Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wqnNfzTnhXCh14Vz4dX2BQmaiQ8.roa
File: wqnNfzTnhXCh14Vz4dX2BQmaiQ8.roa (raw, json)
Hash identifier: z8SzHdhNAaLE1qmlFqr48fgFyj4XvTEtDOJVvx//9WY=
Subject key identifier: C2:A9:CD:7F:34:E7:85:70:A1:D7:85:73:E1:D5:F6:05:09:9A:89:0F
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01955E8A0B906948BF0B6787ADC59CC08350
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wqnNfzTnhXCh14Vz4dX2BQmaiQ8.roa
Signing time: Tue 04 Mar 2025 00:24:20 +0000
ROA not before: Tue 04 Mar 2025 00:24:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62425
IP address blocks: 77.90.47.0/24 maxlen: 24
94.249.168.0/24 maxlen: 24
185.121.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5e:8a:0b:90:69:48:bf:0b:67:87:ad:c5:9c:c0:83:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 4 00:24:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2a9cd7f34e78570a1d78573e1d5f605099a890f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:09:03:b8:25:92:9f:f6:b8:e9:95:14:49:33:
53:c4:97:f3:ad:bd:e4:80:be:11:dd:1f:65:af:79:
f3:85:e0:fe:0d:e5:0c:15:13:aa:c0:90:4a:6d:09:
37:e0:b1:a4:47:9d:3a:1a:c5:d6:77:4b:c7:9c:cc:
6f:ab:06:a0:0b:c9:07:2c:bc:10:83:60:be:94:31:
5f:9a:b0:70:71:7a:7b:cc:03:69:70:f2:32:36:57:
e2:b9:f2:57:8d:ce:85:30:04:07:30:32:4d:0a:8f:
8c:ac:f9:59:0d:1b:6c:e3:34:e6:e0:98:60:10:f0:
1a:bf:98:3d:f2:e5:0e:26:cb:e0:1f:14:53:39:93:
e3:d3:d4:fc:74:9c:b5:2b:cc:58:c1:87:57:e0:d3:
15:77:58:62:60:ee:4d:fc:85:23:85:d8:78:7c:4c:
85:f5:6d:46:e5:31:bc:b2:bd:5e:74:c1:05:75:9e:
1f:bb:20:f1:4d:6b:85:ae:8e:08:07:52:17:1c:cd:
23:ec:50:87:39:f8:a5:9b:81:da:e5:d8:9f:85:9c:
69:91:88:66:94:b4:70:31:8d:bb:67:a3:8f:92:1d:
48:86:f3:1c:60:1c:26:82:24:4e:3b:5d:83:1a:b0:
fa:cc:66:8f:68:ad:08:2b:73:14:4a:b1:71:14:b0:
40:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A9:CD:7F:34:E7:85:70:A1:D7:85:73:E1:D5:F6:05:09:9A:89:0F
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wqnNfzTnhXCh14Vz4dX2BQmaiQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.47.0/24
94.249.168.0/24
185.121.69.0/24
Signature Algorithm: sha256WithRSAEncryption
52:b7:9a:4e:1f:ca:e0:d3:7b:4b:91:66:94:09:b0:57:c8:40:
94:5b:a1:5d:0f:4b:bf:5d:5c:59:a6:6e:27:5c:8c:84:dc:ae:
b2:e6:57:15:12:87:30:74:42:29:dd:da:dd:ee:f2:02:71:10:
93:80:33:1b:31:e2:d0:d3:a1:9f:a3:9e:6f:7c:b8:8d:b3:78:
ed:d8:a8:04:6b:5f:5f:f0:6d:dc:ca:a8:6e:a3:1b:c6:f7:fe:
6a:c2:1e:49:87:94:45:74:79:1b:0a:fe:0d:c1:d6:49:73:92:
ab:68:ae:18:2a:5d:78:af:58:2c:76:06:e8:42:6d:11:45:bd:
7d:c8:bb:db:9d:4e:4e:2f:20:4f:8f:d8:46:10:1a:e9:f7:c1:
40:e3:f2:e2:62:83:70:9d:57:b6:4a:62:52:ce:df:07:f7:e6:
ed:b0:a9:c2:ad:6d:00:7a:39:14:96:74:ca:cc:c4:93:82:19:
1b:ce:94:93:80:67:2b:e9:87:1d:40:22:4b:8f:fe:cf:b8:0d:
bb:68:66:6e:ee:6e:27:49:13:2f:e4:96:1a:51:65:f5:57:1a:
8c:70:a3:8f:84:2f:6b:79:cb:1b:e5:57:fe:e8:cb:62:cd:27:
61:1a:e5:55:fc:8e:8d:ec:90:1b:36:bb:7f:87:90:7d:41:37:
de:d2:3e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:25:16 2025 by rpki-client