Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/WfaKJm8vEH5Ri3mdoIbqH2aZ9c4.roa
File: WfaKJm8vEH5Ri3mdoIbqH2aZ9c4.roa (raw, json)
Hash identifier: T+emjo3f8KMKbXh7Tws1e40wlU7LmPvq/8G/m7v0FVQ=
Subject key identifier: 59:F6:8A:26:6F:2F:10:7E:51:8B:79:9D:A0:86:EA:1F:66:99:F5:CE
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0196045AED2BCEB1C0DA53697682FD7C854F
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/WfaKJm8vEH5Ri3mdoIbqH2aZ9c4.roa
Signing time: Sat 05 Apr 2025 05:09:49 +0000
ROA not before: Sat 05 Apr 2025 05:09:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60345
IP address blocks: 77.90.55.0/24 maxlen: 24
89.144.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:04:5a:ed:2b:ce:b1:c0:da:53:69:76:82:fd:7c:85:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 5 05:09:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59f68a266f2f107e518b799da086ea1f6699f5ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:dd:d6:14:88:2b:5d:fc:c9:d6:ff:58:02:aa:
6a:65:95:2c:de:af:70:8b:7d:92:9c:02:15:f4:33:
c2:ef:4a:13:c4:1e:0e:78:c3:71:c9:d7:84:5d:f2:
84:33:c4:05:cf:a2:65:f0:74:e7:10:b1:06:16:18:
09:a7:21:e5:b3:67:38:cb:c1:ce:74:0b:2e:0d:3c:
37:ec:10:10:22:a1:e4:93:45:a2:cb:29:16:9e:42:
4e:2e:3c:6b:62:0b:c0:b0:2a:a2:23:07:a3:9e:f3:
52:c8:9e:5e:06:59:1b:93:db:e4:6c:67:bf:20:c3:
32:75:1d:87:3d:aa:25:8e:d2:9a:ba:43:21:cd:ed:
21:81:f5:4b:42:cd:b0:8d:a9:21:11:a3:86:05:d8:
22:52:92:cf:93:fd:dd:28:0c:2b:97:2a:ec:30:53:
46:49:8f:65:b3:a3:14:69:cd:c8:95:84:7f:f6:68:
d8:1f:56:88:b5:5c:a0:e8:9a:1a:d6:eb:f7:d1:48:
2e:22:68:c1:b4:56:54:bb:a5:49:2e:1f:ae:87:ae:
29:e1:29:df:4a:c6:5b:93:2f:88:c0:0c:83:3b:44:
2d:0c:f1:4e:71:3f:16:ce:b5:d1:bd:c7:fe:93:2d:
65:0c:4d:92:ea:61:b8:f7:8d:eb:b4:08:4f:46:cd:
51:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F6:8A:26:6F:2F:10:7E:51:8B:79:9D:A0:86:EA:1F:66:99:F5:CE
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/WfaKJm8vEH5Ri3mdoIbqH2aZ9c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.55.0/24
89.144.41.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:ec:0f:0b:e8:64:4f:4c:37:9b:ba:f2:1f:52:3b:c5:fa:82:
54:60:ea:b2:c9:d4:55:d3:cf:bc:84:60:85:a1:d9:57:f8:83:
47:cd:61:76:72:f9:d7:bf:24:be:6a:22:e2:dd:17:14:95:29:
d8:a1:d3:3a:dc:b2:af:94:5f:6a:0a:10:1c:b4:20:8f:56:b6:
0d:6e:a4:67:04:92:f3:1f:cb:bc:1f:f3:3d:08:c0:db:e4:17:
81:0d:7f:58:2b:6e:18:90:54:f2:d5:97:45:f4:64:3b:3b:63:
d1:b0:13:ee:a2:59:7e:cf:ad:b8:bd:4e:ad:00:eb:b7:d2:3d:
a7:57:d3:03:c5:f3:22:72:36:bc:e5:27:5e:f3:78:7e:bb:69:
2d:c9:38:e5:47:6f:71:d2:09:e6:8b:93:7d:f4:99:30:87:f4:
50:e7:da:a5:f5:a2:6b:d8:fb:0e:9a:16:55:a4:9c:68:e0:72:
49:57:e6:80:33:7d:c1:d4:d3:52:e7:9d:ec:3e:85:30:75:d8:
dd:d6:65:ba:89:d2:f8:53:d6:8a:71:77:6a:15:6a:ef:c1:6a:
6c:eb:6c:71:24:d9:50:68:a7:ab:c9:d2:61:75:39:a1:b9:1f:
d3:f3:02:e8:11:1f:d2:21:a4:4f:41:70:78:4e:51:57:e4:84:
88:3a:bd:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:01 2025 by rpki-client on console.sobornost.net