Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/uC9LSXY4UFWvwYG0FHwW2rotcYs.roa
File: uC9LSXY4UFWvwYG0FHwW2rotcYs.roa (raw, json)
Hash identifier: k4ofKb8EYZ2g4A66UupONZfzFzda35vogYPPn8I2YqA=
Subject key identifier: B8:2F:4B:49:76:38:50:55:AF:C1:81:B4:14:7C:16:DA:BA:2D:71:8B
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194B2B000FB1F44FABF200F4623AA13B2F3
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/uC9LSXY4UFWvwYG0FHwW2rotcYs.roa
Signing time: Wed 29 Jan 2025 15:31:06 +0000
ROA not before: Wed 29 Jan 2025 15:31:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213495
IP address blocks: 77.90.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b2:b0:00:fb:1f:44:fa:bf:20:0f:46:23:aa:13:b2:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 29 15:31:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b82f4b4976385055afc181b4147c16daba2d718b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:64:19:49:9e:af:a8:60:ff:eb:54:26:62:89:
de:a5:c5:9c:66:1b:73:26:a0:b6:04:a0:64:36:6d:
bd:87:b2:dd:f3:7a:9e:0d:6c:67:43:d0:1e:b9:ce:
a9:d1:7c:0c:58:69:d1:60:01:92:99:d7:61:ae:53:
ff:44:94:b2:df:2c:b7:75:95:8d:86:a8:3e:e9:31:
bd:b6:11:ea:a5:53:88:d2:3e:c9:64:28:7a:38:62:
a7:b6:4a:95:ea:e1:97:90:6f:29:a2:42:a6:ea:b7:
f4:8a:dd:0c:51:cc:78:2a:e9:1d:ca:f0:e1:9e:03:
25:0c:98:58:06:0c:8f:ee:6e:d6:da:b8:4a:e2:55:
5d:87:c3:06:82:62:ed:24:e4:36:2a:3a:da:c5:37:
15:05:70:d9:eb:a2:7b:15:65:0d:b1:3d:aa:06:f9:
50:6a:d4:9a:15:b6:ea:d2:3e:f9:bd:e1:54:3d:77:
d5:55:42:0c:17:30:ea:71:b9:55:7c:68:7d:9b:7b:
87:8b:1a:d4:12:7e:7e:7d:82:08:1f:c9:80:5e:01:
76:b1:fc:5e:4a:18:e7:ed:e1:ba:67:af:00:8c:9d:
04:2e:4a:c6:7f:e6:a2:9a:38:de:5d:a6:b8:be:5d:
19:6c:e0:fc:ec:9a:88:c3:96:d7:72:63:74:a9:46:
40:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:2F:4B:49:76:38:50:55:AF:C1:81:B4:14:7C:16:DA:BA:2D:71:8B
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/uC9LSXY4UFWvwYG0FHwW2rotcYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.40.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:19:9c:32:d3:18:17:8a:b2:0b:ad:95:04:81:b8:0f:11:dc:
eb:9c:20:2c:e6:8a:be:30:1a:e0:13:95:68:a8:f1:03:ba:69:
e3:b7:41:ff:18:d7:23:3e:02:6f:4e:85:18:3f:93:ee:93:35:
30:6f:80:df:2a:4d:28:fa:9e:f3:39:65:6f:6a:4e:71:52:7f:
7f:30:df:32:ae:26:73:6b:85:a6:0a:b0:40:e2:61:18:91:59:
98:b4:f1:47:71:ff:55:a7:2b:9e:b1:d8:1c:95:fe:66:16:4a:
20:e2:70:ab:39:6d:0a:c7:d2:8c:aa:81:36:2e:45:a9:40:ab:
a2:06:bf:98:aa:ed:9c:a3:13:0b:ed:d8:25:08:62:bc:31:19:
63:d9:0e:a5:ec:fe:ab:5b:62:f4:c8:bd:74:cb:8d:dc:ce:2e:
8f:3e:73:41:66:9f:d8:6d:6e:e4:10:4b:d1:63:80:ff:9d:2e:
38:51:83:98:9c:2a:8b:07:46:75:60:a4:2c:69:a4:be:ec:19:
ea:6b:4e:96:a5:69:1b:7b:12:03:8d:10:3f:c0:05:26:6d:cf:
6d:3e:20:93:30:a8:fa:fd:16:fe:5d:a9:09:37:a6:d3:34:2b:
4e:42:f1:77:40:92:cb:34:da:05:dd:f7:67:8a:3f:58:10:85:
3f:ef:0c:57
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZSysAD7H0T6vyAPRiOqE7LzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwMTI5MTUzMTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODJmNGI0OTc2Mzg1MDU1YWZjMTgxYjQxNDdjMTZkYWJhMmQ3MThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGQZSZ6vqGD/61QmYonepcWcZhtz
JqC2BKBkNm29h7Ld83qeDWxnQ9Aeuc6p0XwMWGnRYAGSmddhrlP/RJSy3yy3dZWN
hqg+6TG9thHqpVOI0j7JZCh6OGKntkqV6uGXkG8pokKm6rf0it0MUcx4KukdyvDh
ngMlDJhYBgyP7m7W2rhK4lVdh8MGgmLtJOQ2KjraxTcVBXDZ66J7FWUNsT2qBvlQ
atSaFbbq0j75veFUPXfVVUIMFzDqcblVfGh9m3uHixrUEn5+fYIIH8mAXgF2sfxe
Shjn7eG6Z68AjJ0ELkrGf+aimjjeXaa4vl0ZbOD87JqIw5bXcmN0qUZATwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLgvS0l2OFBVr8GBtBR8Ftq6LXGLMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvdUM5TFNYWTRVRld2d1lHMEZId1cycm90Y1lzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVooMA0G
CSqGSIb3DQEBCwUAA4IBAQCcGZwy0xgXirILrZUEgbgPEdzrnCAs5oq+MBrgE5Vo
qPEDumnjt0H/GNcjPgJvToUYP5PukzUwb4DfKk0o+p7zOWVvak5xUn9/MN8yriZz
a4WmCrBA4mEYkVmYtPFHcf9Vpyuesdgclf5mFkog4nCrOW0Kx9KMqoE2LkWpQKui
Br+Yqu2coxML7dglCGK8MRlj2Q6l7P6rW2L0yL10y43czi6PPnNBZp/YbW7kEEvR
Y4D/nS44UYOYnCqLB0Z1YKQsaaS+7Bnqa06WpWkbexIDjRA/wAUmbc9tPiCTMKj6
/Rb+XakJN6bTNCtOQvF3QJLLNNoF3fdnij9YEIU/7wxX
-----END CERTIFICATE-----
Generated at Wed Apr 9 01:16:01 2025 by rpki-client