Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/XATJOwIU7937g25AowyVWxHyxBQ.roa
File: XATJOwIU7937g25AowyVWxHyxBQ.roa (raw, json)
Hash identifier: W4yXh+ZdRfK5bko5SiNC6lwR30ovtQ4d4AlOYNZdiDs=
Subject key identifier: 5C:04:C9:3B:02:14:EF:DD:FB:83:6E:40:A3:0C:95:5B:11:F2:C4:14
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194B999B8059D0EB2148608CF7CFDAE18CC
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/XATJOwIU7937g25AowyVWxHyxBQ.roa
Signing time: Thu 30 Jan 2025 23:44:06 +0000
ROA not before: Thu 30 Jan 2025 23:44:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58212
IP address blocks: 5.83.150.0/24 maxlen: 24
5.175.140.0/24 maxlen: 24
5.231.79.0/24 maxlen: 24
77.90.7.0/24 maxlen: 24
77.90.39.0/24 maxlen: 24
77.90.41.0/24 maxlen: 24
77.90.52.0/24 maxlen: 24
77.90.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b9:99:b8:05:9d:0e:b2:14:86:08:cf:7c:fd:ae:18:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 30 23:44:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c04c93b0214efddfb836e40a30c955b11f2c414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d8:e1:9b:07:2d:fd:26:93:be:55:22:29:d7:
f5:2c:73:ff:44:28:6c:3f:ae:fc:7b:43:60:de:7a:
bf:3a:7b:42:78:6f:64:6a:02:6c:46:8e:19:3e:2e:
89:43:2a:b9:1f:f8:24:b6:7b:51:4b:41:38:f6:c3:
45:0a:04:3b:a9:6f:75:54:90:75:e1:c3:15:f8:c9:
e6:4a:ab:e1:08:28:9c:b9:87:1a:66:ea:ca:e4:95:
e2:65:b9:2a:99:0e:0e:a3:0d:ea:d0:0f:f1:41:f2:
f7:7e:34:80:00:6f:69:1a:c4:0f:74:23:4b:8b:a4:
d3:2c:3e:ea:73:e5:f2:69:a1:48:f2:ce:6b:03:b1:
e0:50:7b:4d:1c:d4:a2:cb:a8:e9:a4:9e:7c:6b:d5:
46:ba:7d:65:fd:b4:66:1f:dd:76:ae:d5:00:26:fe:
a0:46:c1:9b:64:95:30:ad:98:a6:cc:09:b3:70:d9:
c3:e0:12:14:ff:6f:0c:d3:01:ac:a6:f6:9a:71:77:
67:0d:7e:e1:cd:05:d1:df:95:e4:63:31:27:81:2f:
d1:37:dc:9d:2b:dd:48:cb:bd:a8:6d:da:9b:aa:db:
26:c1:52:2b:23:84:d3:6c:84:48:17:ee:f6:fe:e2:
ea:6b:18:11:1f:b5:88:06:a4:90:ab:26:34:d8:82:
11:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:04:C9:3B:02:14:EF:DD:FB:83:6E:40:A3:0C:95:5B:11:F2:C4:14
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/XATJOwIU7937g25AowyVWxHyxBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.150.0/24
5.175.140.0/24
5.231.79.0/24
77.90.7.0/24
77.90.39.0/24
77.90.41.0/24
77.90.52.0/24
77.90.58.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:28:7a:91:5a:12:bb:74:11:41:ed:d0:6b:a8:d4:e0:76:6b:
62:d8:0f:de:93:37:b9:1a:bd:b8:e9:59:a4:8f:16:f1:28:ff:
fb:0e:c1:58:46:fb:89:f4:35:38:c0:47:8f:91:92:25:80:b3:
98:81:ed:0f:e0:0f:8b:db:c0:f9:f9:0d:4e:73:cc:48:96:68:
f7:83:7f:11:3f:f4:9d:07:68:df:67:00:56:9d:41:10:0a:23:
9e:36:c5:76:60:e3:54:8d:30:35:c4:f3:3c:5c:06:87:d9:aa:
c0:55:f0:6a:38:5c:a5:50:e3:c8:a0:68:58:11:dc:c7:25:b2:
a9:0e:05:68:4c:8d:73:fa:11:46:1e:26:8e:1b:22:97:e7:d6:
2f:fa:61:0a:28:54:87:0f:9b:16:1f:43:64:93:39:1f:54:8e:
0d:ab:18:2a:6f:ae:e2:cf:97:8e:b8:53:24:75:5b:41:48:c0:
02:8f:b4:c5:30:e6:20:a4:2a:a4:2d:61:a9:54:cb:24:1e:ec:
e9:58:90:3d:2e:5f:12:32:68:23:00:88:18:1e:9f:18:68:36:
64:ac:0a:3c:4e:e2:41:fa:f3:05:66:22:31:a7:05:97:35:d5:
fa:52:19:ca:f2:73:ea:32:fa:86:1f:c1:ea:81:ab:b8:1b:ab:
dd:6e:fb:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:20:28 2025 by rpki-client