Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/RPtIr4SyxST2FhDUlfIaVDvDv30.roa
File: RPtIr4SyxST2FhDUlfIaVDvDv30.roa (raw, json)
Hash identifier: GtTmqq9ciOzu0ubmXjSZndWCRadfRgXNWiYJpFrJC5s=
Subject key identifier: 44:FB:48:AF:84:B2:C5:24:F6:16:10:D4:95:F2:1A:54:3B:C3:BF:7D
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01942747A956AA1ABCCCD9A206EB8D3D3A9D
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/RPtIr4SyxST2FhDUlfIaVDvDv30.roa
Signing time: Thu 02 Jan 2025 13:49:55 +0000
ROA not before: Thu 02 Jan 2025 13:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51765
IP address blocks: 77.90.176.0/24 maxlen: 24
77.90.187.0/24 maxlen: 24
213.209.132.0/24 maxlen: 24
213.209.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:a9:56:aa:1a:bc:cc:d9:a2:06:eb:8d:3d:3a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jan 2 13:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=44fb48af84b2c524f61610d495f21a543bc3bf7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1e:d3:39:5a:bb:8e:f3:44:03:c0:e0:0d:0d:
9e:f5:a7:cb:db:93:db:eb:9b:d9:5f:50:5a:cd:13:
a5:9d:56:ae:3e:26:bb:4d:ac:de:e4:15:f8:5f:85:
cf:ce:ee:7a:f9:fd:e5:b7:18:7a:bf:28:63:37:65:
76:07:0d:a4:84:00:84:e6:13:80:77:fe:61:8b:8b:
ea:bc:aa:15:51:7b:0e:d9:0f:3d:8b:50:01:36:4c:
24:df:b6:c3:7c:e7:a6:f7:e2:8c:44:0b:42:1c:ea:
ba:60:e1:5f:1d:5f:09:13:13:fd:7f:22:b4:4c:ef:
86:69:1e:98:6d:fa:36:de:50:a8:11:3b:7f:b3:41:
25:4e:af:a8:6b:20:fb:a5:23:76:80:0c:18:5c:32:
f4:2c:be:22:8d:2d:2a:c9:65:a1:54:c9:52:c8:4d:
4f:de:5f:21:8a:19:f7:7c:37:d0:9e:8c:cd:dd:3a:
ec:2c:4c:11:a9:51:53:fa:d2:05:a8:fd:b4:68:f0:
42:17:3b:ce:d4:1e:a2:7d:10:b6:fe:5f:b7:c1:a1:
65:f5:75:5a:3e:75:d5:2a:eb:93:08:79:c9:f1:64:
06:e2:e0:9e:61:c8:f8:bf:76:ac:6b:f0:63:3b:ce:
85:45:e4:8f:1e:e8:9f:a7:f8:a1:95:fb:bd:9c:56:
e1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:FB:48:AF:84:B2:C5:24:F6:16:10:D4:95:F2:1A:54:3B:C3:BF:7D
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/RPtIr4SyxST2FhDUlfIaVDvDv30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.176.0/24
77.90.187.0/24
213.209.132.0/24
213.209.148.0/24
Signature Algorithm: sha256WithRSAEncryption
16:f2:96:e1:06:bd:fd:63:5d:16:2c:e0:84:d0:6a:7f:98:08:
db:49:b6:39:18:c4:47:48:b0:36:4d:32:83:d7:c6:43:75:d9:
db:5a:83:67:b6:73:68:95:9e:7b:3d:3c:ec:13:35:a4:e5:61:
cd:bf:c0:64:a3:11:fc:5e:78:51:36:8e:f3:7a:1b:71:cf:74:
99:51:28:1b:e3:34:95:55:5a:69:de:25:07:e1:1a:73:67:ba:
2e:f1:ab:93:50:a0:4b:46:0e:2e:ff:68:00:27:df:25:aa:9c:
ea:95:d9:fd:13:d1:31:65:66:45:f3:96:84:13:10:75:15:a2:
6e:7c:a3:d6:8f:0f:78:cd:04:67:6b:c5:07:ea:8a:f1:5b:7b:
a5:a9:52:dc:a5:ba:1a:99:2c:ad:49:76:27:07:b3:db:70:2a:
e3:fa:b4:97:95:9f:25:92:ed:51:3e:4e:7c:a4:76:7e:4c:fc:
1e:ea:49:15:f9:f3:73:32:46:0e:ce:40:1e:25:63:64:98:ff:
0f:f4:2a:9a:2b:f7:4f:e8:b4:91:3a:9b:b4:7f:a2:b4:fb:12:
3a:bf:17:eb:99:98:7f:43:87:76:f5:e7:73:45:d3:38:a0:0c:
11:bd:2d:13:4f:a1:ea:32:b3:c4:3e:50:7e:d4:6b:7f:45:1d:
1e:8b:cf:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:39:45 2025 by rpki-client