Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/lRiWjK4xEGSZ7hhdPgk-iqq1mwI.roa
File: lRiWjK4xEGSZ7hhdPgk-iqq1mwI.roa (raw, json)
Hash identifier: JgHkOVWJLhXz09JsY8CuxiPcEyyxQ/VY17v428GySkE=
Subject key identifier: 95:18:96:8C:AE:31:10:64:99:EE:18:5D:3E:09:3E:8A:AA:B5:9B:02
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01942747A8EA7C14E20848101A3A88C2A508
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/lRiWjK4xEGSZ7hhdPgk-iqq1mwI.roa
Signing time: Thu 02 Jan 2025 13:49:55 +0000
ROA not before: Thu 02 Jan 2025 13:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 77.90.138.0/24 maxlen: 24
213.209.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:a8:ea:7c:14:e2:08:48:10:1a:3a:88:c2:a5:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jan 2 13:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9518968cae31106499ee185d3e093e8aaab59b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:69:c4:fb:61:2e:6a:9c:fd:5a:d5:ba:51:35:
99:2d:7e:95:c8:04:29:87:48:e1:51:f0:bb:7c:b7:
ec:66:06:7e:0b:58:a7:72:6b:aa:40:b1:34:52:f9:
51:e3:cf:9f:1c:6e:8c:31:34:51:5a:b8:8d:71:95:
ab:44:46:62:da:d5:78:14:46:38:5a:ab:55:98:a2:
f8:ff:ce:c8:0f:66:a0:ab:bf:e2:4a:bf:09:e2:b5:
a4:0b:95:cd:34:b1:3b:e4:a5:78:db:c9:c1:67:2b:
27:5e:4c:ec:c6:28:d9:60:f1:19:9c:c0:db:32:a4:
c6:f6:fa:ae:b2:48:34:b4:d3:1e:23:71:65:1b:fb:
c4:b0:e6:67:35:5e:23:bf:de:9c:28:66:52:77:fc:
65:a3:22:bb:0f:df:2f:24:e8:d8:f6:95:69:7e:9a:
a7:69:c9:a1:a3:0c:8e:3b:9b:13:29:4d:a9:66:87:
49:77:8e:00:00:93:c8:08:5c:c3:f1:ee:4b:9e:23:
00:46:f3:13:4d:64:da:6d:45:01:23:37:c1:af:57:
5d:50:c0:92:23:0b:87:da:8e:a4:0c:d1:67:51:ee:
46:96:2e:d5:12:1f:00:f0:16:ee:67:3a:e0:38:a1:
c0:bb:57:ad:88:36:86:d6:a4:7d:65:57:ec:7b:3c:
cc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:18:96:8C:AE:31:10:64:99:EE:18:5D:3E:09:3E:8A:AA:B5:9B:02
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/lRiWjK4xEGSZ7hhdPgk-iqq1mwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.138.0/24
213.209.159.0/24
Signature Algorithm: sha256WithRSAEncryption
15:8b:f3:3a:1b:2e:62:77:49:3a:a0:7d:7c:a0:00:f6:12:71:
02:e5:db:6f:f9:67:54:3d:68:34:5e:11:44:1d:b0:5c:c9:f9:
8f:c0:25:1a:a5:2d:9a:4b:1b:51:26:58:70:c3:99:e8:99:c7:
cd:62:99:68:c5:4d:36:28:4f:76:ae:8b:aa:da:69:07:ae:4b:
ba:44:33:8d:5f:5e:6f:88:0f:af:ce:2f:1f:4d:6f:c4:cb:8a:
26:cf:de:2e:29:11:45:96:0b:a6:4b:52:fd:d3:30:7a:69:26:
1e:88:9c:de:17:0c:90:54:9e:50:b6:8e:ae:d6:c0:f5:c8:f8:
67:7a:ad:88:da:d7:74:61:9c:62:2b:95:0a:ca:c1:c9:44:e6:
98:cf:05:40:b1:e5:6d:6e:b5:b3:e9:32:16:43:f3:5d:e2:cd:
b2:a4:af:e4:7b:14:0f:47:0f:00:bb:83:db:70:39:6a:a3:6b:
30:d3:5e:24:23:69:7c:a5:b7:85:78:03:42:c6:dc:78:c6:61:
4a:cc:d4:c1:0b:1b:b7:f3:c8:ec:5e:c5:0f:85:98:c2:ad:51:
4f:bc:26:94:a3:60:cb:77:54:52:59:7a:30:0f:c5:36:28:2f:
36:c5:1a:83:22:97:8b:64:b4:5a:6d:4e:b5:f1:94:22:71:fe:
32:2e:35:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:15:59 2025 by rpki-client