Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Xo6w2OnVqANAG_wWSeYp-YWGpIQ.roa
File: Xo6w2OnVqANAG_wWSeYp-YWGpIQ.roa (raw, json)
Hash identifier: S1o4acK4J5aZ83Nl395vQAxsgIgmpyZYjh+0CmENjs0=
Subject key identifier: 5E:8E:B0:D8:E9:D5:A8:03:40:1B:FC:16:49:E6:29:F9:85:86:A4:84
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0195845642A1B8CDA2D5A8F70ACE37631B96
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Xo6w2OnVqANAG_wWSeYp-YWGpIQ.roa
Signing time: Tue 11 Mar 2025 08:33:20 +0000
ROA not before: Tue 11 Mar 2025 08:33:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58212
IP address blocks: 5.83.150.0/24 maxlen: 24
5.175.142.0/24 maxlen: 24
5.175.220.0/24 maxlen: 24
5.231.82.0/24 maxlen: 24
77.90.7.0/24 maxlen: 24
77.90.39.0/24 maxlen: 24
77.90.41.0/24 maxlen: 24
77.90.52.0/24 maxlen: 24
77.90.58.0/24 maxlen: 24
89.106.70.0/24 maxlen: 24
89.144.16.0/24 maxlen: 24
89.144.25.0/24 maxlen: 24
89.144.34.0/24 maxlen: 24
89.144.35.0/24 maxlen: 24
89.144.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:84:56:42:a1:b8:cd:a2:d5:a8:f7:0a:ce:37:63:1b:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 11 08:33:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e8eb0d8e9d5a803401bfc1649e629f98586a484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b5:cd:72:ef:ef:31:bf:8a:5b:06:8b:63:29:
5f:3d:c5:58:23:84:8e:3a:a6:3d:1c:21:b0:ab:c6:
81:58:22:3c:11:cc:27:d5:0d:e9:53:b1:6f:ad:87:
07:16:0f:f7:3a:9a:71:e6:a0:97:12:6b:e6:bd:fd:
6a:83:0a:b0:a2:21:b6:b5:27:36:2b:ee:96:6d:48:
2d:0b:26:f4:91:3c:91:a1:4a:4b:c1:03:c0:62:32:
dc:1a:55:23:90:65:51:01:ff:ec:f4:fa:46:70:05:
19:8b:8c:83:70:24:76:c2:4a:6e:ac:7e:29:a3:50:
a1:4f:2c:4e:67:87:03:a8:8e:45:e3:12:29:aa:23:
6b:3d:7c:c1:b2:18:13:90:13:85:b7:d1:af:bc:22:
31:2c:40:43:13:de:be:8b:40:10:fb:94:4f:6a:c8:
c9:b9:22:bf:52:c1:05:b4:9a:2e:91:80:8e:7b:3a:
7a:0c:90:26:cb:86:83:72:bb:ee:16:57:8f:a5:6b:
82:0d:89:76:1c:f8:e5:c2:54:14:06:7a:d2:e5:bc:
6d:aa:c8:0f:bb:6f:ae:8e:5e:02:4e:62:03:68:f3:
b3:a8:54:34:ff:6a:99:3e:16:45:50:30:53:2a:cb:
ef:4d:a5:a8:9d:75:50:46:f3:62:95:45:14:36:97:
23:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:8E:B0:D8:E9:D5:A8:03:40:1B:FC:16:49:E6:29:F9:85:86:A4:84
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Xo6w2OnVqANAG_wWSeYp-YWGpIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.150.0/24
5.175.142.0/24
5.175.220.0/24
5.231.82.0/24
77.90.7.0/24
77.90.39.0/24
77.90.41.0/24
77.90.52.0/24
77.90.58.0/24
89.106.70.0/24
89.144.16.0/24
89.144.25.0/24
89.144.34.0/23
89.144.60.0/24
Signature Algorithm: sha256WithRSAEncryption
95:be:f6:3e:d3:e5:45:ea:80:50:bc:4d:cf:3c:fc:b5:dc:bd:
8b:75:68:30:05:e0:f3:2b:3c:2e:91:13:ec:4d:b9:b0:96:57:
39:66:a5:a6:16:80:67:7a:cd:6d:5c:37:f3:87:31:65:a5:12:
d5:b1:2d:a4:58:ba:91:f8:20:3c:ae:71:01:d6:0d:e5:55:f9:
ba:c2:11:a8:6b:04:89:b6:c2:c5:38:c2:05:69:c0:4d:57:e9:
68:57:5e:47:da:b0:84:f7:ae:3f:ef:86:5e:6a:c1:84:bb:57:
f2:65:05:69:0f:db:bc:2d:b1:b0:dc:3b:b3:53:25:b6:ed:22:
eb:01:4f:da:2a:39:83:75:87:2e:a1:47:b3:ad:4c:23:ba:d8:
59:0d:95:e7:6a:9f:25:39:f8:59:7a:3c:83:71:be:d2:87:39:
ac:35:73:b7:2b:0b:ed:42:98:05:47:ba:d7:c3:ad:29:e1:ac:
c1:02:6d:44:fe:32:17:d8:57:1e:6c:f3:23:a6:d6:5c:8c:13:
bc:f6:85:0d:bf:b9:c8:e2:df:b3:1f:df:11:c4:99:1c:c1:0b:
81:85:fe:22:7a:ea:e2:54:63:b4:6e:b0:0d:5d:92:84:e9:aa:
29:64:38:5b:e8:7c:e9:c3:ee:7e:7d:7f:c8:91:97:b4:9a:fa:
e2:b8:26:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:12:57 2025 by rpki-client