Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/MX4RdHlveR3FnHlkRob2yMscKro.roa
File: MX4RdHlveR3FnHlkRob2yMscKro.roa (raw, json)
Hash identifier: 8zSEQtgEdr+H4Z30OA/4xk6YbHesPi1ODGFTXsJQgdY=
Subject key identifier: 31:7E:11:74:79:6F:79:1D:C5:9C:79:64:46:86:F6:C8:CB:1C:2A:BA
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019560ED9E871F5E6FA1DAA5E7FB68AC641C
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/MX4RdHlveR3FnHlkRob2yMscKro.roa
Signing time: Tue 04 Mar 2025 11:32:20 +0000
ROA not before: Tue 04 Mar 2025 11:32:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44103
IP address blocks: 5.83.149.0/24 maxlen: 24
77.90.23.0/24 maxlen: 24
77.90.38.0/24 maxlen: 24
89.144.40.0/24 maxlen: 24
178.18.152.0/22 maxlen: 32
178.18.152.0/24 maxlen: 32
178.18.153.0/24 maxlen: 32
178.18.154.0/24 maxlen: 32
178.18.155.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:60:ed:9e:87:1f:5e:6f:a1:da:a5:e7:fb:68:ac:64:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 4 11:32:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=317e1174796f791dc59c79644686f6c8cb1c2aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b8:64:e5:1c:71:96:a1:8e:2f:f1:b2:33:1d:
38:9a:3a:ea:42:ec:1e:66:04:79:bb:d7:49:66:42:
42:37:13:cd:e4:b1:26:a5:36:2b:00:01:9e:0e:05:
9d:63:42:f6:37:2a:cd:90:5c:05:50:a6:16:ec:9e:
4c:2e:2e:da:b6:ae:87:b1:30:38:1f:e5:48:37:2b:
db:24:2c:4e:9d:22:29:c5:01:99:60:4d:17:73:93:
17:5d:cb:34:e1:01:cd:70:95:d4:48:9a:4d:9b:4d:
a3:02:8a:a4:de:b0:3e:bd:c9:9d:f4:4f:59:a2:35:
3d:5d:c9:64:89:eb:6d:a5:0e:88:71:22:be:fa:8d:
37:83:90:7e:21:fb:75:b8:6b:c4:49:81:db:62:4e:
92:08:64:36:98:d5:2e:1f:16:7b:71:b4:b6:40:7d:
59:63:9e:0c:4e:24:bc:e3:c6:02:3e:d3:11:dc:fb:
52:49:b1:ea:d7:78:1e:96:68:49:94:25:5a:9c:b7:
37:31:e4:52:dc:8c:81:3d:f3:87:de:29:5f:67:83:
ba:14:ee:91:8e:46:42:d8:aa:6a:2e:cf:63:0c:74:
03:6b:8b:3e:c8:e0:b3:97:7d:17:24:9a:39:89:9a:
79:71:eb:ac:ec:10:5a:3f:b5:29:c2:51:3e:f3:c4:
35:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:7E:11:74:79:6F:79:1D:C5:9C:79:64:46:86:F6:C8:CB:1C:2A:BA
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/MX4RdHlveR3FnHlkRob2yMscKro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.149.0/24
77.90.23.0/24
77.90.38.0/24
89.144.40.0/24
178.18.152.0/22
Signature Algorithm: sha256WithRSAEncryption
90:2e:79:0e:16:14:de:82:c2:7d:49:a9:0c:45:e7:78:86:81:
7f:80:1a:30:a1:68:20:26:1c:1b:8b:5d:23:50:c5:63:a1:9b:
9f:2b:05:43:8c:e0:3c:7f:f9:b7:4e:e5:2b:f7:73:6f:f0:b7:
ed:c1:33:96:fd:93:b5:77:14:d1:7e:cb:87:de:2b:a2:88:e4:
90:8e:9a:7b:e2:c6:d4:80:41:be:c8:f8:29:97:2c:49:70:21:
f2:60:92:03:17:d9:90:17:3c:fa:76:1b:a8:3b:8a:41:09:67:
9a:f2:fc:64:5a:e3:6d:4b:18:7e:d8:5d:0c:c2:11:1a:9a:bd:
b6:8f:93:d1:8c:51:e1:a8:3a:43:dc:4d:2c:e9:87:4b:af:fa:
ec:0a:4a:8a:55:5e:7e:ec:eb:a1:16:98:13:c5:38:52:f0:0d:
5b:97:9a:13:06:49:fa:26:9d:96:23:e8:5f:f6:b3:5a:fe:54:
4e:df:c6:e2:ff:24:73:10:78:43:9d:73:d3:0e:82:6b:ba:c6:
e2:22:52:79:92:6a:cd:2d:a8:a4:db:50:0d:a8:c9:84:fa:cd:
75:d0:3f:7b:7a:23:20:f0:49:df:4c:3e:44:30:e3:92:41:b3:
fa:35:dd:a0:75:2e:49:86:0d:cc:6f:10:5b:ff:4f:dd:9d:4e:
16:7c:1e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:34:24 2025 by rpki-client