Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/vM-bOSaGJdfDJa0DCbj9wMBv9qw.roa
File: vM-bOSaGJdfDJa0DCbj9wMBv9qw.roa (raw, json)
Hash identifier: XZ/UOuan40MrNGIRT69qnt/jKtQ4nKR+l6FXWQfUvP8=
Subject key identifier: BC:CF:9B:39:26:86:25:D7:C3:25:AD:03:09:B8:FD:C0:C0:6F:F6:AC
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019422200CCF6DE8EA93B93503019665A7C8
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/vM-bOSaGJdfDJa0DCbj9wMBv9qw.roa
Signing time: Wed 01 Jan 2025 13:48:33 +0000
ROA not before: Wed 01 Jan 2025 13:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204223
IP address blocks: 77.90.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:0c:cf:6d:e8:ea:93:b9:35:03:01:96:65:a7:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 1 13:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bccf9b39268625d7c325ad0309b8fdc0c06ff6ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:72:f8:b9:6d:78:07:85:4b:4c:be:f0:34:f3:
8a:c6:7b:d6:06:1f:a6:93:b0:7a:cf:44:f1:7e:aa:
39:19:cf:fc:62:72:b4:64:04:e7:06:1b:6b:0a:41:
f6:bd:ad:22:68:f1:b8:10:3f:20:29:ae:d6:27:3c:
23:f9:f4:5f:0b:d9:35:86:dd:fe:75:06:24:35:88:
9f:f0:16:98:3c:5c:f3:43:e1:4d:0c:7d:bd:98:22:
43:78:80:d1:91:38:ee:d5:30:97:25:38:99:32:9e:
56:98:05:32:21:b0:b2:bd:e7:b8:a2:3e:6a:2a:de:
ee:bf:7f:3c:23:f6:40:c9:9e:3d:ce:65:f0:7b:e1:
de:dd:68:e7:f2:67:7a:cc:79:a3:d3:07:00:d3:65:
2c:ac:70:32:b6:98:ca:32:e2:3f:af:fe:78:bd:6b:
76:34:21:40:88:e8:17:a3:71:d7:76:2a:41:73:58:
f8:29:98:ad:3c:63:f1:e0:df:89:8a:83:fc:4c:bd:
04:fa:b5:a3:6e:9b:ad:ba:e6:58:15:bc:40:1b:e8:
d7:a1:e6:7e:81:70:1e:28:5d:48:ae:e8:d5:f3:73:
ac:25:cd:00:c8:fa:ae:6c:29:ae:e9:e4:9b:ea:42:
79:c4:50:42:7f:4a:2a:22:b3:8f:38:fd:30:5c:e3:
74:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:CF:9B:39:26:86:25:D7:C3:25:AD:03:09:B8:FD:C0:C0:6F:F6:AC
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/vM-bOSaGJdfDJa0DCbj9wMBv9qw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.26.0/24
Signature Algorithm: sha256WithRSAEncryption
94:4e:74:c9:d0:d3:a1:c7:3b:7f:2d:b7:09:54:3b:8e:7b:38:
17:e0:76:9a:8f:91:d0:d4:00:1f:9c:54:a0:f8:8a:43:e7:fe:
2c:f5:b4:13:47:34:c3:9b:e5:56:0e:1b:2d:ea:ab:09:81:a3:
88:46:65:d3:52:2c:99:28:a3:35:f4:42:7a:8a:3f:2e:1a:7e:
6d:40:33:f2:c3:06:69:82:ae:3b:3d:36:b1:bd:ab:59:af:78:
62:16:3d:58:b3:86:54:df:8d:3c:0d:95:cd:fc:d6:d5:a4:d0:
a1:4e:7a:7e:af:e2:c4:90:5a:65:d3:10:0b:5b:81:bd:e0:1f:
25:74:07:8f:25:47:88:c3:b1:bd:d0:2b:3b:c7:61:54:86:72:
dd:eb:52:82:44:44:3e:bd:48:7c:cc:da:c9:fc:e2:32:31:0e:
be:42:48:bd:53:2c:d4:ba:f0:e8:45:3a:11:d6:53:ee:ff:a8:
ac:0e:61:ae:7d:95:09:ca:c6:3f:d5:fd:f0:20:03:0f:3d:b4:
9b:ee:32:6f:8e:f2:2c:36:57:c0:11:53:89:e6:54:9f:cc:18:
df:29:f8:f1:eb:eb:96:48:05:e6:8e:95:ae:9b:a1:de:0c:a7:
73:d4:47:c0:4f:ae:68:cf:c6:f3:a6:f6:5c:ad:1b:d4:a4:3d:
ed:1f:2f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:28:03 2025 by rpki-client