Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Z-n45GrFI7kzn-Iar6wpyAzRt20.roa
File: Z-n45GrFI7kzn-Iar6wpyAzRt20.roa (raw, json)
Hash identifier: 4fu+/3ivR2Q8nEjuZ/D3CP2+2O3jddmHNpvpaevkAlQ=
Subject key identifier: 67:E9:F8:E4:6A:C5:23:B9:33:9F:E2:1A:AF:AC:29:C8:0C:D1:B7:6D
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01957471A8592A24C9B56BF4D41019D16F48
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Z-n45GrFI7kzn-Iar6wpyAzRt20.roa
Signing time: Sat 08 Mar 2025 06:29:20 +0000
ROA not before: Sat 08 Mar 2025 06:29:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58212
IP address blocks: 5.83.150.0/24 maxlen: 24
5.175.142.0/24 maxlen: 24
5.175.220.0/24 maxlen: 24
5.231.82.0/24 maxlen: 24
77.90.7.0/24 maxlen: 24
77.90.39.0/24 maxlen: 24
77.90.41.0/24 maxlen: 24
77.90.52.0/24 maxlen: 24
77.90.58.0/24 maxlen: 24
89.106.70.0/24 maxlen: 24
89.144.25.0/24 maxlen: 24
89.144.34.0/24 maxlen: 24
89.144.35.0/24 maxlen: 24
89.144.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:74:71:a8:59:2a:24:c9:b5:6b:f4:d4:10:19:d1:6f:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 8 06:29:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67e9f8e46ac523b9339fe21aafac29c80cd1b76d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:12:95:e6:2e:84:bd:df:5b:ef:5f:ac:75:21:
6d:4e:84:1c:c8:85:32:b0:6e:0e:f7:fb:9a:a9:ae:
c7:ce:78:cd:d4:05:5a:bc:ce:7e:69:0f:d5:88:3e:
d4:2f:91:74:0c:87:dd:a0:21:9e:85:f1:7c:30:dc:
7d:85:fe:dc:e2:5f:c0:6e:4f:aa:e4:71:6b:49:27:
b6:13:de:6d:2e:fb:97:a1:39:81:ae:f1:ec:d8:b0:
48:7c:57:ff:fe:b5:0f:28:21:01:3c:e6:39:e5:55:
d0:50:f2:fb:14:cb:e6:97:9e:93:6d:34:9a:13:c8:
01:81:36:f2:b4:d3:93:f3:0f:ca:ae:8d:87:ef:f9:
6f:df:ed:a2:d6:ca:d5:e0:32:96:ab:b5:67:d7:79:
54:91:e0:0c:e3:fe:dc:4a:8a:cd:87:bd:92:6c:cc:
02:ac:29:aa:00:75:f7:98:41:c7:32:31:1a:66:8e:
8e:6c:28:1a:52:aa:4e:b6:5e:2c:7a:3c:b4:7f:89:
36:e6:a5:92:ce:5b:08:f6:be:03:69:d5:44:08:77:
8a:d9:5b:90:cd:41:7a:8e:6d:f7:2d:74:50:57:10:
b6:d8:ce:00:ec:6d:d3:dc:78:42:9f:f3:bc:d7:44:
a5:88:cd:d6:2d:05:ab:96:6c:e2:85:e1:4b:97:c4:
61:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E9:F8:E4:6A:C5:23:B9:33:9F:E2:1A:AF:AC:29:C8:0C:D1:B7:6D
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Z-n45GrFI7kzn-Iar6wpyAzRt20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.150.0/24
5.175.142.0/24
5.175.220.0/24
5.231.82.0/24
77.90.7.0/24
77.90.39.0/24
77.90.41.0/24
77.90.52.0/24
77.90.58.0/24
89.106.70.0/24
89.144.25.0/24
89.144.34.0/23
89.144.60.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:f7:a8:e8:05:19:d6:1e:7e:f2:7a:2a:ca:2b:b2:d5:7e:b8:
38:b3:09:a0:dc:e5:d8:a7:90:41:c7:ee:db:a9:fa:5d:83:a5:
03:94:00:43:b0:61:a1:f3:38:af:43:69:6b:b7:e7:fb:7e:e4:
ff:91:55:60:c6:93:69:a2:64:06:9b:36:9b:67:12:17:a0:9e:
4d:4b:bd:e0:81:11:e0:a2:47:c8:55:88:ca:a2:8e:bb:10:d9:
d7:03:b3:68:62:33:df:a4:6b:6c:01:74:29:a4:39:79:5b:e9:
bf:30:aa:e7:8f:75:fe:04:03:04:78:63:bf:73:b3:8e:f6:4f:
65:9d:c2:1a:0a:24:1d:2d:85:f7:76:98:3c:c9:4e:d3:8a:59:
2b:a3:98:5c:f6:69:15:b5:4d:8e:6d:55:b7:c8:3a:ca:43:a5:
3d:41:66:c9:76:ff:68:00:44:10:46:8e:84:a6:bd:fc:55:42:
ac:d8:23:69:7f:82:5a:87:2b:99:fd:59:b0:fa:74:fc:a7:53:
5e:27:f9:57:19:0f:b2:e5:bf:cd:18:2a:73:0a:28:99:16:a5:
20:e2:1c:40:09:41:b0:c5:ec:85:94:a3:f9:4f:f4:69:4f:31:
92:69:10:09:d7:2b:2e:5c:fa:39:59:1b:56:26:f6:3b:31:75:
a2:da:d2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:34:34 2025 by rpki-client