Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/DXkQJWoXXxUWl_6wOwUCNK2iqzE.roa
File: DXkQJWoXXxUWl_6wOwUCNK2iqzE.roa (raw, json)
Hash identifier: Et9FWADnNl04HSdSo6iAdV5+gKD6jObcWqGDBUveUoM=
Subject key identifier: 0D:79:10:25:6A:17:5F:15:16:97:FE:B0:3B:05:02:34:AD:A2:AB:31
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01942747B2FAFB2FC8969CFEDBF8DA12D910
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/DXkQJWoXXxUWl_6wOwUCNK2iqzE.roa
Signing time: Thu 02 Jan 2025 13:49:57 +0000
ROA not before: Thu 02 Jan 2025 13:49:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396356
IP address blocks: 77.90.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:b2:fa:fb:2f:c8:96:9c:fe:db:f8:da:12:d9:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jan 2 13:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d7910256a175f151697feb03b050234ada2ab31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:4a:c7:43:c5:8b:60:46:38:e3:db:72:a4:72:
4d:59:f6:e5:42:75:b5:ed:33:4a:d5:53:ee:64:1f:
6f:60:a4:b6:e5:5c:10:0d:fc:5d:80:af:32:c5:20:
d2:67:ae:a2:bb:0e:ec:31:18:b8:7a:06:6c:d4:39:
0f:b6:ca:6b:db:ff:d3:9c:f6:16:68:91:c1:69:3a:
87:79:24:21:93:9f:91:b1:28:c3:be:f7:3d:67:a7:
86:b9:fd:b0:40:76:24:e2:d3:af:18:bb:79:2f:ef:
b7:a8:5f:d1:ff:b2:97:32:58:90:b3:19:f7:72:9f:
8f:ba:2e:3b:20:69:f3:b7:de:af:f9:a1:ca:f9:e6:
ed:8c:12:8f:7b:e5:31:4a:6b:9f:42:e2:c6:f6:82:
c2:ac:0b:d1:32:b3:e1:10:6a:6d:28:ab:30:0c:a2:
41:30:59:c5:ef:60:8d:cc:51:f2:55:96:91:69:58:
02:5a:69:4b:5c:33:17:0d:7b:eb:1b:92:47:c9:86:
7c:f6:c5:80:1d:fd:0f:e1:df:d7:d8:45:dd:bc:92:
a8:5e:5d:82:53:53:60:ee:b3:cb:74:84:0a:82:b2:
5e:78:d1:de:86:d1:4f:8a:68:f8:27:bc:29:97:48:
f8:0d:d1:f4:ca:24:51:ee:88:1d:a3:6f:18:d8:91:
9d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:79:10:25:6A:17:5F:15:16:97:FE:B0:3B:05:02:34:AD:A2:AB:31
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/DXkQJWoXXxUWl_6wOwUCNK2iqzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.151.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:53:52:3e:aa:ae:3c:1b:65:ba:27:5c:56:bb:75:6e:cc:e2:
62:cd:0c:d6:12:f2:ea:f1:b2:8e:bf:47:86:30:04:38:a7:c3:
96:61:56:86:fa:aa:79:80:da:24:a2:44:a9:46:cf:8b:2a:ae:
da:e5:85:f3:ff:5d:0b:51:7f:4c:eb:ed:25:a0:6f:02:b8:4d:
44:fc:fc:d3:b3:b1:aa:e9:a8:69:bf:c7:65:10:d9:cd:7f:51:
7c:66:ef:34:e1:06:00:c3:a2:9b:98:aa:b7:5a:ca:98:8f:c4:
15:4e:ac:38:e2:a2:6c:7a:4c:9b:02:52:68:6b:d9:49:e6:07:
85:12:16:00:73:f4:97:e7:4f:15:14:06:ce:37:de:79:e8:b8:
88:f9:fa:5d:15:37:3b:0c:90:c9:f3:7f:89:2c:20:6f:5f:bd:
52:bb:fd:0b:8f:ca:a6:9d:c1:6e:96:d6:ff:ce:c4:39:35:3e:
f0:56:4a:e0:25:71:80:84:26:83:78:c8:0a:94:66:f5:72:a0:
35:e1:1c:07:a0:2e:b1:37:6e:08:e8:bf:08:80:dd:72:e4:5a:
66:2b:66:ef:f8:e4:3e:a7:f0:f0:f1:70:b9:5e:48:ba:24:3e:
73:2d:5d:03:bd:32:bf:9e:f3:7f:29:70:4d:30:50:35:11:30:
e2:18:11:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:30:36 2025 by rpki-client