Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/XeW_Dw_C7TkWEdWrWobLdneiGTo.roa
File: XeW_Dw_C7TkWEdWrWobLdneiGTo.roa (raw, json)
Hash identifier: phWguPSjvuLTcmBt8Pply+lfyq0BAGAEAhBLSgkai9E=
Subject key identifier: 5D:E5:BF:0F:0F:C2:ED:39:16:11:D5:AB:5A:86:CB:76:77:A2:19:3A
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01958558D601C829A0880D89FA5A2B9818B7
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/XeW_Dw_C7TkWEdWrWobLdneiGTo.roa
Signing time: Tue 11 Mar 2025 13:15:46 +0000
ROA not before: Tue 11 Mar 2025 13:15:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 5.83.129.0/24 maxlen: 24
77.90.54.0/24 maxlen: 24
87.239.131.0/24 maxlen: 24
94.103.163.0/24 maxlen: 24
94.249.195.0/24 maxlen: 24
94.249.215.0/24 maxlen: 24
95.215.32.0/24 maxlen: 24
95.215.34.0/24 maxlen: 24
185.13.156.0/24 maxlen: 24
217.69.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:85:58:d6:01:c8:29:a0:88:0d:89:fa:5a:2b:98:18:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 11 13:15:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5de5bf0f0fc2ed391611d5ab5a86cb7677a2193a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d0:48:d7:1b:a3:4e:ae:78:74:67:6f:bb:e1:
45:8a:39:51:4e:27:dc:fb:cf:45:a6:65:88:72:03:
a0:9e:62:d2:26:b1:1d:23:55:02:de:fa:c1:17:72:
77:a2:5b:22:37:8f:8c:12:4d:3e:e3:b6:fc:f6:33:
40:36:6d:ab:c7:3a:7f:86:21:b4:8d:15:30:53:c9:
ac:94:22:1c:39:02:9a:49:14:94:64:a6:c1:7c:1a:
72:56:a6:fb:96:30:d6:4e:20:c7:d3:3e:ad:c6:21:
46:d1:4e:a4:46:81:3e:93:92:0f:c5:5b:ed:1f:ec:
ea:ae:78:b0:28:91:b2:9b:d9:46:31:38:04:6a:3f:
f5:97:0b:ac:71:19:bc:dc:a4:4f:ea:4f:72:f6:7d:
fe:3b:70:52:2e:6c:89:03:26:c6:da:4d:dc:68:05:
61:8f:ad:aa:48:2a:48:0f:3d:b9:b1:1b:b3:b9:a4:
17:87:57:b5:98:c1:c5:0e:60:88:eb:eb:05:97:f8:
24:3d:c2:b9:69:2c:3b:2f:8c:a8:20:f8:3b:57:c8:
37:8d:8e:64:47:9d:dc:a7:4c:da:85:aa:f7:43:64:
0b:d2:bf:7f:5c:31:2d:de:9b:00:8c:9d:79:65:46:
2d:d1:1b:e9:32:3e:c3:ba:a4:66:87:c1:34:8c:5b:
32:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E5:BF:0F:0F:C2:ED:39:16:11:D5:AB:5A:86:CB:76:77:A2:19:3A
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/XeW_Dw_C7TkWEdWrWobLdneiGTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.129.0/24
77.90.54.0/24
87.239.131.0/24
94.103.163.0/24
94.249.195.0/24
94.249.215.0/24
95.215.32.0/24
95.215.34.0/24
185.13.156.0/24
217.69.166.0/24
Signature Algorithm: sha256WithRSAEncryption
76:4c:dc:e6:a6:58:64:55:59:b5:ee:b4:58:96:81:24:f0:22:
0b:91:3a:58:b9:56:e4:ad:a1:8a:7f:15:e0:e5:f2:84:d5:5c:
f4:dd:1e:ec:7a:cb:a7:31:22:17:67:da:83:3e:34:43:cb:e7:
3a:0d:a1:4a:33:3e:ee:7a:08:1d:cf:05:7a:a7:41:a6:f3:a2:
6c:7a:f5:d5:3a:7c:fc:d4:1a:2e:fa:ce:43:ed:26:7c:7e:29:
e5:da:db:ac:9f:cc:10:14:9b:90:b2:aa:f1:6b:47:57:b0:47:
ac:85:97:5d:2d:ae:9c:ef:0b:87:88:d9:9d:70:a2:79:63:54:
c9:5c:18:14:53:70:18:67:b6:87:80:01:9c:b1:a1:99:fb:ae:
c5:e1:11:ac:3c:d5:17:b1:3f:cd:49:b8:16:a8:3a:50:ee:15:
1b:26:f1:8d:3d:fc:ba:7d:70:bb:7f:e5:6e:4b:32:c4:00:70:
9c:71:04:ed:61:d7:a1:98:b2:c3:00:c4:81:f8:cb:5b:58:44:
61:df:0b:72:c5:97:77:db:4f:06:00:25:5b:f1:9c:04:05:c4:
6b:b6:95:b9:8a:ae:d0:d8:5a:80:a1:66:2d:96:cc:fb:59:32:
2e:3e:29:7e:76:c4:b3:b4:5a:68:90:92:7f:5d:8c:5d:be:a5:
10:91:e9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:27:58 2025 by rpki-client