Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/e8UexKJSMZ7skwYQtvgWIbq4MXE.roa
File: e8UexKJSMZ7skwYQtvgWIbq4MXE.roa (raw, json)
Hash identifier: z8UU85PauzAWCWu0c4/whBUMLEZehA442FaYRyi9WiQ=
Subject key identifier: 7B:C5:1E:C4:A2:52:31:9E:EC:93:06:10:B6:F8:16:21:BA:B8:31:71
Certificate issuer: /CN=cad794ac601ce2505b65f975a7d516a2f00a5b31
Certificate serial: 0194258F779265DA21C77FD91A8E19D400C5
Authority key identifier: CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/e8UexKJSMZ7skwYQtvgWIbq4MXE.roa
Signing time: Thu 02 Jan 2025 05:49:06 +0000
ROA not before: Thu 02 Jan 2025 05:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34120
IP address blocks: 77.90.64.0/21 maxlen: 24
77.90.72.0/22 maxlen: 24
77.90.73.0/24 maxlen: 24
77.90.76.0/22 maxlen: 24
77.90.80.0/22 maxlen: 24
77.90.94.0/23 maxlen: 24
77.90.96.0/23 maxlen: 24
77.90.98.0/24 maxlen: 24
77.90.100.0/23 maxlen: 24
77.90.104.0/21 maxlen: 24
77.90.112.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:77:92:65:da:21:c7:7f:d9:1a:8e:19:d4:00:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cad794ac601ce2505b65f975a7d516a2f00a5b31
Validity
Not Before: Jan 2 05:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7bc51ec4a252319eec930610b6f81621bab83171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:80:58:e3:3b:25:0b:fd:2d:14:2a:99:1a:02:
02:cc:46:54:2a:b9:a4:ab:15:16:dc:3c:19:c1:4e:
91:8c:f5:f3:4f:75:53:fe:0b:b1:16:8d:ec:61:02:
97:b4:50:71:3a:75:08:fd:d5:70:93:b4:b3:a5:ce:
f1:3d:d9:36:38:8b:b3:4f:53:7d:b2:e0:f9:34:2b:
33:ea:4f:1c:10:d6:67:0c:43:d4:6f:1c:8e:fa:fd:
68:2f:9f:1c:d6:21:9f:0b:54:55:5a:a4:9c:0c:3a:
18:33:15:aa:5b:59:0c:c5:d2:e7:bc:d1:9a:7b:f6:
18:a7:d9:d2:6b:bd:14:dd:ca:1e:e0:81:c6:bb:e5:
8c:00:2e:dc:dd:1b:69:ea:c4:2e:73:a3:14:7a:ae:
81:0f:62:b0:c7:42:2e:9b:c9:1a:5f:98:2e:13:a1:
38:61:be:05:d4:bc:47:89:eb:97:1f:a5:64:ef:d5:
18:fb:7d:cc:21:d0:cf:32:4b:d6:a6:68:f4:7b:7c:
89:2f:58:39:eb:12:1c:87:d0:16:85:15:78:33:43:
ca:3a:ff:64:e2:eb:8c:91:69:d2:72:09:96:2d:13:
88:a8:31:3e:1d:f1:78:37:12:ae:a7:d3:27:96:a8:
87:a8:52:79:5a:10:c8:95:2c:96:df:ed:d7:7f:c1:
96:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C5:1E:C4:A2:52:31:9E:EC:93:06:10:B6:F8:16:21:BA:B8:31:71
X509v3 Authority Key Identifier:
keyid:CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/e8UexKJSMZ7skwYQtvgWIbq4MXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.64.0-77.90.83.255
77.90.94.0-77.90.98.255
77.90.100.0/23
77.90.104.0-77.90.127.255
Signature Algorithm: sha256WithRSAEncryption
2f:c8:2e:08:5c:bf:c6:08:35:b9:b9:c6:54:87:5d:bd:53:b0:
f4:80:d1:c1:11:1c:14:c6:c5:ca:68:6a:ca:07:55:70:77:3c:
63:83:d4:7b:cd:ca:95:aa:3f:04:9f:64:27:eb:e3:49:ac:25:
af:d6:b0:ba:92:e3:6f:3c:d8:11:5c:c3:f8:0a:96:0a:f9:6d:
bd:aa:e0:ce:78:80:13:ce:f5:28:aa:89:a4:aa:e1:b4:1f:5f:
2f:64:f0:16:42:11:0b:b6:49:d7:31:aa:7f:8f:6d:ea:dc:55:
9d:55:a4:83:ef:1e:6e:bc:a0:3c:81:cb:68:8f:b5:e9:f9:4d:
72:26:67:3f:42:e4:8f:a8:c0:ff:7d:05:26:16:2f:0d:02:ab:
1c:46:da:a0:e7:ba:8c:d0:fb:38:a6:f7:ed:7e:7a:c3:d2:67:
5c:de:b7:c5:eb:fd:0e:ac:08:07:e4:db:50:d9:a3:c9:ec:00:
42:15:8d:0a:e6:c2:0f:d8:80:c8:76:22:ed:20:bb:9c:b9:c6:
24:c4:59:64:6b:3a:d5:63:19:b9:0c:c8:63:10:f8:26:b5:1c:
d3:61:54:0e:5b:7e:63:96:06:24:2d:b1:fb:48:e7:42:71:a2:
01:be:de:06:b6:b8:01:9e:9d:5c:ff:f0:8c:df:d9:d3:16:69:
19:c5:c0:d8
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAZQlj3eSZdohx3/ZGo4Z1ADFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhZDc5NGFjNjAxY2UyNTA1YjY1Zjk3NWE3ZDUxNmEyZjAw
YTViMzEwHhcNMjUwMTAyMDU0OTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmM1MWVjNGEyNTIzMTllZWM5MzA2MTBiNmY4MTYyMWJhYjgzMTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4BY4zslC/0tFCqZGgICzEZUKrmk
qxUW3DwZwU6RjPXzT3VT/guxFo3sYQKXtFBxOnUI/dVwk7Szpc7xPdk2OIuzT1N9
suD5NCsz6k8cENZnDEPUbxyO+v1oL58c1iGfC1RVWqScDDoYMxWqW1kMxdLnvNGa
e/YYp9nSa70U3coe4IHGu+WMAC7c3Rtp6sQuc6MUeq6BD2Kwx0Ium8kaX5guE6E4
Yb4F1LxHieuXH6Vk79UY+33MIdDPMkvWpmj0e3yJL1g56xIch9AWhRV4M0PKOv9k
4uuMkWnScgmWLROIqDE+HfF4NxKup9MnlqiHqFJ5WhDIlSyW3+3Xf8GWYQIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFHvFHsSiUjGe7JMGELb4FiG6uDFxMB8GA1UdIwQY
MBaAFMrXlKxgHOJQW2X5dafVFqLwClsxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXRlVXJHQWM0bEJiWmZsMXA5VVdvdkFLV3pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9mOWE0YmUtZDc5Yy00MTkyLWE2YjMt
M2I5ODhmMTg4ZDkxLzEvZThVZXhLSlNNWjdza3dZUXR2Z1dJYnE0TVhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9mOWE0YmUtZDc5Yy00MTkyLWE2YjMtM2I5ODhmMTg4ZDkx
LzEveXRlVXJHQWM0bEJiWmZsMXA5VVdvdkFLV3pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwMAwDBAZNWkAD
BAJNWlAwDAMEAU1aXgMEAE1aYgMEAU1aZDAMAwQDTVpoAwQHTVoAMA0GCSqGSIb3
DQEBCwUAA4IBAQAvyC4IXL/GCDW5ucZUh129U7D0gNHBERwUxsXKaGrKB1Vwdzxj
g9R7zcqVqj8En2Qn6+NJrCWv1rC6kuNvPNgRXMP4CpYK+W29quDOeIATzvUoqomk
quG0H18vZPAWQhELtknXMap/j23q3FWdVaSD7x5uvKA8gctoj7Xp+U1yJmc/QuSP
qMD/fQUmFi8NAqscRtqg57qM0Ps4pvftfnrD0mdc3rfF6/0OrAgH5NtQ2aPJ7ABC
FY0K5sIP2IDIdiLtILucucYkxFlkazrVYxm5DMhjEPgmtRzTYVQOW35jlgYkLbH7
SOdCcaIBvt4GtrgBnp1c//CM39nTFmkZxcDY
-----END CERTIFICATE-----
Generated at Fri Feb 21 13:01:23 2025 by rpki-client