Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PkPhf30mzbWzbli6iD0zVpTknBI.roa
File: PkPhf30mzbWzbli6iD0zVpTknBI.roa (raw, json)
Hash identifier: W5kY2uJfaomrs8YvigA0cylHqKFz4bUDHoraJvnbRTg=
Subject key identifier: 3E:43:E1:7F:7D:26:CD:B5:B3:6E:58:BA:88:3D:33:56:94:E4:9C:12
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01958F474F0F8DE6599DE924786527B910AC
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PkPhf30mzbWzbli6iD0zVpTknBI.roa
Signing time: Thu 13 Mar 2025 11:32:50 +0000
ROA not before: Thu 13 Mar 2025 11:32:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44486
IP address blocks: 5.83.145.0/24 maxlen: 24
5.231.232.0/24 maxlen: 24
5.231.233.0/24 maxlen: 24
77.90.3.0/24 maxlen: 24
77.90.28.0/24 maxlen: 24
89.106.92.0/24 maxlen: 24
89.106.93.0/24 maxlen: 24
89.106.94.0/24 maxlen: 24
89.106.95.0/24 maxlen: 24
89.144.30.0/24 maxlen: 24
89.144.31.0/24 maxlen: 24
89.144.33.0/24 maxlen: 24
89.144.42.0/24 maxlen: 24
89.144.43.0/24 maxlen: 24
89.144.44.0/24 maxlen: 24
89.144.46.0/24 maxlen: 24
89.144.47.0/24 maxlen: 24
89.144.48.0/24 maxlen: 24
89.144.49.0/24 maxlen: 24
89.144.50.0/24 maxlen: 24
89.144.51.0/24 maxlen: 24
89.144.52.0/24 maxlen: 24
89.144.53.0/24 maxlen: 24
89.144.54.0/24 maxlen: 24
89.144.55.0/24 maxlen: 24
89.144.58.0/24 maxlen: 24
89.144.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:47:4f:0f:8d:e6:59:9d:e9:24:78:65:27:b9:10:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 13 11:32:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e43e17f7d26cdb5b36e58ba883d335694e49c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5c:5a:8d:9e:13:c4:25:ab:58:41:64:27:54:
58:2d:6b:d6:dc:9d:fc:1c:b4:45:38:bf:7e:53:e6:
40:de:12:d4:fc:10:3d:67:8c:a3:b2:50:1c:58:49:
2b:d4:c5:4a:67:87:62:64:23:e0:48:49:d1:02:4f:
5e:8d:83:61:09:b6:6d:ad:4d:9e:a2:95:b3:72:52:
60:10:eb:9b:d5:ba:d8:b8:04:63:bc:f1:a1:cd:db:
85:cd:9f:39:8f:95:bf:f6:4a:f4:f2:25:d3:56:48:
a7:32:8b:7f:b3:06:84:13:c6:b7:46:2c:68:a1:d3:
4c:5a:6d:02:68:1c:e6:be:c2:19:02:aa:f2:69:b6:
3b:b7:5a:19:67:c8:55:60:80:9f:82:6f:f3:15:82:
07:4c:b9:7e:a0:a7:bd:87:3b:15:2e:92:23:d1:f5:
31:68:d7:f4:29:5a:0d:9c:f9:cf:f1:6c:d1:bb:af:
d4:69:5b:63:2b:32:d5:d9:41:f0:da:d7:42:0b:cd:
97:60:1c:9a:ef:29:b2:dd:3b:96:3c:dc:1c:bd:d7:
88:a8:33:73:f5:7f:61:a8:3b:93:4f:9f:90:28:a8:
66:6f:9d:6a:c8:75:34:9e:8d:ec:e8:fe:bd:6f:ac:
5f:43:f8:b3:60:ca:3a:9e:37:50:c3:d4:76:8f:7a:
8d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:43:E1:7F:7D:26:CD:B5:B3:6E:58:BA:88:3D:33:56:94:E4:9C:12
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PkPhf30mzbWzbli6iD0zVpTknBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.145.0/24
5.231.232.0/23
77.90.3.0/24
77.90.28.0/24
89.106.92.0/22
89.144.30.0/23
89.144.33.0/24
89.144.42.0-89.144.44.255
89.144.46.0-89.144.55.255
89.144.58.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:24:3c:49:c8:97:d8:cb:02:dc:f4:73:93:2f:97:0c:14:7a:
2d:bc:82:26:3f:75:86:18:ef:b7:46:a0:e0:00:aa:28:2f:6c:
e8:16:38:57:6b:87:27:4d:bc:c3:93:df:f7:0e:04:55:e0:1c:
a4:31:eb:1c:00:58:44:79:c5:f3:69:35:af:89:18:01:b0:60:
85:6b:78:5e:91:1e:98:7c:f1:78:33:ee:0a:f8:ed:2a:0a:88:
9b:9a:75:4f:51:42:e3:f3:0a:5b:56:31:55:7a:0c:a7:29:c1:
5a:4a:a8:2d:98:8f:13:d8:63:be:01:ae:7b:a4:28:04:35:70:
fa:2e:47:e5:4b:f9:e2:91:f1:cd:7b:5f:03:ee:bb:92:68:2d:
a0:74:42:bd:db:e9:7e:4b:c7:ce:6b:eb:49:89:7a:e2:6f:3b:
61:3f:d7:95:c8:a4:b6:93:f9:ba:1f:ae:0e:b6:c7:8d:bf:eb:
a3:4d:35:05:e8:d7:5d:51:ac:97:f8:fa:dd:9b:dc:6e:24:57:
b2:63:d9:79:2c:54:e3:19:53:2b:62:62:14:c7:31:ce:ad:d0:
99:3c:05:61:46:b7:65:5d:d9:6f:35:0f:ae:5f:6e:f8:37:bf:
6f:59:96:b7:7d:3d:30:3f:1c:c4:a1:a3:67:46:b4:0f:04:df:
46:85:0f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:32:08 2025 by rpki-client