Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/EPuBUNncqcxKk6Pl1fY86_tT5og.roa
File: EPuBUNncqcxKk6Pl1fY86_tT5og.roa (raw, json)
Hash identifier: HXkRH/4U6ajmgJ/gjF+Py3ttMHj9Rn3f41+5V3dAe6w=
Subject key identifier: 10:FB:81:50:D9:DC:A9:CC:4A:93:A3:E5:D5:F6:3C:EB:FB:53:E6:88
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019511DCDF8FC0B5B918858FCDB4304DBC36
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/EPuBUNncqcxKk6Pl1fY86_tT5og.roa
Signing time: Mon 17 Feb 2025 03:04:02 +0000
ROA not before: Mon 17 Feb 2025 03:04:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 5.83.153.0/24 maxlen: 24
77.90.33.0/24 maxlen: 24
77.90.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:dc:df:8f:c0:b5:b9:18:85:8f:cd:b4:30:4d:bc:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 17 03:04:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10fb8150d9dca9cc4a93a3e5d5f63cebfb53e688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1f:1a:9a:e4:75:9d:af:5a:5a:15:09:b3:34:
f3:6a:0e:81:36:d3:c9:09:d9:4d:8a:a0:48:7e:d3:
30:0f:21:7e:f0:9f:24:e5:7d:02:7e:ae:97:56:6b:
d4:3b:af:69:3f:ff:9e:c5:14:61:95:e7:b1:42:58:
cc:89:35:55:f8:87:c0:d1:81:72:a2:01:f3:3b:fc:
e6:50:3d:c6:15:63:19:1b:e0:df:5c:a0:71:1a:bc:
38:54:51:e1:07:3a:7b:9d:89:bb:13:ca:51:90:44:
ee:1e:e6:61:ac:1d:75:b4:ab:73:d2:c2:05:00:9f:
20:54:b2:3c:65:90:1e:c4:cb:b0:48:e9:b3:37:c3:
d5:0f:97:a9:b6:7b:19:c3:fb:46:58:55:2d:ab:ec:
46:71:f4:7c:19:e9:c3:1c:56:0a:11:ac:08:d3:15:
12:fa:eb:ff:f3:f4:33:07:9b:70:74:60:79:32:7d:
8e:81:bc:84:c9:1c:4e:90:d6:d4:29:d5:3b:73:65:
9a:30:2c:ab:c8:d6:91:bd:df:a3:8f:40:c7:28:ef:
65:70:a6:99:fe:2b:af:13:c5:3f:af:c6:07:cd:b8:
89:f7:a2:27:49:ac:01:ff:70:39:92:82:d6:27:52:
04:a2:a2:11:33:01:90:d4:b1:97:c0:bf:00:d4:9e:
a2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:FB:81:50:D9:DC:A9:CC:4A:93:A3:E5:D5:F6:3C:EB:FB:53:E6:88
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/EPuBUNncqcxKk6Pl1fY86_tT5og.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.153.0/24
77.90.33.0/24
77.90.49.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:11:a2:b3:d1:ef:3c:fe:1d:96:3e:8e:8b:57:9e:4c:2b:a8:
40:12:48:7b:9e:4a:79:95:c8:7a:dd:ba:de:85:f0:fa:da:fc:
ce:10:4b:fa:af:ad:f7:02:a5:94:cd:b1:4e:b2:fd:d8:96:72:
f8:7f:68:6d:8c:9f:5c:cd:ea:d8:d7:4f:76:6f:27:ca:d8:d4:
7d:88:3e:58:a0:81:3d:61:e1:22:24:89:54:ae:88:78:2a:a2:
b4:be:0c:ca:08:a6:5d:51:47:76:f1:38:0c:0f:80:6d:9b:24:
5c:fd:87:69:02:d8:a2:f7:58:0b:75:d1:d5:ab:78:18:05:a8:
13:8c:6c:2f:85:14:28:17:ee:6c:ee:0f:98:e7:73:2d:2f:07:
90:2e:76:cb:03:c7:66:86:ad:40:40:18:d2:9c:fb:cb:64:cc:
38:ee:67:d2:00:63:9c:c1:9e:c0:87:a1:47:7c:da:07:3c:31:
0e:3a:83:66:0e:53:e5:e3:d9:40:9f:aa:7b:af:b6:9a:83:84:
79:f6:2a:3e:70:1c:10:21:70:1a:3d:cd:a8:96:57:a5:d3:e9:
36:73:c7:22:71:10:52:65:9b:8d:b4:23:c7:3c:86:48:b2:8b:
66:1e:c2:dc:b6:53:31:38:46:6f:9a:a3:a7:a1:d1:b6:2e:68:
d1:49:c5:10
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZUR3N+PwLW5GIWPzbQwTbw2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwMjE3MDMwNDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMGZiODE1MGQ5ZGNhOWNjNGE5M2EzZTVkNWY2M2NlYmZiNTNlNjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4B8amuR1na9aWhUJszTzag6BNtPJ
CdlNiqBIftMwDyF+8J8k5X0Cfq6XVmvUO69pP/+exRRhleexQljMiTVV+IfA0YFy
ogHzO/zmUD3GFWMZG+DfXKBxGrw4VFHhBzp7nYm7E8pRkETuHuZhrB11tKtz0sIF
AJ8gVLI8ZZAexMuwSOmzN8PVD5eptnsZw/tGWFUtq+xGcfR8GenDHFYKEawI0xUS
+uv/8/QzB5twdGB5Mn2OgbyEyRxOkNbUKdU7c2WaMCyryNaRvd+jj0DHKO9lcKaZ
/iuvE8U/r8YHzbiJ96InSawB/3A5koLWJ1IEoqIRMwGQ1LGXwL8A1J6iZwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFBD7gVDZ3KnMSpOj5dX2POv7U+aIMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvRVB1QlVObmNxY3hLazZQbDFmWTg2X3RUNW9nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABVOZAwQA
TVohAwQATVoxMA0GCSqGSIb3DQEBCwUAA4IBAQCdEaKz0e88/h2WPo6LV55MK6hA
Ekh7nkp5lch63brehfD62vzOEEv6r633AqWUzbFOsv3YlnL4f2htjJ9czerY1092
byfK2NR9iD5YoIE9YeEiJIlUroh4KqK0vgzKCKZdUUd28TgMD4BtmyRc/YdpAtii
91gLddHVq3gYBagTjGwvhRQoF+5s7g+Y53MtLweQLnbLA8dmhq1AQBjSnPvLZMw4
7mfSAGOcwZ7Ah6FHfNoHPDEOOoNmDlPl49lAn6p7r7aag4R59io+cBwQIXAaPc2o
llel0+k2c8cicRBSZZuNtCPHPIZIsotmHsLctlMxOEZvmqOnodG2LmjRScUQ
-----END CERTIFICATE-----
Generated at Sat Apr 12 03:18:07 2025 by rpki-client