Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/0PhZVymsjx6BrJJTUx6FOJWCkS0.roa
File: 0PhZVymsjx6BrJJTUx6FOJWCkS0.roa (raw, json)
Hash identifier: KfXU+qfuDlRmDNMYeLngXifGpsmt9DmA5qtq7JUj6Sg=
Subject key identifier: D0:F8:59:57:29:AC:8F:1E:81:AC:92:53:53:1E:85:38:95:82:91:2D
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01945FCEF4D0882DDFBB2E7722ACFE0B6C21
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/0PhZVymsjx6BrJJTUx6FOJWCkS0.roa
Signing time: Mon 13 Jan 2025 13:16:26 +0000
ROA not before: Mon 13 Jan 2025 13:16:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 5.83.129.0/24 maxlen: 24
5.175.138.0/24 maxlen: 24
77.90.54.0/24 maxlen: 24
87.239.130.0/24 maxlen: 24
87.239.131.0/24 maxlen: 24
89.106.69.0/24 maxlen: 24
94.103.163.0/24 maxlen: 24
94.103.164.0/24 maxlen: 24
94.249.153.0/24 maxlen: 24
94.249.158.0/24 maxlen: 24
94.249.195.0/24 maxlen: 24
94.249.212.0/24 maxlen: 24
94.249.214.0/24 maxlen: 24
94.249.215.0/24 maxlen: 24
94.249.237.0/24 maxlen: 24
95.215.32.0/24 maxlen: 24
95.215.34.0/24 maxlen: 24
178.18.144.0/24 maxlen: 24
185.13.156.0/24 maxlen: 24
185.13.159.0/24 maxlen: 24
185.47.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:5f:ce:f4:d0:88:2d:df:bb:2e:77:22:ac:fe:0b:6c:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 13 13:16:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d0f8595729ac8f1e81ac9253531e85389582912d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:97:3d:eb:2f:c6:f9:15:f0:06:a8:e0:bc:81:
ab:00:b9:06:53:2c:11:f3:3a:28:f3:da:2f:e3:ed:
76:7c:2e:56:5b:8e:0c:1b:01:9b:0d:01:ae:36:59:
da:bb:61:cb:d8:1f:1b:a2:ee:14:9e:f9:49:35:1b:
e8:1f:44:9b:36:e1:e7:8e:8d:1c:ed:be:ed:99:bc:
f4:37:42:9a:95:c6:49:18:9e:a8:d3:d3:3e:0e:ef:
e3:f3:a0:d4:09:bf:01:6e:1c:fb:7a:0d:ba:ab:b4:
b5:c1:9d:e6:75:32:6b:37:ad:ad:24:30:40:9d:39:
6a:fa:5b:ed:33:40:50:c4:e8:9a:68:ab:c9:90:0a:
14:78:1e:15:0a:19:15:94:93:79:f1:f9:b7:bb:3b:
7a:42:6a:c4:42:db:e6:76:ce:1b:4e:c0:4b:d6:cc:
cd:e6:d8:39:a1:fc:db:33:e3:18:d5:58:d5:43:22:
1d:ff:cc:aa:fe:5e:78:0d:8c:f8:b1:2d:dc:ae:3d:
6c:55:8d:9f:f2:c1:86:bb:89:e8:a2:fc:6e:dd:b6:
3a:72:e8:4a:e1:5a:f5:54:b5:a2:70:05:8e:ca:d2:
47:72:5e:60:f1:e0:12:a8:f8:07:5a:10:cc:8f:0d:
10:5d:2b:06:9c:c1:50:8e:ca:61:90:a6:93:ba:18:
11:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F8:59:57:29:AC:8F:1E:81:AC:92:53:53:1E:85:38:95:82:91:2D
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/0PhZVymsjx6BrJJTUx6FOJWCkS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.129.0/24
5.175.138.0/24
77.90.54.0/24
87.239.130.0/23
89.106.69.0/24
94.103.163.0-94.103.164.255
94.249.153.0/24
94.249.158.0/24
94.249.195.0/24
94.249.212.0/24
94.249.214.0/23
94.249.237.0/24
95.215.32.0/24
95.215.34.0/24
178.18.144.0/24
185.13.156.0/24
185.13.159.0/24
185.47.143.0/24
Signature Algorithm: sha256WithRSAEncryption
82:13:8a:24:c5:02:f8:c3:36:74:9c:ea:41:64:15:61:34:af:
47:3a:3a:7c:44:85:ea:e0:84:29:b9:2d:58:c5:fa:23:44:fa:
c5:7f:96:2c:07:d3:8a:e4:c9:34:5d:ce:52:75:1a:12:76:ec:
78:f5:a2:ec:95:c5:e1:a6:89:b2:a4:42:82:f7:5a:a5:55:5b:
2a:10:b3:3f:43:a2:6b:b5:d0:6b:6b:d1:35:5a:f9:a8:9e:de:
26:84:9a:1a:fe:85:71:95:5d:16:c6:62:6e:3d:d3:25:b5:3b:
89:7b:bd:c4:87:92:24:75:af:60:5f:17:15:a9:0f:89:19:c7:
eb:02:8b:60:17:eb:d0:ec:94:3f:2a:b7:41:08:00:a8:a4:bc:
5e:4a:e9:e7:d9:64:eb:5b:7d:9a:95:17:6e:32:4c:e7:3b:92:
e0:c7:af:fb:51:93:65:67:38:fc:7c:1a:28:8f:03:47:73:10:
b6:55:49:2a:f1:9e:70:d7:01:6f:bc:3e:7b:48:cc:9c:35:e3:
a0:d5:03:2a:e9:c9:34:1c:f7:bc:8a:3c:29:e2:cf:d8:90:5c:
fc:78:1c:bc:3c:ba:80:ed:85:0d:7c:e1:cb:85:78:0d:50:c9:
39:30:88:57:01:0d:e9:d4:a1:73:3a:bf:4c:e6:27:b1:3e:81:
9d:00:06:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:25:12 2025 by rpki-client