Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/QRjORcucK6e-5m2xG3bUPIiRA3M.roa
File: QRjORcucK6e-5m2xG3bUPIiRA3M.roa (raw, json)
Hash identifier: c9Z3+aIqonzYwsY9cYtZkmfQTWIpbyy7EtFVMeMM+ic=
Subject key identifier: 41:18:CE:45:CB:9C:2B:A7:BE:E6:6D:B1:1B:76:D4:3C:88:91:03:73
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194C369EDE7DBC2DDD19A4A83BC14A0977A
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/QRjORcucK6e-5m2xG3bUPIiRA3M.roa
Signing time: Sat 01 Feb 2025 21:28:06 +0000
ROA not before: Sat 01 Feb 2025 21:28:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58212
IP address blocks: 5.83.150.0/24 maxlen: 24
5.175.140.0/24 maxlen: 24
5.231.79.0/24 maxlen: 24
5.231.82.0/24 maxlen: 24
77.90.7.0/24 maxlen: 24
77.90.39.0/24 maxlen: 24
77.90.41.0/24 maxlen: 24
77.90.52.0/24 maxlen: 24
77.90.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:69:ed:e7:db:c2:dd:d1:9a:4a:83:bc:14:a0:97:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 1 21:28:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4118ce45cb9c2ba7bee66db11b76d43c88910373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:35:72:9d:e9:79:f0:c4:fd:2a:76:af:c1:97:
e9:59:f9:36:37:76:ab:ea:a3:e0:dc:6b:d1:69:2f:
7f:5b:80:c2:bf:e9:cb:0e:1b:57:94:7b:d6:72:36:
05:88:12:36:f7:14:be:93:4c:4d:89:a0:f4:fd:25:
a1:08:1f:7f:88:c7:a9:bb:b4:fe:df:30:6c:d4:a9:
03:fa:3c:d8:99:a1:11:da:51:c3:14:52:1a:c7:72:
a9:04:8e:f9:59:08:62:77:ea:81:21:63:07:82:c5:
3b:d7:20:88:a2:ea:da:f9:77:8d:5f:28:7d:55:c1:
32:21:75:50:21:8e:3f:2c:39:1b:c2:bd:66:ce:ab:
cf:fe:84:42:85:8d:c5:46:db:97:c6:5b:18:a1:5a:
77:93:21:b1:da:bc:7f:f0:4a:66:ea:5a:f5:80:a3:
4a:0e:6c:d4:06:3b:50:7a:ad:0a:37:b7:fd:e5:2c:
39:1c:da:64:82:b7:c1:80:99:98:0a:ea:bd:c5:25:
5d:b4:53:5b:ee:43:6e:ef:79:a6:cc:78:0d:ef:b7:
cf:ea:e6:20:45:91:07:57:09:5e:19:f4:2b:39:90:
e7:a3:80:de:61:8e:68:36:be:c3:05:e2:48:8b:fa:
5c:42:a2:2e:5f:19:0e:8f:b2:07:fd:6d:a8:79:c3:
b8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:18:CE:45:CB:9C:2B:A7:BE:E6:6D:B1:1B:76:D4:3C:88:91:03:73
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/QRjORcucK6e-5m2xG3bUPIiRA3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.150.0/24
5.175.140.0/24
5.231.79.0/24
5.231.82.0/24
77.90.7.0/24
77.90.39.0/24
77.90.41.0/24
77.90.52.0/24
77.90.58.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:4e:7a:fc:8c:5c:fa:10:92:92:40:b0:2c:09:f9:db:49:69:
78:58:05:af:8e:d9:87:fd:59:9c:76:06:73:f5:9a:52:ae:09:
aa:cb:aa:2a:dd:d4:7a:07:2e:da:5d:de:40:2f:56:2b:34:af:
53:dd:dc:02:1c:04:0b:9c:0e:12:86:16:86:bf:93:52:2d:15:
8f:68:b8:1f:72:37:fd:f2:07:76:6d:39:70:a4:d2:19:11:b1:
b1:aa:f3:9c:ee:1d:6f:56:27:c2:4f:8e:59:26:6c:7f:2c:2d:
eb:08:36:e2:b6:12:aa:2c:c0:69:52:d7:ab:b3:21:4d:55:c8:
7a:12:0b:fc:db:ac:f3:98:d0:1a:19:46:3d:16:af:35:a1:0e:
51:36:80:35:39:e7:31:39:9f:ed:14:b8:fc:25:e5:11:ce:64:
bc:84:03:62:55:4f:81:37:ff:75:c8:61:09:b1:4a:8b:ff:7f:
1c:b9:64:a7:79:8b:99:11:ed:6c:95:b7:b7:0e:93:c8:c5:a1:
bf:5a:03:5c:6d:73:7f:26:37:c1:74:a0:63:5b:d2:b1:f8:8a:
6a:0e:9e:00:82:2d:f1:0a:87:70:43:47:9d:11:ea:c8:56:89:
43:12:79:5a:e8:42:cb:40:15:e7:3b:7b:a4:3a:d7:f2:4c:88:
bf:3e:51:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:03:14 2025 by rpki-client