Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/yEdshTNDrGMfsgL3AwjQzCjF3OY.roa
File: yEdshTNDrGMfsgL3AwjQzCjF3OY.roa (raw, json)
Hash identifier: HZ0kxr83c594qSqXDEECa15NFby3y/C6HbUeAYJaGEE=
Subject key identifier: C8:47:6C:85:33:43:AC:63:1F:B2:02:F7:03:08:D0:CC:28:C5:DC:E6
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019417675DE9A436AB0F8EB9D8D1B787F77F
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/yEdshTNDrGMfsgL3AwjQzCjF3OY.roa
Signing time: Mon 30 Dec 2024 11:50:37 +0000
ROA not before: Mon 30 Dec 2024 11:50:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47263
IP address blocks: 77.90.15.0/24 maxlen: 24
77.90.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:17:67:5d:e9:a4:36:ab:0f:8e:b9:d8:d1:b7:87:f7:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Dec 30 11:50:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c8476c853343ac631fb202f70308d0cc28c5dce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:73:a8:94:dc:b2:e7:54:64:c9:9e:3e:c6:67:
a6:26:df:25:d4:b0:e6:2d:e5:ff:a8:c1:8b:1d:19:
8e:e4:1f:46:9f:00:0e:da:db:a8:9b:19:20:52:c7:
da:ef:bc:ea:45:13:8b:d7:73:a6:0c:1a:84:a2:d2:
ec:91:11:1b:31:9b:e5:5f:da:35:a3:38:ad:40:ea:
a1:1d:0a:5e:15:cd:fa:bb:ad:2a:c8:7c:81:99:3f:
ec:60:b8:70:f2:1c:0b:b8:61:81:33:7d:40:17:66:
5d:fd:00:e7:50:3d:f4:4f:29:41:d5:4c:cf:b1:1e:
45:b5:81:b8:2d:24:8e:ac:3c:56:17:d7:8d:9e:40:
11:97:31:45:24:c0:60:29:9a:20:5d:f9:bf:42:8f:
75:de:14:21:ba:79:36:a4:35:5c:00:2c:32:f8:4a:
28:9b:b7:01:82:64:32:e7:95:53:3e:a8:b6:83:fa:
e5:1c:2b:e9:f0:ff:a9:aa:f0:b1:11:02:d6:4a:47:
62:b3:07:eb:15:86:00:c1:b8:62:63:f5:cc:d6:8f:
ab:78:51:40:47:c0:52:79:e8:c4:5a:c9:85:f3:36:
39:bb:e6:a6:7f:21:83:e4:9c:ae:ab:e1:60:7e:22:
42:74:52:65:68:40:85:91:05:fd:12:e1:40:8d:d5:
de:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:47:6C:85:33:43:AC:63:1F:B2:02:F7:03:08:D0:CC:28:C5:DC:E6
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/yEdshTNDrGMfsgL3AwjQzCjF3OY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.15.0/24
77.90.37.0/24
Signature Algorithm: sha256WithRSAEncryption
e4:1f:60:69:06:dc:86:78:b1:e2:bd:d0:2d:c8:14:a4:c7:01:
c6:e0:45:dc:24:37:d0:46:c7:aa:ae:f3:7d:e6:02:31:44:bd:
b2:28:9c:ba:f6:24:e2:f4:88:d5:fd:7d:cf:1b:a8:2f:b6:c6:
2d:c4:ce:15:51:65:83:59:7a:4d:22:60:8f:5b:a2:35:c3:26:
2b:8d:f8:89:38:fa:30:6a:8c:81:db:16:d3:49:0f:47:3c:a2:
78:f3:16:b9:7a:8c:ea:70:3e:52:51:70:77:3c:e6:1d:f6:c3:
5b:52:3e:25:08:27:46:2f:88:49:f7:2e:5d:25:e7:5c:21:e4:
74:84:cc:48:0e:3b:f6:71:ab:ba:3d:0a:1a:6d:b1:e3:be:4c:
9d:30:18:84:9c:9d:58:1d:70:ba:71:10:18:47:ca:94:c7:87:
5b:df:37:0e:9e:4d:da:78:19:44:3c:ed:1b:88:77:cb:c6:32:
79:23:74:8c:b9:c7:e9:56:62:ba:f5:74:0b:42:3f:22:d6:54:
78:e1:2e:1d:15:2f:e7:52:b9:9d:70:e2:16:fa:e8:6f:83:75:
cf:3e:87:42:5c:36:48:68:26:86:ef:b2:ee:97:ff:92:c9:e8:
99:c7:d5:8a:7c:34:fc:0f:2e:47:de:cf:b0:d9:df:8b:d5:e6:
41:82:dc:c0
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQXZ13ppDarD4652NG3h/d/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjQxMjMwMTE1MDM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODQ3NmM4NTMzNDNhYzYzMWZiMjAyZjcwMzA4ZDBjYzI4YzVkY2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5nOolNyy51RkyZ4+xmemJt8l1LDm
LeX/qMGLHRmO5B9GnwAO2tuomxkgUsfa77zqRROL13OmDBqEotLskREbMZvlX9o1
ozitQOqhHQpeFc36u60qyHyBmT/sYLhw8hwLuGGBM31AF2Zd/QDnUD30TylB1UzP
sR5FtYG4LSSOrDxWF9eNnkARlzFFJMBgKZogXfm/Qo913hQhunk2pDVcACwy+Eoo
m7cBgmQy55VTPqi2g/rlHCvp8P+pqvCxEQLWSkdiswfrFYYAwbhiY/XM1o+reFFA
R8BSeejEWsmF8zY5u+amfyGD5Jyuq+FgfiJCdFJlaECFkQX9EuFAjdXeyQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMhHbIUzQ6xjH7IC9wMI0MwoxdzmMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEveUVkc2hUTkRyR01mc2dMM0F3alF6Q2pGM09ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATVoPAwQA
TVolMA0GCSqGSIb3DQEBCwUAA4IBAQDkH2BpBtyGeLHivdAtyBSkxwHG4EXcJDfQ
RseqrvN95gIxRL2yKJy69iTi9IjV/X3PG6gvtsYtxM4VUWWDWXpNImCPW6I1wyYr
jfiJOPowaoyB2xbTSQ9HPKJ48xa5eozqcD5SUXB3POYd9sNbUj4lCCdGL4hJ9y5d
JedcIeR0hMxIDjv2cau6PQoabbHjvkydMBiEnJ1YHXC6cRAYR8qUx4db3zcOnk3a
eBlEPO0biHfLxjJ5I3SMucfpVmK69XQLQj8i1lR44S4dFS/nUrmdcOIW+uhvg3XP
PodCXDZIaCaG77Lul/+SyeiZx9WKfDT8Dy5H3s+w2d+L1eZBgtzA
-----END CERTIFICATE-----
Generated at Sat Apr 12 03:16:08 2025 by rpki-client