Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/B_7USaMbvlBAYatk-r32qkOPToA.roa
File: B_7USaMbvlBAYatk-r32qkOPToA.roa (raw, json)
Hash identifier: 6q6auaJyWn3MciII6JLYfVB0TM46nlyDXxuMl5m4/X4=
Subject key identifier: 07:FE:D4:49:A3:1B:BE:50:40:61:AB:64:FA:BD:F6:AA:43:8F:4E:80
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01955A689C9D1A973B1EE43E2BCB9E4F0A02
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/B_7USaMbvlBAYatk-r32qkOPToA.roa
Signing time: Mon 03 Mar 2025 05:09:19 +0000
ROA not before: Mon 03 Mar 2025 05:09:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58212
IP address blocks: 5.83.150.0/24 maxlen: 24
5.175.140.0/24 maxlen: 24
5.175.142.0/24 maxlen: 24
5.175.220.0/24 maxlen: 24
5.231.82.0/24 maxlen: 24
77.90.7.0/24 maxlen: 24
77.90.39.0/24 maxlen: 24
77.90.41.0/24 maxlen: 24
77.90.52.0/24 maxlen: 24
77.90.58.0/24 maxlen: 24
85.118.162.0/24 maxlen: 24
87.239.130.0/24 maxlen: 24
89.106.70.0/24 maxlen: 24
89.144.25.0/24 maxlen: 24
89.144.34.0/24 maxlen: 24
89.144.35.0/24 maxlen: 24
89.144.60.0/24 maxlen: 24
94.249.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5a:68:9c:9d:1a:97:3b:1e:e4:3e:2b:cb:9e:4f:0a:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 3 05:09:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07fed449a31bbe504061ab64fabdf6aa438f4e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1b:a0:a7:81:3a:a9:cb:3e:cf:2b:43:8f:de:
dd:81:c5:0b:d6:90:84:ea:e2:ce:93:b8:d6:b4:a5:
ed:8b:2e:fc:0e:d5:79:18:12:e3:81:56:6f:b3:f7:
78:b2:d2:b7:85:20:a7:ef:e9:d9:5a:be:63:c0:cc:
bb:10:e4:b4:15:5c:38:07:c1:33:78:a5:39:c5:01:
79:d4:01:1b:2c:49:68:46:66:9f:bc:4d:61:a1:d1:
c1:50:e1:00:2f:0a:ca:e2:1c:4f:4b:c9:2f:57:e9:
f6:c3:6e:6c:3d:01:d3:99:8c:fc:41:1e:5e:e0:46:
dd:94:30:9d:54:38:c5:41:3b:34:6a:ca:9e:7a:43:
7b:0d:5a:2f:78:d8:d2:db:c5:6e:2a:1d:74:ce:f1:
ae:b4:36:eb:be:0e:0c:c3:3c:a2:98:ca:21:7a:fd:
b8:d1:4c:a3:d7:f3:db:54:a7:63:a6:82:fc:d8:9a:
6c:ba:19:9d:7f:1c:a3:0d:e0:43:a1:ed:e2:bb:93:
74:2e:14:fd:89:02:3d:1f:cb:56:f9:76:cf:22:27:
d2:a8:89:5e:d2:0c:c4:4b:fc:96:17:17:82:97:17:
63:36:a1:67:aa:4a:ac:79:bf:ac:59:ac:9a:81:ee:
e6:0b:ad:ba:f0:d6:ea:df:68:d3:83:9b:ba:f1:fe:
7e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:FE:D4:49:A3:1B:BE:50:40:61:AB:64:FA:BD:F6:AA:43:8F:4E:80
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/B_7USaMbvlBAYatk-r32qkOPToA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.150.0/24
5.175.140.0/24
5.175.142.0/24
5.175.220.0/24
5.231.82.0/24
77.90.7.0/24
77.90.39.0/24
77.90.41.0/24
77.90.52.0/24
77.90.58.0/24
85.118.162.0/24
87.239.130.0/24
89.106.70.0/24
89.144.25.0/24
89.144.34.0/23
89.144.60.0/24
94.249.212.0/24
Signature Algorithm: sha256WithRSAEncryption
97:c3:9f:02:cc:dc:51:11:72:47:ba:16:fd:e3:bd:f2:a6:9d:
5d:7c:9e:dd:ce:b4:94:0f:32:ac:98:34:fc:d5:37:b1:ab:fd:
07:f0:18:47:1c:76:eb:17:83:43:e6:01:09:e6:19:ab:20:5b:
fa:bb:62:19:9b:e8:22:1e:dc:7b:d8:c8:73:40:72:2a:bc:b2:
7d:8e:53:8e:06:2a:15:52:f9:9b:d6:d2:53:e6:44:10:4d:e8:
9f:22:86:7d:9b:31:ee:b8:5a:44:3b:f6:fc:bb:34:6a:13:77:
45:0e:4e:29:a7:5b:98:68:19:a0:44:68:57:14:09:ce:11:39:
86:8a:c7:b6:27:e4:b3:d8:34:25:59:96:a3:80:07:97:d7:57:
5a:24:d3:6e:a3:85:77:d5:69:46:04:f8:dd:c2:cd:d6:c7:56:
a6:7f:48:91:eb:f2:91:fc:83:b2:5d:99:af:d9:01:c6:25:a7:
c7:7f:69:d8:6b:12:54:69:f7:57:cd:c3:6d:10:70:06:28:91:
6e:63:1a:3a:ae:66:19:16:e0:f1:c3:df:1a:ff:43:e7:a5:66:
12:0c:7a:b3:be:a7:fd:6f:1c:44:3e:2b:58:5f:d4:3b:23:72:
14:04:9d:82:9c:ce:f0:12:96:a4:a4:9c:82:f2:36:a7:af:fb:
a0:3a:c5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:16:02 2025 by rpki-client