Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/qZY769nculRptm6xmGjqqMRRKL8.roa
File: qZY769nculRptm6xmGjqqMRRKL8.roa (raw, json)
Hash identifier: ieWOYGOswJwKiz2mH5xN4k9017LFbpsRiGDUL/ouq84=
Subject key identifier: A9:96:3B:EB:D9:DC:BA:54:69:B6:6E:B1:98:68:EA:A8:C4:51:28:BF
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01942747B01B3F64CAEC3B6883ADF75652C2
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/qZY769nculRptm6xmGjqqMRRKL8.roa
Signing time: Thu 02 Jan 2025 13:49:57 +0000
ROA not before: Thu 02 Jan 2025 13:49:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208485
IP address blocks: 77.90.135.0/24 maxlen: 24
77.90.145.0/24 maxlen: 24
77.90.188.0/24 maxlen: 24
185.230.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:b0:1b:3f:64:ca:ec:3b:68:83:ad:f7:56:52:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jan 2 13:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9963bebd9dcba5469b66eb19868eaa8c45128bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c0:7b:dd:eb:47:89:db:34:cb:e5:8b:67:90:
a7:91:6e:54:8e:1b:68:37:20:de:41:c6:b9:f1:ff:
60:69:88:3e:d1:3d:2a:16:ea:a7:18:60:4e:f8:df:
7d:b0:ff:5d:b7:80:b1:b8:4d:47:c5:49:a1:64:7e:
90:b0:cf:47:d8:09:5a:0a:88:eb:65:0e:b0:ef:7b:
f4:22:2b:06:d3:85:50:a4:d3:55:02:42:0e:aa:f5:
36:08:9b:3f:f1:5c:e9:35:e4:74:62:f0:98:81:a7:
51:22:5d:81:c9:81:79:5f:b8:89:a4:5d:aa:fd:bc:
d2:83:47:63:97:a1:6a:35:b1:5a:65:5c:42:1c:8b:
dd:a6:c6:97:9b:eb:01:36:16:f3:d8:77:b1:26:45:
de:a4:ad:a2:a3:e4:50:64:f5:b8:3c:b5:0f:bb:ee:
d6:f7:db:21:c3:f3:49:18:c9:ef:3a:52:80:7c:28:
e9:b4:e9:8f:f5:60:2b:7b:48:16:4e:1e:82:6b:c5:
a8:a7:c3:e3:26:67:ac:e8:a2:57:5d:6a:90:cb:de:
c7:fe:ec:e6:92:17:48:59:11:8a:44:ec:9a:54:71:
0c:ec:6d:78:23:51:19:08:6a:cf:b3:cf:ed:c0:69:
e1:f9:fb:28:bc:7d:f9:32:d2:ca:d6:9c:51:52:a1:
6c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:96:3B:EB:D9:DC:BA:54:69:B6:6E:B1:98:68:EA:A8:C4:51:28:BF
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/qZY769nculRptm6xmGjqqMRRKL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.135.0/24
77.90.145.0/24
77.90.188.0/24
185.230.15.0/24
Signature Algorithm: sha256WithRSAEncryption
10:d3:87:9d:e4:a6:c3:0f:dd:1e:e6:8f:72:e5:a0:f2:ee:3b:
e1:c8:dd:9d:06:74:f7:3d:8a:07:a6:4c:69:7a:33:0c:1a:84:
d3:9a:20:77:79:79:ea:38:d0:d0:9f:4c:df:b3:10:db:21:9c:
e2:b8:1e:2e:3c:ac:cb:eb:70:6f:a5:ee:69:19:96:52:c0:6b:
ce:21:49:3d:0b:0f:f7:48:1e:20:c1:68:00:89:44:66:7f:2e:
3d:04:cf:52:83:af:10:c0:2f:78:e0:bd:f9:4d:61:35:c3:d0:
99:e9:7c:58:12:1f:15:21:43:ca:88:8d:3e:4e:7f:b8:95:e3:
1c:1d:60:4a:4d:d8:37:9e:bc:36:ad:39:fd:ce:50:51:64:a0:
a6:b0:ad:d1:77:db:dd:5d:ad:d6:c0:d9:32:dc:06:2d:dc:d1:
81:02:fa:c9:93:68:24:3b:b2:0e:7d:41:49:a9:4f:2f:c4:ac:
e9:2a:b3:b5:42:6f:10:3f:31:62:26:ae:8f:95:d4:48:63:b7:
7b:13:d5:94:d7:cf:6b:29:65:33:60:e9:5a:39:04:1c:1c:69:
20:23:30:8c:00:2f:e1:37:79:1e:9c:c4:25:d6:dd:69:8c:75:
51:f8:68:83:19:ee:c2:d0:59:8e:4f:2d:33:74:53:3c:c8:e1:
7b:8f:de:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:12:51 2025 by rpki-client on console.sobornost.net