Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/Cz5IOaLfZShikRrc5qEp3L0_dDE.roa
File: Cz5IOaLfZShikRrc5qEp3L0_dDE.roa (raw, json)
Hash identifier: yJQIMc4u5I3PxM3zxWJYXZyrXzNKlBnDlO54oa7k+I4=
Subject key identifier: 0B:3E:48:39:A2:DF:65:28:62:91:1A:DC:E6:A1:29:DC:BD:3F:74:31
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01942747AA7748F1A16CA45B8FDE516A0FCE
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/Cz5IOaLfZShikRrc5qEp3L0_dDE.roa
Signing time: Thu 02 Jan 2025 13:49:55 +0000
ROA not before: Thu 02 Jan 2025 13:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59729
IP address blocks: 77.90.167.0/24 maxlen: 24
213.209.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:aa:77:48:f1:a1:6c:a4:5b:8f:de:51:6a:0f:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jan 2 13:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b3e4839a2df652862911adce6a129dcbd3f7431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a0:cf:01:3a:c4:0a:b1:9f:92:7d:fb:8d:cf:
b4:ff:5c:1f:b1:b8:c0:a9:42:77:4d:51:e3:36:bf:
0f:90:c1:59:a2:5f:4d:c1:e4:69:93:92:f1:22:a9:
82:68:14:3f:3d:e5:a1:3a:4f:68:c9:d7:5a:ab:ce:
4d:b3:b9:01:17:05:ee:27:51:69:b2:e4:c6:dd:88:
33:41:46:23:da:8b:3a:da:9a:e3:02:d4:dc:f9:f0:
9f:e5:1f:50:21:24:c3:5c:da:d2:16:b3:fe:4c:f8:
98:52:4c:06:dc:eb:84:b4:fa:da:b3:ef:c0:be:23:
a8:c8:6f:1f:cd:a5:4b:25:01:2e:2e:17:e8:63:9b:
95:b5:af:f6:00:f3:39:96:c0:4e:69:a8:93:88:fa:
6f:b8:b1:87:25:f0:3f:f6:ec:b6:16:18:d9:80:25:
78:31:26:ac:cf:c7:eb:9b:e2:ce:a5:ee:16:da:4c:
1d:e7:14:ef:bf:ba:4c:51:50:70:e1:c2:23:88:27:
70:a0:2d:c2:2a:5a:8c:92:0e:ed:ce:10:b2:a1:11:
e8:52:34:74:1d:62:b6:b1:1d:ca:ca:86:14:2e:a4:
a3:12:08:66:b1:8c:ed:53:7c:af:0c:0c:d0:c3:f1:
1b:77:16:83:67:64:49:b0:67:82:ed:eb:df:4a:a2:
6e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:3E:48:39:A2:DF:65:28:62:91:1A:DC:E6:A1:29:DC:BD:3F:74:31
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/Cz5IOaLfZShikRrc5qEp3L0_dDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.167.0/24
213.209.135.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:7b:cd:bd:9b:91:13:ee:f4:42:5f:b2:c7:27:af:d5:20:b0:
ee:4b:05:f6:52:20:78:18:94:70:96:96:a9:05:6f:c8:5a:c1:
58:76:be:bf:cf:39:0e:d0:3e:56:34:3f:8a:30:2a:ca:0c:7a:
bf:79:4a:97:25:ee:2d:f1:a5:31:0b:6c:a0:0e:8d:3b:df:24:
c7:21:b8:ad:a4:b8:e9:9e:ed:cc:14:40:8b:59:eb:ea:f7:3e:
d6:36:e6:16:de:79:9a:fb:f7:84:fa:1a:68:2e:fd:76:69:e2:
e6:28:af:69:0a:19:5a:34:13:54:94:01:2a:04:eb:85:3e:f9:
03:07:ec:5c:7d:9b:7e:88:0f:0c:8e:4b:9b:ff:45:06:c5:1c:
a3:c4:3d:45:54:c4:98:41:87:38:4b:3e:d0:b3:8d:86:a8:a5:
c8:50:f8:80:1b:e2:41:9b:52:e2:e3:7d:ba:37:7f:95:15:27:
78:ec:d1:8a:86:77:fd:88:6e:33:4c:5c:ca:44:9f:d8:f8:d4:
48:40:8e:7a:d9:ee:38:91:ad:79:81:20:36:67:eb:94:f2:06:
de:3c:56:ad:64:3b:b1:ee:fc:66:ec:d4:96:3d:d2:21:46:51:
b9:fe:96:de:9a:53:65:6f:df:af:c4:e4:0e:51:a9:47:56:63:
27:1c:40:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:29:53 2025 by rpki-client