Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/EJTX23mhj4u-KloP80XUgud8QOQ.roa
File: EJTX23mhj4u-KloP80XUgud8QOQ.roa (raw, json)
Hash identifier: ylFkiAMhKHotYE7WPlPuQ1d1wrJu+YPUZVuDApKVI/s=
Subject key identifier: 10:94:D7:DB:79:A1:8F:8B:BE:2A:5A:0F:F3:45:D4:82:E7:7C:40:E4
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019387C0F55AF6A5D574CF1D7E1DBE9168AD
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/EJTX23mhj4u-KloP80XUgud8QOQ.roa
Signing time: Mon 02 Dec 2024 14:23:10 +0000
ROA not before: Mon 02 Dec 2024 14:23:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48314
IP address blocks: 5.175.233.0/24 maxlen: 24
77.90.0.0/24 maxlen: 24
77.90.2.0/24 maxlen: 24
77.90.8.0/24 maxlen: 24
77.90.13.0/24 maxlen: 24
77.90.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:87:c0:f5:5a:f6:a5:d5:74:cf:1d:7e:1d:be:91:68:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Dec 2 14:23:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1094d7db79a18f8bbe2a5a0ff345d482e77c40e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b4:1b:09:7c:f2:40:15:b3:9a:62:16:f1:3a:
d4:d9:35:ab:29:ee:f4:0a:76:a0:fe:a1:b8:67:55:
44:53:07:44:80:9e:a6:ae:73:8c:c7:21:f4:a4:23:
b6:b0:49:84:4e:72:4a:5e:c4:e8:f5:8a:b9:d6:56:
f6:42:20:1d:d3:28:07:6e:2d:b3:ca:f8:1b:35:50:
17:28:34:39:04:02:8f:80:e9:b5:6b:04:e1:46:af:
cb:ab:6c:7e:d2:ac:2a:94:f8:12:77:d3:ad:04:11:
fd:94:b5:1b:56:e7:e3:21:18:52:b7:53:52:85:26:
76:3b:c9:82:da:45:7c:26:11:c6:7c:d8:68:06:ec:
48:25:93:31:70:5a:d5:dd:43:58:6c:10:2b:46:b9:
2a:73:f6:2e:fb:77:20:83:f0:d4:2f:ba:d2:d5:d4:
be:c8:1a:46:19:02:30:a2:93:0b:1b:90:d0:6d:c3:
5a:1c:87:44:58:64:3c:98:9c:05:35:ab:2c:b1:8d:
0c:0d:ab:95:f0:06:49:2b:26:86:29:e4:31:2a:61:
b3:22:e4:fb:19:c8:8b:27:9f:b6:ff:3e:19:38:9d:
77:ac:41:7f:cd:f4:03:91:97:b8:44:3c:b1:ce:6d:
9f:af:e3:20:79:c5:02:9d:ac:59:55:33:6a:88:7f:
2e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:94:D7:DB:79:A1:8F:8B:BE:2A:5A:0F:F3:45:D4:82:E7:7C:40:E4
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/EJTX23mhj4u-KloP80XUgud8QOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.233.0/24
77.90.0.0/24
77.90.2.0/24
77.90.8.0/24
77.90.13.0/24
77.90.51.0/24
Signature Algorithm: sha256WithRSAEncryption
46:d8:94:b1:28:9b:ea:f7:2a:b3:d0:02:be:78:6d:45:ea:2c:
36:23:38:a3:4d:ba:22:a5:76:a7:89:5f:89:6d:1c:9e:e9:11:
00:73:12:6d:6a:e3:f5:18:15:3f:73:17:aa:ca:55:b0:6e:79:
28:eb:53:96:ce:67:e0:45:64:54:3c:ed:a5:c2:96:17:3e:d1:
80:e4:72:65:98:97:04:91:8d:a2:f7:fb:88:4e:2f:ee:66:8f:
ee:df:b8:05:c0:a2:db:da:8f:07:6b:39:02:6a:69:48:62:26:
36:a3:9d:5e:35:cd:eb:43:df:bc:1c:8f:78:37:16:1a:3b:5f:
26:d0:60:60:82:84:83:e6:38:a4:b3:2a:3f:0e:18:32:f4:4d:
1a:67:4a:bc:f2:b9:f4:0e:3c:47:9c:4c:36:a2:9b:bd:93:c4:
a3:78:68:d0:44:02:dc:45:7e:93:e4:d8:c3:82:3f:58:00:39:
d0:b1:58:90:1c:74:51:f4:bc:0d:83:ee:4f:52:83:c1:6d:b9:
38:8f:62:c7:5a:d2:8a:ad:60:d4:9c:0b:7f:da:c3:80:31:33:
ce:32:cf:92:23:04:7d:e0:b1:3a:70:a2:a0:f0:a5:11:42:bf:
df:9a:08:28:ab:3a:e7:d7:28:7b:1e:83:c8:61:04:97:6e:11:
b9:81:b4:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:23:02 2025 by rpki-client