Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/7E34gY59CPJdmINm5sCNK8ObWN8.roa
File: 7E34gY59CPJdmINm5sCNK8ObWN8.roa (raw, json)
Hash identifier: t+gAe/vyXW9X5a/M/RFBGIPWTchiq1BRi5MKYnFwaO8=
Subject key identifier: EC:4D:F8:81:8E:7D:08:F2:5D:98:83:66:E6:C0:8D:2B:C3:9B:58:DF
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0195B1EEC51E207950E70BE1CBFF8AA1C79F
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/7E34gY59CPJdmINm5sCNK8ObWN8.roa
Signing time: Thu 20 Mar 2025 05:02:50 +0000
ROA not before: Thu 20 Mar 2025 05:02:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58212
IP address blocks: 5.83.150.0/24 maxlen: 24
5.231.70.0/24 maxlen: 24
5.231.82.0/24 maxlen: 24
77.90.22.0/24 maxlen: 24
77.90.39.0/24 maxlen: 24
77.90.41.0/24 maxlen: 24
77.90.52.0/24 maxlen: 24
77.90.58.0/24 maxlen: 24
89.106.70.0/24 maxlen: 24
89.144.8.0/24 maxlen: 24
89.144.16.0/24 maxlen: 24
89.144.25.0/24 maxlen: 24
89.144.34.0/24 maxlen: 24
89.144.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b1:ee:c5:1e:20:79:50:e7:0b:e1:cb:ff:8a:a1:c7:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 20 05:02:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec4df8818e7d08f25d988366e6c08d2bc39b58df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4e:55:ab:b1:58:9e:38:34:d3:c9:8a:ed:f7:
4b:94:1f:e0:d2:3c:6a:e2:48:ce:f2:ef:97:97:76:
15:d1:ae:98:a4:03:fa:b6:b9:6f:36:e7:7f:b9:d8:
25:a7:ee:57:80:aa:ab:b6:9e:d9:ad:9a:e2:ba:15:
04:fd:ab:fd:03:2d:4f:5d:46:db:af:0c:82:98:c4:
86:bb:99:2a:5c:79:66:96:25:60:ea:66:4e:44:01:
42:11:43:47:63:73:fa:b7:2b:f9:bd:e5:c1:8f:56:
75:85:15:17:d6:64:ef:31:d2:e0:ad:70:da:55:03:
8b:12:de:a3:66:f8:8f:19:67:f7:e2:87:8a:31:8f:
e5:80:d5:ba:b3:02:42:d1:c1:f9:af:09:3a:ef:8f:
da:0e:0b:ac:1c:5d:0d:92:3f:63:2f:03:81:b0:8a:
27:eb:9d:d6:be:6a:23:d5:b4:c5:5a:fb:b0:b4:1f:
64:6b:fd:88:7a:f5:07:18:49:60:98:8b:b1:37:12:
b5:d9:62:ef:38:e9:1b:bc:ed:61:ee:d5:67:f3:11:
f3:bb:a3:64:6b:bc:b1:e5:55:46:45:66:30:18:d3:
ee:51:b4:a9:25:75:9a:1a:00:45:26:9d:e3:9b:5e:
a0:a5:be:6f:d8:b9:94:fc:31:d3:f8:25:98:ac:ad:
5b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:4D:F8:81:8E:7D:08:F2:5D:98:83:66:E6:C0:8D:2B:C3:9B:58:DF
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/7E34gY59CPJdmINm5sCNK8ObWN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.150.0/24
5.231.70.0/24
5.231.82.0/24
77.90.22.0/24
77.90.39.0/24
77.90.41.0/24
77.90.52.0/24
77.90.58.0/24
89.106.70.0/24
89.144.8.0/24
89.144.16.0/24
89.144.25.0/24
89.144.34.0/23
Signature Algorithm: sha256WithRSAEncryption
bd:bc:f1:65:66:80:fd:26:c3:96:76:e2:d3:89:59:e7:cc:27:
86:15:16:6a:e6:65:f2:4e:29:5d:c4:a1:19:bf:a7:28:c9:58:
d7:af:79:4e:21:c5:a1:0f:a6:d1:6d:73:e9:89:11:e8:0a:3a:
aa:86:1e:77:69:3b:93:0c:06:98:b8:91:6d:70:3c:a1:e3:db:
5f:80:12:03:59:5e:8e:0e:be:bb:69:bc:49:6c:af:4c:8b:a4:
82:90:45:9a:89:55:54:8f:13:9b:dd:1f:df:75:02:bb:e0:5f:
cf:a2:36:0d:a1:8b:7d:6c:84:7a:80:4d:5c:91:97:14:65:eb:
0f:e4:af:8d:aa:be:3a:4c:cf:65:9d:88:c2:1f:bd:6b:5b:75:
6f:97:3e:3d:07:f6:19:02:3e:24:58:70:c7:23:08:51:23:8e:
4f:f4:69:b3:33:8d:fa:e7:e4:18:9d:bd:c8:b7:1f:43:4d:fc:
2f:da:3c:cc:49:cd:7c:35:a1:93:68:b9:74:a8:08:bf:3e:95:
6e:ca:9d:11:e6:c0:09:0c:43:ee:84:98:41:ec:fd:ea:22:89:
08:76:7b:12:6f:11:a3:1f:43:e8:42:ed:a9:8d:e7:ed:cb:63:
36:20:41:e9:b7:fd:41:5c:7b:a8:58:c8:cd:e8:2c:4b:ec:29:
29:8b:e1:95
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgISAZWx7sUeIHlQ5wvhy/+KocefMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwMzIwMDUwMjUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzRkZjg4MThlN2QwOGYyNWQ5ODgzNjZlNmMwOGQyYmMzOWI1OGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh05Vq7FYnjg008mK7fdLlB/g0jxq
4kjO8u+Xl3YV0a6YpAP6trlvNud/udglp+5XgKqrtp7ZrZriuhUE/av9Ay1PXUbb
rwyCmMSGu5kqXHlmliVg6mZORAFCEUNHY3P6tyv5veXBj1Z1hRUX1mTvMdLgrXDa
VQOLEt6jZviPGWf34oeKMY/lgNW6swJC0cH5rwk674/aDgusHF0Nkj9jLwOBsIon
653Wvmoj1bTFWvuwtB9ka/2IevUHGElgmIuxNxK12WLvOOkbvO1h7tVn8xHzu6Nk
a7yx5VVGRWYwGNPuUbSpJXWaGgBFJp3jm16gpb5v2LmU/DHT+CWYrK1bvQIDAQAB
o4ICUTCCAk0wHQYDVR0OBBYEFOxN+IGOfQjyXZiDZubAjSvDm1jfMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvN0UzNGdZNTlDUEpkbUlObTVzQ05LOE9iV044LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQABVOWAwQA
BedGAwQABedSAwQATVoWAwQATVonAwQATVopAwQATVo0AwQATVo6AwQAWWpGAwQA
WZAIAwQAWZAQAwQAWZAZAwQBWZAiMA0GCSqGSIb3DQEBCwUAA4IBAQC9vPFlZoD9
JsOWduLTiVnnzCeGFRZq5mXyTildxKEZv6coyVjXr3lOIcWhD6bRbXPpiRHoCjqq
hh53aTuTDAaYuJFtcDyh49tfgBIDWV6ODr67abxJbK9Mi6SCkEWaiVVUjxOb3R/f
dQK74F/PojYNoYt9bIR6gE1ckZcUZesP5K+Nqr46TM9lnYjCH71rW3Vvlz49B/YZ
Aj4kWHDHIwhRI45P9GmzM4365+QYnb3Itx9DTfwv2jzMSc18NaGTaLl0qAi/PpVu
yp0R5sAJDEPuhJhB7P3qIokIdnsSbxGjH0PoQu2pjefty2M2IEHpt/1BXHuoWMjN
6CxL7Ckpi+GV
-----END CERTIFICATE-----
Generated at Sat Apr 12 03:18:09 2025 by rpki-client