Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/BRi9rh7hJG8afVJd0T7R35LtH8o.roa
File: BRi9rh7hJG8afVJd0T7R35LtH8o.roa (raw, json)
Hash identifier: jIskHSWUc4AY3d/Sl67hOLf23LHF2DNtEmrMBsST8ZA=
Subject key identifier: 05:18:BD:AE:1E:E1:24:6F:1A:7D:52:5D:D1:3E:D1:DF:92:ED:1F:CA
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019400B3510189574CA6BAB15F0EFF36EAC5
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/BRi9rh7hJG8afVJd0T7R35LtH8o.roa
Signing time: Thu 26 Dec 2024 02:02:19 +0000
ROA not before: Thu 26 Dec 2024 02:02:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 5.83.129.0/24 maxlen: 24
5.175.138.0/24 maxlen: 24
77.90.54.0/24 maxlen: 24
87.239.131.0/24 maxlen: 24
89.106.69.0/24 maxlen: 24
94.103.163.0/24 maxlen: 24
94.249.148.0/24 maxlen: 24
94.249.153.0/24 maxlen: 24
94.249.212.0/24 maxlen: 24
94.249.237.0/24 maxlen: 24
95.215.32.0/24 maxlen: 24
95.215.34.0/24 maxlen: 24
185.13.159.0/24 maxlen: 24
185.47.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:00:b3:51:01:89:57:4c:a6:ba:b1:5f:0e:ff:36:ea:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Dec 26 02:02:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0518bdae1ee1246f1a7d525dd13ed1df92ed1fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5b:83:35:54:54:00:cd:9a:54:6e:a8:ac:bb:
c3:d3:dc:3a:37:04:b0:4b:0f:3f:40:09:da:24:6f:
d3:c2:05:9d:d6:ec:15:18:08:c4:5a:49:4a:fe:65:
36:9d:ba:3e:d8:08:3e:08:7e:2f:fa:7c:51:a6:4e:
c2:8b:13:e1:61:a8:35:77:01:3f:3c:54:34:43:65:
d2:32:34:16:af:df:64:85:30:29:1c:68:34:71:65:
50:23:8a:54:96:b8:3d:e9:6e:2c:76:ec:c8:aa:d3:
3e:3b:bd:22:1e:9c:22:d9:b5:6c:39:7e:93:c3:86:
8d:ae:fd:be:36:76:91:74:3f:a1:17:bb:dc:93:e3:
35:cb:7d:af:d1:e0:0a:6d:aa:b0:c3:7a:d4:37:57:
fb:3d:91:37:a4:a9:09:e4:94:3c:80:1b:67:bc:e5:
86:82:e9:1d:73:20:f8:29:d9:0f:d3:a6:b1:e2:b2:
b9:14:4c:c3:ce:d5:66:f9:83:6f:9e:99:e9:a6:4e:
b0:db:01:a0:97:ad:19:52:3b:79:b0:e1:bc:4e:65:
0d:9e:b4:46:9b:ee:ce:75:9d:1d:61:ec:51:9f:89:
68:f7:0f:d1:ec:3d:5f:63:12:56:69:a1:1f:82:27:
73:c8:78:6e:72:cc:b9:43:6f:5f:5a:5c:86:46:2e:
c7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:18:BD:AE:1E:E1:24:6F:1A:7D:52:5D:D1:3E:D1:DF:92:ED:1F:CA
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/BRi9rh7hJG8afVJd0T7R35LtH8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.129.0/24
5.175.138.0/24
77.90.54.0/24
87.239.131.0/24
89.106.69.0/24
94.103.163.0/24
94.249.148.0/24
94.249.153.0/24
94.249.212.0/24
94.249.237.0/24
95.215.32.0/24
95.215.34.0/24
185.13.159.0/24
185.47.143.0/24
Signature Algorithm: sha256WithRSAEncryption
e3:79:bd:64:f0:ca:d3:71:10:42:2a:b9:89:61:02:23:d2:56:
7a:27:72:34:69:ff:01:b0:e6:c4:44:43:f0:b5:c9:ef:2f:64:
2d:3e:52:09:a0:22:5f:1a:d1:db:a4:3a:a9:f9:28:80:79:3a:
53:d2:59:96:3d:ee:a1:25:a8:8a:97:24:14:09:3b:18:b9:4f:
6e:71:dd:69:4a:a2:25:04:e4:ab:41:c0:a0:ac:54:e4:16:79:
d1:88:d7:d2:3e:a8:c6:4b:99:ec:ea:53:03:55:c6:b9:bb:00:
ec:e6:48:fb:4c:23:48:78:8a:2a:e8:15:1e:59:ec:4e:75:fb:
4c:63:56:ef:5c:d8:d6:f9:17:45:f2:75:db:e4:de:cd:f6:76:
7f:46:10:86:8f:07:f3:37:f9:af:4f:1f:75:4b:fa:6a:bc:f2:
a3:3d:ca:7b:85:48:2e:95:e8:3d:5d:9f:13:f8:67:98:3c:a0:
c2:9a:67:9e:52:0b:88:0b:b5:8e:9a:45:26:29:e3:fd:2d:99:
cd:5f:a9:46:fd:2e:22:63:fd:4c:7a:8f:eb:0b:cb:93:b7:d3:
a5:0e:bc:0b:81:60:92:94:62:41:b6:8a:ee:51:6b:8d:02:fb:
dd:b3:ef:ab:bf:ba:01:2d:87:de:c2:7f:4b:3e:cf:d7:08:25:
57:96:79:87
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgISAZQAs1EBiVdMprqxXw7/NurFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjQxMjI2MDIwMjE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTE4YmRhZTFlZTEyNDZmMWE3ZDUyNWRkMTNlZDFkZjkyZWQxZmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1uDNVRUAM2aVG6orLvD09w6NwSw
Sw8/QAnaJG/TwgWd1uwVGAjEWklK/mU2nbo+2Ag+CH4v+nxRpk7CixPhYag1dwE/
PFQ0Q2XSMjQWr99khTApHGg0cWVQI4pUlrg96W4sduzIqtM+O70iHpwi2bVsOX6T
w4aNrv2+NnaRdD+hF7vck+M1y32v0eAKbaqww3rUN1f7PZE3pKkJ5JQ8gBtnvOWG
gukdcyD4KdkP06ax4rK5FEzDztVm+YNvnpnppk6w2wGgl60ZUjt5sOG8TmUNnrRG
m+7OdZ0dYexRn4lo9w/R7D1fYxJWaaEfgidzyHhucsy5Q29fWlyGRi7HhwIDAQAB
o4ICVzCCAlMwHQYDVR0OBBYEFAUYva4e4SRvGn1SXdE+0d+S7R/KMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvQlJpOXJoN2hKRzhhZlZKZDBUN1IzNUx0SDhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQABVOBAwQA
Ba+KAwQATVo2AwQAV++DAwQAWWpFAwQAXmejAwQAXvmUAwQAXvmZAwQAXvnUAwQA
XvntAwQAX9cgAwQAX9ciAwQAuQ2fAwQAuS+PMA0GCSqGSIb3DQEBCwUAA4IBAQDj
eb1k8MrTcRBCKrmJYQIj0lZ6J3I0af8BsObEREPwtcnvL2QtPlIJoCJfGtHbpDqp
+SiAeTpT0lmWPe6hJaiKlyQUCTsYuU9ucd1pSqIlBOSrQcCgrFTkFnnRiNfSPqjG
S5ns6lMDVca5uwDs5kj7TCNIeIoq6BUeWexOdftMY1bvXNjW+RdF8nXb5N7N9nZ/
RhCGjwfzN/mvTx91S/pqvPKjPcp7hUguleg9XZ8T+GeYPKDCmmeeUguIC7WOmkUm
KeP9LZnNX6lG/S4iY/1Meo/rC8uTt9OlDrwLgWCSlGJBtoruUWuNAvvds++rv7oB
LYfewn9LPs/XCCVXlnmH
-----END CERTIFICATE-----
Generated at Sat Apr 12 03:18:18 2025 by rpki-client