Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/CYpe7Wf1nKbz9aaeCSFdCmpxRJY.roa
File: CYpe7Wf1nKbz9aaeCSFdCmpxRJY.roa (raw, json)
Hash identifier: DY/SgBfsbt+w3SlKYS5Ov/rM0f7nrjN1D9/mTORmnuk=
Subject key identifier: 09:8A:5E:ED:67:F5:9C:A6:F3:F5:A6:9E:09:21:5D:0A:6A:71:44:96
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194FC3CAECD820620714A8E65935E8D952D
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/CYpe7Wf1nKbz9aaeCSFdCmpxRJY.roa
Signing time: Wed 12 Feb 2025 22:17:02 +0000
ROA not before: Wed 12 Feb 2025 22:17:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58212
IP address blocks: 5.83.150.0/24 maxlen: 24
5.175.140.0/24 maxlen: 24
5.231.79.0/24 maxlen: 24
5.231.82.0/24 maxlen: 24
77.90.7.0/24 maxlen: 24
77.90.39.0/24 maxlen: 24
77.90.41.0/24 maxlen: 24
77.90.52.0/24 maxlen: 24
77.90.58.0/24 maxlen: 24
89.106.70.0/24 maxlen: 24
94.249.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:fc:3c:ae:cd:82:06:20:71:4a:8e:65:93:5e:8d:95:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 12 22:17:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=098a5eed67f59ca6f3f5a69e09215d0a6a714496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:21:d4:21:cb:e6:ef:3f:19:45:a1:5b:31:78:
cd:9f:e3:3d:6f:60:c2:34:28:36:40:c1:62:be:89:
20:b7:0f:67:0c:f2:75:67:fc:5b:2f:d5:f1:69:89:
c4:bc:cd:a4:b6:05:d1:6f:6b:6a:d0:de:1f:82:a2:
25:48:3e:cd:ef:02:c6:bb:2d:bd:5a:9a:18:da:cc:
e3:92:28:4c:11:eb:46:71:98:ff:64:73:00:b4:ae:
b4:7f:b5:f7:f3:b1:44:bf:0b:c9:49:51:d2:ed:ae:
5f:d6:48:90:ce:84:17:19:a2:82:e3:fb:20:47:82:
f6:da:54:9e:4e:35:09:b2:30:0c:86:5f:28:f3:8a:
f2:18:da:5c:b3:db:63:45:c9:6d:f0:1c:b7:db:35:
3a:c2:f4:33:0c:ec:bd:60:2c:53:48:52:bb:ae:4f:
e1:10:6d:65:c6:ac:80:10:f6:45:b2:b4:3f:a9:77:
e1:21:44:5e:2b:ca:ca:b8:f7:8b:5a:a9:c9:fa:e5:
a7:d6:0b:93:83:ff:d1:85:f4:66:42:2a:ed:27:cb:
d6:3c:08:5e:ba:b5:91:47:e7:9f:62:5a:c2:2e:fd:
96:79:80:ff:b4:c8:d8:f3:f7:cb:a5:86:4e:45:69:
ea:84:9d:90:73:31:7a:3f:e7:34:ad:df:7c:09:24:
0b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:8A:5E:ED:67:F5:9C:A6:F3:F5:A6:9E:09:21:5D:0A:6A:71:44:96
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/CYpe7Wf1nKbz9aaeCSFdCmpxRJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.150.0/24
5.175.140.0/24
5.231.79.0/24
5.231.82.0/24
77.90.7.0/24
77.90.39.0/24
77.90.41.0/24
77.90.52.0/24
77.90.58.0/24
89.106.70.0/24
94.249.212.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:55:91:1e:0b:02:76:d2:b1:e2:cb:1d:50:00:d9:9d:0f:93:
57:8c:d1:d0:21:d5:62:39:36:0b:ea:9a:f9:63:e6:48:3c:70:
67:95:5b:09:f2:c0:bb:d9:f0:e9:70:96:98:28:1f:ba:ce:b2:
01:35:c5:36:97:9c:33:b5:8a:43:81:69:ff:69:1f:0e:ac:1b:
5e:26:78:6c:d7:0f:93:22:94:8a:a4:92:4e:d2:7b:69:58:a8:
4c:64:9c:0c:80:08:4d:82:2d:22:b8:74:b2:01:c4:1b:0a:54:
5c:83:59:7a:e0:ad:cc:de:b4:ab:67:bd:0c:4a:3f:4b:3d:e5:
cf:a2:81:35:a1:c3:80:5e:69:19:7a:07:bb:eb:51:25:03:9f:
51:31:cb:4e:13:ff:d9:a9:8a:19:92:50:19:6d:a6:2e:32:85:
1c:79:71:ce:6b:10:44:d7:dd:03:c8:a2:78:17:5e:94:81:7a:
d2:1e:32:8f:af:2c:89:3c:56:38:83:f0:4a:12:11:10:fb:fe:
06:6e:35:7e:02:b7:3c:a9:a1:e5:b2:c0:10:62:5b:c5:85:1c:
59:d8:a9:22:a3:92:21:52:bc:b7:ef:23:30:37:7f:71:80:27:
b6:48:fb:cb:e0:30:e4:e9:28:75:d7:a1:8c:cd:f6:c8:9d:ca:
9b:58:31:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:08:01 2025 by rpki-client