Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/DxokmThPb2lh5VrOKQKgTf8szLI.roa
File: DxokmThPb2lh5VrOKQKgTf8szLI.roa (raw, json)
Hash identifier: WreslOjF79I3iSr+g2kb4S4gZnD088+cgdBJQtGioGg=
Subject key identifier: 0F:1A:24:99:38:4F:6F:69:61:E5:5A:CE:29:02:A0:4D:FF:2C:CC:B2
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019582994F884892440191B0B5BE68C90ECD
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/DxokmThPb2lh5VrOKQKgTf8szLI.roa
Signing time: Tue 11 Mar 2025 00:27:20 +0000
ROA not before: Tue 11 Mar 2025 00:27:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 5.83.129.0/24 maxlen: 24
5.175.138.0/24 maxlen: 24
77.90.54.0/24 maxlen: 24
87.239.131.0/24 maxlen: 24
94.103.163.0/24 maxlen: 24
94.249.215.0/24 maxlen: 24
95.215.32.0/24 maxlen: 24
95.215.34.0/24 maxlen: 24
185.13.156.0/24 maxlen: 24
217.69.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:82:99:4f:88:48:92:44:01:91:b0:b5:be:68:c9:0e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 11 00:27:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f1a2499384f6f6961e55ace2902a04dff2cccb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c1:1a:e7:72:e4:7d:d6:6a:aa:65:15:32:c8:
77:54:61:1c:a4:35:b5:83:e9:36:65:16:68:db:c1:
5c:57:93:6e:cd:49:80:58:79:81:f9:18:be:72:da:
64:33:0c:f2:33:87:e2:e8:c0:5b:8a:f5:e3:70:23:
cd:88:a7:3a:ee:33:7e:32:58:ad:29:a5:77:38:14:
dc:ca:54:92:d5:90:c3:f2:e1:af:d8:70:a6:73:d1:
0a:cc:a6:ae:44:54:d1:1d:d4:98:ee:8f:c2:1f:1d:
66:5b:6f:35:de:2a:aa:ec:2c:33:03:e8:fc:50:98:
39:dd:45:d3:b5:b0:0b:ea:80:ed:b0:68:2c:75:76:
c1:cc:4a:51:52:55:5b:6c:b2:51:94:b1:d1:6f:7b:
36:24:59:98:f6:44:a5:4b:14:c2:36:6f:f4:ad:ce:
99:c4:67:86:55:b5:8d:c8:5f:0d:d2:04:9b:ed:52:
47:04:b4:bd:52:1a:a9:a9:17:66:1a:f3:49:c8:43:
26:60:6a:40:12:53:f1:d8:50:ba:fc:a8:58:31:fb:
07:76:93:12:38:f4:4c:80:17:67:5a:5b:49:c5:5c:
e3:eb:38:4e:4c:ce:22:fb:e5:0d:58:fc:76:53:61:
d5:d2:cf:df:02:39:28:3c:39:66:45:a6:52:db:5e:
76:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:1A:24:99:38:4F:6F:69:61:E5:5A:CE:29:02:A0:4D:FF:2C:CC:B2
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/DxokmThPb2lh5VrOKQKgTf8szLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.129.0/24
5.175.138.0/24
77.90.54.0/24
87.239.131.0/24
94.103.163.0/24
94.249.215.0/24
95.215.32.0/24
95.215.34.0/24
185.13.156.0/24
217.69.166.0/24
Signature Algorithm: sha256WithRSAEncryption
eb:f0:d4:9c:b7:fd:9f:09:6e:c2:26:d7:29:9f:1b:f1:0e:bc:
19:9f:8c:1e:70:b2:05:a6:f5:f5:50:6b:66:a6:47:75:e8:5e:
48:a1:6e:7b:0a:78:33:a1:3e:b3:32:f1:8c:5c:2a:b2:8e:20:
8c:8f:50:67:47:cc:49:01:fe:fd:da:bc:d3:38:24:6c:f7:78:
f1:68:0c:91:07:b8:2d:dc:98:10:c4:83:da:73:92:f6:ca:77:
ec:e6:e2:1e:ac:d0:22:25:47:df:8d:81:6e:35:60:9c:ff:a9:
72:11:d6:ba:99:c8:f7:fe:39:36:a7:4a:4e:d1:b0:b0:7b:9a:
9c:19:0e:11:f1:ba:4f:9f:91:c9:79:20:83:07:a4:86:8a:1e:
aa:39:71:0f:14:76:0b:95:c4:5c:fb:4e:66:ed:c2:3f:a9:47:
84:20:3d:3f:44:4f:2b:ff:6d:9c:a0:9a:27:fe:8d:50:7e:57:
c4:71:f5:3b:7c:4d:d9:a7:64:9a:e1:1f:55:58:ff:23:ac:28:
4c:d9:30:52:1c:84:a7:c1:1c:31:e3:59:f8:bd:88:e7:6c:c9:
8b:62:98:e1:96:68:f0:68:30:18:69:06:cf:6e:d6:7b:e9:a1:
f0:d6:e4:3d:b4:29:ae:bf:97:86:e1:8c:d7:70:ab:d5:fa:f3:
64:2b:b5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:12:55 2025 by rpki-client