Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/Xf3YKxRqkeL7M00W8PeVBpyDwo4.roa
File: Xf3YKxRqkeL7M00W8PeVBpyDwo4.roa (raw, json)
Hash identifier: l1kq88C+6MsbDoI9xmNG80iyS2+gmcx5dOr77F5QPn4=
Subject key identifier: 5D:FD:D8:2B:14:6A:91:E2:FB:33:4D:16:F0:F7:95:06:9C:83:C2:8E
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01942747B28EB15D452019F0515B9F91AD19
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/Xf3YKxRqkeL7M00W8PeVBpyDwo4.roa
Signing time: Thu 02 Jan 2025 13:49:57 +0000
ROA not before: Thu 02 Jan 2025 13:49:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213296
IP address blocks: 77.90.177.0/24 maxlen: 24
213.209.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:b2:8e:b1:5d:45:20:19:f0:51:5b:9f:91:ad:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jan 2 13:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5dfdd82b146a91e2fb334d16f0f795069c83c28e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5d:5e:6e:85:24:47:0a:b2:e4:d6:3a:7d:5b:
c0:1e:1d:e3:f0:a9:d2:e0:8d:90:df:03:f2:0f:57:
ac:b1:0b:32:e3:c2:66:4a:d4:d3:ba:f9:a3:4e:a6:
b6:9c:91:de:92:c1:4f:8b:0a:7d:58:34:20:31:37:
b9:63:5a:01:98:11:8c:52:a0:e3:7a:a1:59:dc:c3:
eb:dd:78:aa:b2:ef:e7:54:78:a4:cf:97:b3:5f:24:
80:72:7a:89:76:3f:65:a7:9c:93:c8:23:d7:e5:02:
92:41:dc:aa:aa:0e:9e:31:42:1e:76:aa:c3:ad:88:
d8:00:f8:d8:00:a6:02:f2:12:b6:a0:6e:40:eb:7f:
3f:71:14:23:90:15:b4:4a:96:ad:ea:29:c9:fb:c9:
17:a9:e9:70:25:d0:9c:bb:c5:24:33:f5:56:2b:1d:
e3:1e:c8:84:64:9a:fa:d9:f7:5d:36:37:68:ce:eb:
1b:5f:f3:6c:e6:d8:ce:8a:05:6e:e1:dd:4d:a5:9d:
ff:bb:3f:2a:e7:0c:e7:37:d2:aa:8f:bc:d9:c6:9c:
29:a8:64:60:c2:d8:9c:39:05:da:66:eb:0a:39:60:
4d:43:aa:8b:bd:6a:5d:61:3e:29:78:ef:09:b0:c5:
96:be:11:95:b8:d7:93:c3:e1:dc:d4:70:fa:88:3d:
03:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:FD:D8:2B:14:6A:91:E2:FB:33:4D:16:F0:F7:95:06:9C:83:C2:8E
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/Xf3YKxRqkeL7M00W8PeVBpyDwo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.177.0/24
213.209.131.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:e4:1b:e8:44:86:79:ff:b4:4f:73:4f:d2:42:80:77:fe:28:
8d:06:3d:0a:d1:60:f0:1c:59:f3:cc:13:2c:33:92:d3:2e:9e:
0c:26:76:7b:8e:e2:a9:8d:9a:19:14:a2:ed:48:12:a5:cc:54:
19:39:88:9d:bf:b8:29:98:ec:ee:97:85:c1:e0:5e:68:34:44:
7f:47:5d:f2:80:0d:43:b0:97:b4:22:1a:e5:78:ca:77:a1:e9:
ae:3c:3d:61:85:3b:2c:51:00:28:26:e8:56:9d:ec:28:f2:d4:
3f:43:5b:5f:92:5e:dc:21:b7:ab:65:26:5e:bd:c2:d1:d9:cf:
24:e1:d0:e3:d6:b0:e3:8a:b1:ed:05:5d:73:31:ec:e4:90:6f:
98:44:59:3e:cb:76:b9:26:54:bd:eb:57:00:7d:32:a3:96:71:
c9:b2:8e:6c:30:a2:af:5f:da:04:2f:7f:56:4b:2f:8c:65:fc:
1b:3d:42:68:1a:24:a3:86:db:85:ee:3e:aa:1a:ac:41:6f:ca:
d3:97:14:33:a6:55:1f:9a:1b:84:c4:d2:6e:c3:69:aa:86:ec:
0c:3c:e3:03:4a:23:ad:22:63:e6:73:f5:e1:85:d6:e8:5b:86:
16:95:35:87:17:82:23:f4:4b:d6:39:ae:09:35:02:8e:e6:54:
42:c4:aa:ad
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQnR7KOsV1FIBnwUVufka0ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz
Yzg0NDkwHhcNMjUwMTAyMTM0OTU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZGZkZDgyYjE0NmE5MWUyZmIzMzRkMTZmMGY3OTUwNjljODNjMjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxF1eboUkRwqy5NY6fVvAHh3j8KnS
4I2Q3wPyD1essQsy48JmStTTuvmjTqa2nJHeksFPiwp9WDQgMTe5Y1oBmBGMUqDj
eqFZ3MPr3Xiqsu/nVHikz5ezXySAcnqJdj9lp5yTyCPX5QKSQdyqqg6eMUIedqrD
rYjYAPjYAKYC8hK2oG5A638/cRQjkBW0Spat6inJ+8kXqelwJdCcu8UkM/VWKx3j
HsiEZJr62fddNjdozusbX/Ns5tjOigVu4d1NpZ3/uz8q5wznN9Kqj7zZxpwpqGRg
wticOQXaZusKOWBNQ6qLvWpdYT4peO8JsMWWvhGVuNeTw+Hc1HD6iD0D0wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFF392CsUapHi+zNNFvD3lQacg8KOMB8GA1UdIwQY
MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt
NmNiZmYzYzRkYTAxLzEvWGYzWUt4UnFrZUw3TTAwVzhQZVZCcHlEd280LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx
LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATVqxAwQA
1dGDMA0GCSqGSIb3DQEBCwUAA4IBAQCl5BvoRIZ5/7RPc0/SQoB3/iiNBj0K0WDw
HFnzzBMsM5LTLp4MJnZ7juKpjZoZFKLtSBKlzFQZOYidv7gpmOzul4XB4F5oNER/
R13ygA1DsJe0IhrleMp3oemuPD1hhTssUQAoJuhWnewo8tQ/Q1tfkl7cIberZSZe
vcLR2c8k4dDj1rDjirHtBV1zMezkkG+YRFk+y3a5JlS961cAfTKjlnHJso5sMKKv
X9oEL39WSy+MZfwbPUJoGiSjhtuF7j6qGqxBb8rTlxQzplUfmhuExNJuw2mqhuwM
POMDSiOtImPmc/XhhdboW4YWlTWHF4Ij9EvWOa4JNQKO5lRCxKqt
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:46:33 2025 by rpki-client