Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Uq2td65560Xd5YBjD7SPNiN7Wx4.roa
File: Uq2td65560Xd5YBjD7SPNiN7Wx4.roa (raw, json)
Hash identifier: risLEgmfFJqD+9Vs/e7555x+hnii0phavGeuIIa0CK0=
Subject key identifier: 52:AD:AD:77:AE:79:EB:45:DD:E5:80:63:0F:B4:8F:36:23:7B:5B:1E
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194275DFFE42D32499EC5C4C21700A24C35
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Uq2td65560Xd5YBjD7SPNiN7Wx4.roa
Signing time: Thu 02 Jan 2025 14:14:19 +0000
ROA not before: Thu 02 Jan 2025 14:14:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44103
IP address blocks: 5.83.149.0/24 maxlen: 24
77.90.23.0/24 maxlen: 24
77.90.38.0/24 maxlen: 24
178.18.152.0/22 maxlen: 32
178.18.152.0/24 maxlen: 32
178.18.153.0/24 maxlen: 32
178.18.154.0/24 maxlen: 32
178.18.155.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:5d:ff:e4:2d:32:49:9e:c5:c4:c2:17:00:a2:4c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 2 14:14:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52adad77ae79eb45dde580630fb48f36237b5b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:21:e2:b8:4d:ef:83:9e:6a:bd:dd:7b:c7:18:
15:72:e6:4e:00:a6:be:4e:11:ea:36:1e:40:51:8f:
dd:df:f1:b4:2b:75:e2:2a:b3:61:00:7e:18:46:58:
fa:d6:c6:4d:f5:a4:da:87:a7:97:c0:f1:88:4b:e0:
16:35:27:ec:9e:54:d5:a5:fe:78:a1:8b:1a:1d:68:
64:54:ca:83:dc:aa:aa:e4:40:40:c1:26:8d:39:f9:
c8:16:15:53:c8:16:c7:71:cc:d1:75:41:33:0b:cf:
db:19:f8:e9:86:f3:5f:36:83:c2:17:34:dd:20:78:
38:a4:37:9f:c9:05:95:0b:1d:7f:da:10:72:b4:f8:
cc:b3:dc:22:64:bb:16:a4:7f:92:d6:2d:2e:93:22:
9f:d7:a7:b3:71:4e:6f:e4:77:11:95:60:9c:0c:57:
a4:0b:da:35:d4:56:1a:f0:ff:38:11:08:c6:12:fb:
08:d9:de:72:0d:6b:c8:58:35:29:6e:9d:44:d1:3e:
0e:5b:c0:93:30:cc:c2:d8:4d:23:e8:f2:70:56:56:
ce:ed:0a:09:8c:24:1a:48:4b:75:7d:13:99:84:1a:
4a:d4:db:e0:d4:85:3f:30:df:e9:4a:b1:69:29:4b:
bf:50:79:a5:7a:97:e9:4f:bd:b0:de:e8:c0:cf:e4:
40:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:AD:AD:77:AE:79:EB:45:DD:E5:80:63:0F:B4:8F:36:23:7B:5B:1E
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Uq2td65560Xd5YBjD7SPNiN7Wx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.149.0/24
77.90.23.0/24
77.90.38.0/24
178.18.152.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:8c:53:8b:d1:79:b8:e8:d1:ff:2f:e2:c2:78:d7:f6:56:9e:
4f:d0:0a:c4:e4:ea:55:a3:84:0f:63:2e:02:28:c5:09:af:91:
8b:af:05:34:e7:b6:85:99:5f:4f:b2:46:05:be:2d:ad:64:15:
d0:16:5d:e6:a9:a0:c3:94:62:03:ba:3b:2f:ad:5a:b7:fc:c0:
73:e3:cb:44:80:da:01:97:61:f4:c1:aa:b5:be:20:cf:c7:18:
28:cf:26:3e:d0:30:9c:5c:bc:9a:b8:34:39:2e:ed:f8:55:71:
64:13:cf:70:c7:66:09:43:b8:c0:34:1f:f5:9c:11:54:bf:03:
9e:35:3a:f5:eb:ff:72:12:c5:de:5f:9e:e8:23:6a:55:5b:38:
45:32:54:e6:c6:34:9c:2c:e8:d1:22:eb:e8:d2:8e:3f:39:a6:
ee:ce:da:98:75:ba:79:a4:0c:53:a9:13:1a:5e:ca:14:12:18:
c2:c8:65:97:84:24:67:de:0d:fa:d4:57:be:3e:4f:27:50:48:
5b:4b:b8:69:ec:f4:dc:7d:58:b2:6a:ae:95:e5:d4:a4:9f:85:
98:d9:c4:37:4f:93:f3:6b:54:f1:b9:c1:aa:5a:33:3f:40:16:
1b:b8:a2:d8:bf:35:fe:8f:76:ed:a8:c7:e4:1a:8c:36:cc:94:
6d:88:bd:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:18:09 2025 by rpki-client