Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/BDPrxfB1OurhqsDjm0xal_WKt-Q.roa
File: BDPrxfB1OurhqsDjm0xal_WKt-Q.roa (raw, json)
Hash identifier: FTCJLAipn8iyU4B8Z/hmNx6of7P+6sxgw4dHEOG2UGU=
Subject key identifier: 04:33:EB:C5:F0:75:3A:EA:E1:AA:C0:E3:9B:4C:5A:97:F5:8A:B7:E4
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0195D29932DA9D94AEE49F84ACEAFA4F27E5
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/BDPrxfB1OurhqsDjm0xal_WKt-Q.roa
Signing time: Wed 26 Mar 2025 13:16:50 +0000
ROA not before: Wed 26 Mar 2025 13:16:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215828
IP address blocks: 5.83.138.0/24 maxlen: 24
5.83.148.0/24 maxlen: 24
77.90.25.0/24 maxlen: 24
94.249.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d2:99:32:da:9d:94:ae:e4:9f:84:ac:ea:fa:4f:27:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 26 13:16:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0433ebc5f0753aeae1aac0e39b4c5a97f58ab7e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cf:cc:a7:94:b5:e5:9c:dc:35:91:4e:a5:32:
f0:ee:b6:c2:fd:36:dd:44:87:99:70:8b:eb:c0:c7:
a0:8f:8f:4b:d3:d7:77:76:72:9c:9d:25:ce:a1:31:
27:19:c8:83:8b:49:70:98:2b:17:d8:da:41:0c:47:
71:e3:af:de:f5:f8:84:e5:23:a8:18:86:b2:49:2a:
25:71:3b:7e:c2:8a:0b:76:01:e6:71:ee:b7:dd:59:
d0:bc:77:f4:1b:d2:b6:96:2d:bf:02:5b:57:87:f6:
df:61:8d:0c:42:ba:83:3d:30:26:97:78:79:3d:78:
11:15:8d:28:05:78:41:46:87:70:2b:99:e0:8e:fe:
88:b0:0d:70:e3:dc:81:3d:0d:be:43:0f:b0:39:a2:
3b:79:67:c2:23:85:78:d4:30:cd:5c:87:13:ff:40:
c3:17:98:a7:d8:66:5e:98:5a:4b:42:dc:8d:1d:25:
f8:51:de:55:35:4b:20:7f:13:3d:81:ea:8b:74:60:
c2:64:9b:f3:5a:5b:a7:60:68:c4:01:43:14:48:7a:
d9:31:e1:fc:21:3a:78:e3:ea:92:ab:cd:f4:09:3d:
87:82:9c:b5:21:b1:9b:cd:00:01:47:62:2e:d0:db:
2f:fe:be:48:05:61:d3:5c:6a:54:44:12:6a:f0:a9:
e2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:33:EB:C5:F0:75:3A:EA:E1:AA:C0:E3:9B:4C:5A:97:F5:8A:B7:E4
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/BDPrxfB1OurhqsDjm0xal_WKt-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.138.0/24
5.83.148.0/24
77.90.25.0/24
94.249.138.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:d2:44:95:51:78:5b:38:fd:6f:7c:ec:96:30:6d:5d:57:28:
9b:b5:5d:4f:81:3d:43:cc:90:80:54:d4:c9:fc:a3:37:f3:6e:
4f:0a:16:2a:20:ef:83:38:68:29:0d:5c:46:5c:d8:40:f4:92:
38:38:cd:ee:60:fb:ba:ab:87:2a:17:58:05:a3:05:7c:34:36:
7c:e2:09:ef:30:3a:f3:0a:50:6c:83:b7:7c:d9:25:43:93:72:
3a:ad:33:45:3c:22:28:3d:21:59:8c:e1:61:90:cd:ca:9a:50:
a5:f0:96:95:ae:6b:61:e6:84:40:bd:84:2b:eb:f3:9c:fd:58:
32:37:a9:4f:b3:bc:cd:fc:bb:e2:53:43:36:1e:24:91:95:9f:
87:95:4c:cb:73:b2:1d:de:cc:0f:0a:c3:cc:46:70:7c:f3:d0:
78:b0:08:3d:a3:ce:19:e8:a5:1d:c1:5c:23:6e:10:00:2f:86:
0e:ea:c3:95:0f:5c:fe:4a:ef:c3:22:65:d4:a2:a6:93:c9:0b:
7c:dc:53:1a:21:da:cf:16:26:26:69:58:26:b9:55:a1:e4:db:
0d:7f:03:48:14:f5:9a:90:50:5c:97:c2:e1:21:9e:3f:f5:80:
dd:8e:a3:db:ab:52:33:6f:60:18:b8:92:30:4b:dd:58:56:54:
2c:41:ed:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:18:22 2025 by rpki-client