Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/7McGqlBPHs5IB2j-6jA2ImoJrMg.roa
File: 7McGqlBPHs5IB2j-6jA2ImoJrMg.roa (raw, json)
Hash identifier: IIFvlduG+uIybkWeJu5dBKYZBH+zj/dW1JEymCMWJYo=
Subject key identifier: EC:C7:06:AA:50:4F:1E:CE:48:07:68:FE:EA:30:36:22:6A:09:AC:C8
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0195A287984184D2E259DC93360073439AD6
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/7McGqlBPHs5IB2j-6jA2ImoJrMg.roa
Signing time: Mon 17 Mar 2025 05:15:50 +0000
ROA not before: Mon 17 Mar 2025 05:15:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49581
IP address blocks: 5.83.134.0/24 maxlen: 24
5.175.140.0/24 maxlen: 24
5.231.25.0/24 maxlen: 24
5.231.26.0/24 maxlen: 24
89.106.69.0/24 maxlen: 24
89.106.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a2:87:98:41:84:d2:e2:59:dc:93:36:00:73:43:9a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 17 05:15:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ecc706aa504f1ece480768feea3036226a09acc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:18:d0:d0:9c:99:48:5f:73:ee:78:d4:fd:06:
45:73:7a:da:42:77:f7:69:3b:0e:6f:ae:d3:4b:de:
33:84:1d:a5:66:53:20:1f:8f:fa:d8:37:0b:1b:2a:
b1:86:3f:db:01:27:78:7c:01:cb:d1:03:35:ed:ca:
38:33:a5:6d:e1:da:39:02:81:bd:39:d6:c0:e2:21:
cb:2d:20:f7:10:40:77:6d:03:8b:31:f7:30:34:e3:
92:aa:50:d4:f4:24:5c:c8:47:36:2b:4f:43:4d:c3:
cd:d9:ee:52:af:63:0f:55:e0:1f:7a:12:b2:30:b6:
56:35:33:57:a4:4f:65:63:37:28:88:c7:26:95:59:
e5:25:40:d2:31:72:36:64:99:79:8a:0d:6d:26:96:
2d:56:b7:62:64:64:d4:03:b2:f3:c3:f8:6e:a7:b5:
e8:b3:00:1c:0c:99:1d:39:e6:35:4c:80:7d:55:c6:
a1:a8:cc:05:7d:19:37:83:6e:a4:6c:36:94:ee:7a:
46:0c:ed:06:e3:48:a0:40:4a:44:80:d3:8b:af:3d:
4c:bf:8f:83:01:4b:fb:5d:42:7f:1f:30:a4:a8:6f:
18:51:7c:f8:dd:b4:6a:08:dc:89:9e:3e:49:c4:12:
d6:89:ff:93:9f:af:9e:72:eb:f4:83:84:57:7f:93:
7d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C7:06:AA:50:4F:1E:CE:48:07:68:FE:EA:30:36:22:6A:09:AC:C8
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/7McGqlBPHs5IB2j-6jA2ImoJrMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.134.0/24
5.175.140.0/24
5.231.25.0-5.231.26.255
89.106.69.0/24
89.106.71.0/24
Signature Algorithm: sha256WithRSAEncryption
90:c1:76:a5:3e:4e:4c:6b:64:8e:c4:6b:bb:6e:89:45:8e:ac:
94:4f:ad:af:c8:5b:3d:17:cd:f7:70:3b:a7:43:2d:97:1c:d9:
8f:47:08:ab:5a:8d:04:83:2c:28:ca:39:d7:3b:56:36:5a:26:
77:c3:24:27:c5:af:54:5a:ec:3b:6d:c0:72:12:63:e4:41:2d:
09:e3:5f:de:85:37:5d:de:a3:21:82:17:34:2a:bf:e5:8b:f1:
62:00:b1:e8:cb:6d:98:fc:a3:79:09:1f:5f:ce:fa:9a:f4:18:
12:67:c5:18:eb:32:6c:db:ec:c1:8a:cd:4f:22:d3:3a:e4:6b:
57:1c:e5:7b:c2:d0:e4:1a:a3:64:f8:e9:51:2a:05:f0:00:5a:
75:be:31:e3:f8:db:aa:19:d9:42:4d:c0:4c:01:b3:b9:be:3d:
3b:f8:88:f0:1f:5d:f3:ef:48:e0:e2:32:db:79:3b:c9:5b:83:
92:e7:7b:2f:37:b8:c4:62:5e:9f:a1:5a:69:1f:e0:27:06:1d:
5d:f9:a9:10:63:11:88:96:83:cd:46:86:3d:56:46:f6:1d:f0:
2c:f5:ac:4f:d5:71:b3:1e:85:73:9f:4e:ae:27:9b:ac:68:b4:
72:c7:26:a2:e2:6c:cd:41:71:64:1a:53:ec:52:b4:68:b1:16:
ac:be:05:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:03:16 2025 by rpki-client