Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/OaBxmMHlxoHGZZWsKsrbbeMSay0.roa
File: OaBxmMHlxoHGZZWsKsrbbeMSay0.roa (raw, json)
Hash identifier: MSvb2UxJCz2myv1TfutSi3Kb3Zk0dR3areyB/GTaVk0=
Subject key identifier: 39:A0:71:98:C1:E5:C6:81:C6:65:95:AC:2A:CA:DB:6D:E3:12:6B:2D
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194D23CC9879866EE3F78EB15404BCC1660
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/OaBxmMHlxoHGZZWsKsrbbeMSay0.roa
Signing time: Tue 04 Feb 2025 18:33:06 +0000
ROA not before: Tue 04 Feb 2025 18:33:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44486
IP address blocks: 5.231.232.0/24 maxlen: 24
77.90.3.0/24 maxlen: 24
77.90.28.0/24 maxlen: 24
89.106.92.0/24 maxlen: 24
89.106.93.0/24 maxlen: 24
89.106.94.0/24 maxlen: 24
89.106.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d2:3c:c9:87:98:66:ee:3f:78:eb:15:40:4b:cc:16:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 4 18:33:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39a07198c1e5c681c66595ac2acadb6de3126b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:54:3a:dc:49:ea:7c:e5:df:fe:94:a2:2f:3a:
cf:ca:cf:6e:21:41:93:c0:4e:93:dd:03:43:7d:13:
f4:3e:88:2f:70:6d:dd:70:79:11:1b:36:10:46:ad:
51:7d:96:8b:ba:dd:97:bd:52:5b:68:08:79:84:1f:
af:11:1d:6e:da:a6:41:cc:5b:73:69:c4:f9:f2:5a:
77:6e:3e:ad:d1:69:35:46:df:cc:11:0f:97:f0:3f:
f6:5c:0b:ba:08:44:95:c4:3b:ca:4a:b7:07:31:41:
05:7e:96:6c:d7:60:a5:81:fe:77:c9:11:9e:c4:05:
e7:c5:bf:80:d6:a8:f6:de:f3:05:74:3f:c6:61:30:
b3:79:a1:ba:6c:03:07:bd:8c:70:f5:fb:81:fc:fb:
bd:c7:e7:2f:c8:d2:78:8f:04:d8:8c:4f:38:d7:8a:
a4:d7:ed:2d:30:0e:4d:a0:fa:1b:56:c5:54:47:7e:
5f:c5:10:0e:9c:88:b1:47:20:7d:1e:92:e1:df:f6:
c0:db:76:6a:ac:48:c9:10:91:ab:89:b0:50:7d:90:
fb:83:77:8d:26:b2:eb:21:96:c1:2b:b1:ab:35:f1:
de:9e:d5:a6:25:b8:bb:92:2b:50:23:d0:3b:96:db:
44:bc:8b:6f:79:02:7c:52:63:d7:12:7f:c9:26:dd:
3c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A0:71:98:C1:E5:C6:81:C6:65:95:AC:2A:CA:DB:6D:E3:12:6B:2D
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/OaBxmMHlxoHGZZWsKsrbbeMSay0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.232.0/24
77.90.3.0/24
77.90.28.0/24
89.106.92.0/22
Signature Algorithm: sha256WithRSAEncryption
76:97:e2:23:eb:a6:fe:f5:2d:4d:74:13:4b:f4:46:3c:75:86:
f7:67:e1:65:8a:95:fd:f6:df:1b:b3:97:a9:07:45:f1:9f:06:
a9:90:82:72:ea:7d:e0:71:c2:a3:f0:77:51:a3:f5:84:04:e8:
10:b3:9c:b5:26:df:03:ca:55:61:f2:c1:39:64:e2:3d:dc:2b:
26:ec:8f:90:20:f1:ea:43:4e:b5:1c:bf:5c:da:d4:6b:38:97:
97:2f:64:ce:49:eb:23:72:60:e5:87:16:ce:22:40:85:d8:8b:
1e:d7:4a:1b:a8:e9:7d:6c:6b:50:78:19:3c:61:5b:09:88:87:
06:3b:27:37:5f:7f:c1:8f:b6:ef:73:16:cb:15:0c:a7:e1:07:
bd:75:41:55:f0:4e:a0:17:de:ff:b9:3b:bf:e4:cf:a9:4a:c7:
13:f8:54:97:d1:3c:ab:d2:12:16:5d:86:c6:0f:54:fe:61:f2:
c0:fd:d1:9b:19:52:eb:b5:ae:d2:89:fe:26:c3:c3:35:33:97:
e0:ff:cc:dd:b8:28:ab:bb:d0:85:f1:45:5a:79:64:4d:34:55:
75:c1:13:aa:b0:eb:53:aa:46:65:5b:ec:fb:d0:b1:75:14:88:
a3:ff:71:4e:91:36:90:d2:0c:be:7f:92:f2:58:bf:c2:e8:1b:
13:62:2b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:30:18 2025 by rpki-client