Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6sOzlExXZ5gLOv59uTZMXW9MMFg.roa
File: 6sOzlExXZ5gLOv59uTZMXW9MMFg.roa (raw, json)
Hash identifier: oJ1izWaUhF+eZDin38RXaq5VpF/5ge4AbUAth4t6+Fg=
Subject key identifier: EA:C3:B3:94:4C:57:67:98:0B:3A:FE:7D:B9:36:4C:5D:6F:4C:30:58
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0193AAFB41E4E2B697B474067364248227F4
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6sOzlExXZ5gLOv59uTZMXW9MMFg.roa
Signing time: Mon 09 Dec 2024 10:33:33 +0000
ROA not before: Mon 09 Dec 2024 10:33:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.145.0/24 maxlen: 24
5.83.149.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.218.0/24 maxlen: 32
5.175.219.0/24 maxlen: 32
5.175.220.0/24 maxlen: 32
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.234.0/24 maxlen: 24
5.175.235.0/24 maxlen: 32
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.26.0/24 maxlen: 24
5.231.233.0/24 maxlen: 32
77.90.0.0/18 maxlen: 32
77.90.60.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
85.118.162.0/24 maxlen: 24
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.249.128.0/17 maxlen: 32
94.249.148.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:aa:fb:41:e4:e2:b6:97:b4:74:06:73:64:24:82:27:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Dec 9 10:33:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eac3b3944c5767980b3afe7db9364c5d6f4c3058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:61:77:6b:7b:8f:2e:50:a5:c5:40:77:89:98:
ad:19:88:db:e6:48:5e:a1:66:bd:9f:13:15:a7:b0:
0f:00:2d:69:2a:6f:7a:53:7c:dc:d4:62:b7:cc:91:
24:7a:bc:ba:95:2f:13:f0:5e:ab:11:e7:02:ad:27:
41:d1:e8:6d:f1:f8:72:8b:f5:67:7d:00:28:b8:59:
04:06:33:29:e0:59:b4:7c:9b:c2:04:73:49:42:7b:
3a:6a:37:ff:b0:b1:db:a9:c9:f5:0f:2f:96:1b:51:
fe:cb:06:0c:bc:9b:e2:29:65:0c:e2:d4:d5:6e:b3:
62:95:6a:2b:8b:c3:d3:02:68:50:9d:b0:8c:9e:1e:
59:89:8a:df:88:d9:ce:28:89:26:ab:42:5e:5c:80:
56:1d:47:fc:d3:f0:f5:7c:da:ad:61:a4:91:44:fb:
32:06:f2:6b:fa:0b:4a:cb:ff:33:bc:0e:b3:de:a5:
b0:e4:7c:d4:b2:dd:e0:9e:99:f5:64:fb:2a:12:ee:
5d:c7:4b:c1:3d:76:b5:8e:59:f8:f2:12:97:8b:f3:
ad:8e:f7:52:78:c8:4e:58:30:33:85:8b:ff:5d:b3:
99:35:4d:5b:c7:67:c9:07:2d:88:d3:9d:64:7c:55:
61:9a:79:b5:12:e1:b3:3b:65:19:bd:fb:4e:49:75:
f7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C3:B3:94:4C:57:67:98:0B:3A:FE:7D:B9:36:4C:5D:6F:4C:30:58
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6sOzlExXZ5gLOv59uTZMXW9MMFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.218.0-5.175.220.255
5.175.225.0-5.175.232.255
5.175.234.0/23
5.175.240.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
8f:80:75:b9:d1:12:50:9f:17:58:97:08:aa:3c:29:60:7c:56:
6a:cd:95:98:2f:d7:e9:92:ed:8d:4a:62:1c:4c:10:89:68:57:
8b:a6:7e:04:90:9f:b7:23:c5:33:a2:f1:43:f1:01:e8:9c:99:
3c:27:1e:90:39:90:ef:fe:d4:a3:de:fc:d0:28:ca:fc:2c:b0:
fb:ea:b4:75:a0:4c:e9:71:8c:8a:79:47:4e:f9:ec:1b:49:60:
ae:c0:53:d4:84:a1:89:e6:6e:f7:8c:29:69:95:11:c4:7d:d4:
86:82:5d:96:88:28:61:54:23:f8:e9:40:28:cd:71:af:b1:88:
3f:7d:bb:4f:0f:fc:ca:36:7c:95:c3:24:cc:2c:72:d2:e7:d1:
84:1a:35:88:ab:e0:15:c9:3e:2f:c2:3c:6a:79:fb:0e:bf:aa:
56:7d:6e:0a:3f:b4:29:5d:b5:69:5c:ac:a5:3d:40:c9:56:61:
47:04:be:a2:78:e8:a7:38:84:67:47:90:e5:21:c5:eb:65:72:
cb:1a:9d:58:86:fd:94:8c:01:ec:82:ce:4c:0f:a5:ab:68:2b:
3f:26:79:66:89:28:a6:1f:ad:33:e9:87:79:3f:7b:4c:ad:24:
b6:fb:68:88:ad:8b:a8:88:f8:d8:ec:af:24:ef:b9:e9:1a:24:
0c:6c:89:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:23:03 2025 by rpki-client