Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/W4gGQid-BJ2ydE-GfarPQD0BXHk.roa
File: W4gGQid-BJ2ydE-GfarPQD0BXHk.roa (raw, json)
Hash identifier: AIulnkFQm6EME0MTgDdsXVMYUQiBqZHjvvdiEh/TZmw=
Subject key identifier: 5B:88:06:42:27:7E:04:9D:B2:74:4F:86:7D:AA:CF:40:3D:01:5C:79
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01942747A723D69E0DF8D6A3B1A40A15DD09
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/W4gGQid-BJ2ydE-GfarPQD0BXHk.roa
Signing time: Thu 02 Jan 2025 13:49:54 +0000
ROA not before: Thu 02 Jan 2025 13:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30058
IP address blocks: 77.90.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:a7:23:d6:9e:0d:f8:d6:a3:b1:a4:0a:15:dd:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jan 2 13:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b880642277e049db2744f867daacf403d015c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c4:58:ee:16:88:97:1a:20:53:e1:41:af:ec:
59:80:e1:49:aa:bc:4c:2f:6e:ab:e3:6d:32:5c:15:
ae:d0:05:9e:f8:f8:70:b8:ef:ea:74:6c:b0:6e:61:
e5:61:11:16:9b:4d:2b:f6:ec:d0:8d:36:1f:31:3d:
e7:8e:27:d3:1c:47:27:f4:b0:f0:78:be:5d:22:be:
47:3c:f5:e7:c6:69:94:48:f8:b2:10:01:10:0c:ff:
b1:3d:3f:48:54:c0:78:08:9f:94:f2:3d:b4:a9:11:
ce:44:4a:7e:74:c8:13:0a:6f:b4:b9:3f:e5:36:b8:
e7:dd:07:01:c5:91:95:58:c6:5d:5b:85:2d:6b:43:
cf:a8:cf:79:30:52:37:47:36:ff:01:35:0c:14:83:
5c:85:62:1f:a1:c4:68:c6:61:cf:8f:40:91:5d:f0:
6a:f1:de:39:f1:07:c5:48:7b:8c:2d:58:e2:cd:52:
d6:b9:f0:85:b8:8f:b7:f0:1f:b0:5c:f6:bf:5d:e8:
8a:af:33:d2:b8:89:52:d6:c2:1c:d1:ea:4d:3b:9c:
2a:15:2a:09:e2:16:33:fa:32:20:df:07:ce:32:e4:
a1:28:d1:c9:4d:bd:7f:a0:c3:58:84:88:95:d4:39:
98:c4:7a:c6:bd:b0:bc:8f:aa:26:94:91:19:d3:66:
de:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:88:06:42:27:7E:04:9D:B2:74:4F:86:7D:AA:CF:40:3D:01:5C:79
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/W4gGQid-BJ2ydE-GfarPQD0BXHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.183.0/24
Signature Algorithm: sha256WithRSAEncryption
28:50:ad:f1:bd:dc:fa:41:77:cc:f5:27:73:ce:3a:ba:c9:70:
58:17:aa:27:b3:27:a7:c4:7e:a0:52:c6:ef:5d:eb:56:65:2e:
9a:41:4b:02:9c:d0:5a:6f:8b:8c:b5:d8:51:d1:57:dd:b1:d0:
87:77:ae:1a:b8:f0:c0:25:f6:c8:fd:67:39:48:1a:8f:db:ce:
97:bd:b2:70:43:c3:dd:80:63:bf:d2:ec:17:95:ee:24:04:4c:
cd:ee:e1:3c:7f:32:8f:7e:4d:8a:08:89:51:5c:2d:9c:f2:ba:
e9:29:e4:5c:11:9e:c7:1c:2e:05:a5:ec:44:58:dd:81:a3:73:
bf:aa:5c:d7:4e:97:e8:0e:cf:ae:d2:3d:21:05:78:31:e2:18:
10:dd:a5:1b:f1:1b:27:32:81:e2:0e:07:23:e0:3a:a3:a5:31:
4e:a5:5a:39:67:2f:db:b1:17:1c:8e:73:19:29:30:26:c6:3f:
0f:42:8e:37:73:6b:50:c1:f4:79:f3:a6:e1:dc:2b:a2:1d:38:
cc:f2:ab:55:00:9a:01:85:9c:20:51:1d:64:8c:49:27:b1:f9:
12:7a:a9:03:22:f1:5a:1a:6a:70:63:67:e0:d6:77:1c:ac:f5:
1d:e9:cd:14:dc:f7:8b:99:22:c1:6f:49:d9:80:bc:c7:b6:11:
1f:fa:99:39
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnR6cj1p4N+NajsaQKFd0JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz
Yzg0NDkwHhcNMjUwMTAyMTM0OTU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Yjg4MDY0MjI3N2UwNDlkYjI3NDRmODY3ZGFhY2Y0MDNkMDE1Yzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcRY7haIlxogU+FBr+xZgOFJqrxM
L26r420yXBWu0AWe+PhwuO/qdGywbmHlYREWm00r9uzQjTYfMT3njifTHEcn9LDw
eL5dIr5HPPXnxmmUSPiyEAEQDP+xPT9IVMB4CJ+U8j20qRHOREp+dMgTCm+0uT/l
Nrjn3QcBxZGVWMZdW4Uta0PPqM95MFI3Rzb/ATUMFINchWIfocRoxmHPj0CRXfBq
8d458QfFSHuMLVjizVLWufCFuI+38B+wXPa/XeiKrzPSuIlS1sIc0epNO5wqFSoJ
4hYz+jIg3wfOMuShKNHJTb1/oMNYhIiV1DmYxHrGvbC8j6omlJEZ02beiQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFuIBkInfgSdsnRPhn2qz0A9AVx5MB8GA1UdIwQY
MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt
NmNiZmYzYzRkYTAxLzEvVzRnR1FpZC1CSjJ5ZEUtR2ZhclBRRDBCWEhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx
LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVq3MA0G
CSqGSIb3DQEBCwUAA4IBAQAoUK3xvdz6QXfM9Sdzzjq6yXBYF6onsyenxH6gUsbv
XetWZS6aQUsCnNBab4uMtdhR0VfdsdCHd64auPDAJfbI/Wc5SBqP286XvbJwQ8Pd
gGO/0uwXle4kBEzN7uE8fzKPfk2KCIlRXC2c8rrpKeRcEZ7HHC4FpexEWN2Bo3O/
qlzXTpfoDs+u0j0hBXgx4hgQ3aUb8RsnMoHiDgcj4DqjpTFOpVo5Zy/bsRccjnMZ
KTAmxj8PQo43c2tQwfR586bh3CuiHTjM8qtVAJoBhZwgUR1kjEknsfkSeqkDIvFa
GmpwY2fg1nccrPUd6c0U3PeLmSLBb0nZgLzHthEf+pk5
-----END CERTIFICATE-----
Generated at Mon Apr 7 00:25:16 2025 by rpki-client