ac:b6:ea:bf:fa:96:03:c0:75:d8:c6:c0:2f:27:
04:50:78:71:75:58:a7:0f:79:bb:c3:d3:37:10:2d:e2:31:90:
79:55:51:cd:91:6c:c1:20:a9:a8:63:39:f0:70:7c:60:19:cd:
5e:17:0b:b2:f7:15:26:9a:8a:55:ec:84:15:56:c3:d6:ed:af:
6f:cb:23:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:28:09 2025 by rpki-client