Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Z2xudajgJgBpY52DQ2e-BLxhHrA.roa
File: Z2xudajgJgBpY52DQ2e-BLxhHrA.roa (raw, json)
Hash identifier: GNlJmspM8/pzHBYNwfe8axzaEwcP2eBOlffG++0JkyM=
Subject key identifier: 67:6C:6E:75:A8:E0:26:00:69:63:9D:83:43:67:BE:04:BC:61:1E:B0
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0195C935F02B33BC0515EA4DDBC5A976FCDD
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Z2xudajgJgBpY52DQ2e-BLxhHrA.roa
Signing time: Mon 24 Mar 2025 17:31:50 +0000
ROA not before: Mon 24 Mar 2025 17:31:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44486
IP address blocks: 5.83.145.0/24 maxlen: 24
5.231.232.0/24 maxlen: 24
5.231.233.0/24 maxlen: 24
77.90.3.0/24 maxlen: 24
77.90.28.0/24 maxlen: 24
89.106.92.0/24 maxlen: 24
89.106.93.0/24 maxlen: 24
89.106.94.0/24 maxlen: 24
89.106.95.0/24 maxlen: 24
89.144.6.0/24 maxlen: 24
89.144.30.0/24 maxlen: 24
89.144.31.0/24 maxlen: 24
89.144.33.0/24 maxlen: 24
89.144.42.0/24 maxlen: 24
89.144.43.0/24 maxlen: 24
89.144.44.0/24 maxlen: 24
89.144.46.0/24 maxlen: 24
89.144.47.0/24 maxlen: 24
89.144.48.0/24 maxlen: 24
89.144.49.0/24 maxlen: 24
89.144.50.0/24 maxlen: 24
89.144.51.0/24 maxlen: 24
89.144.52.0/24 maxlen: 24
89.144.53.0/24 maxlen: 24
89.144.54.0/24 maxlen: 24
89.144.55.0/24 maxlen: 24
89.144.58.0/24 maxlen: 24
89.144.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c9:35:f0:2b:33:bc:05:15:ea:4d:db:c5:a9:76:fc:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 24 17:31:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=676c6e75a8e0260069639d834367be04bc611eb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:27:2f:85:a9:02:fc:79:d0:cc:93:07:33:16:
13:c1:29:ff:94:a1:08:a4:55:3d:e4:d0:b1:2c:78:
33:6a:ce:54:fb:d5:fa:a0:5f:1d:bb:fb:ca:12:d4:
d9:16:6b:34:31:d8:3c:e6:4b:1b:a0:22:41:82:0d:
95:05:1f:70:bc:96:59:7d:e8:f1:64:13:4a:c1:1d:
ac:e3:a8:69:e1:45:81:52:13:91:f8:b5:e0:68:f2:
1e:cb:f6:3e:24:0c:20:d7:c8:33:e2:a0:05:6b:0c:
26:94:01:2b:c3:ea:53:b6:4b:52:20:2c:c9:59:ab:
5e:43:6b:89:b3:f6:5e:e5:4a:21:04:e7:e0:dc:cf:
9e:37:70:fd:3d:88:99:44:58:b2:fa:f3:44:d9:f4:
0b:a3:9d:7b:0a:2b:14:2d:0b:eb:ac:05:c1:06:e8:
91:66:52:f0:8f:73:d4:56:17:3f:44:f6:92:cb:16:
e4:21:15:6b:62:86:97:21:63:e5:ec:cd:3f:60:7b:
07:b9:3d:3a:39:ab:b3:7c:f5:2d:24:8a:96:b7:59:
96:4f:85:15:53:21:cb:e3:fa:23:08:2c:cb:3c:12:
ba:74:16:c0:aa:ca:a1:4c:7e:30:ec:98:70:2f:43:
59:af:7b:12:ad:c3:1e:85:e6:ea:22:7d:47:79:df:
0a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:6C:6E:75:A8:E0:26:00:69:63:9D:83:43:67:BE:04:BC:61:1E:B0
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Z2xudajgJgBpY52DQ2e-BLxhHrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.145.0/24
5.231.232.0/23
77.90.3.0/24
77.90.28.0/24
89.106.92.0/22
89.144.6.0/24
89.144.30.0/23
89.144.33.0/24
89.144.42.0-89.144.44.255
89.144.46.0-89.144.55.255
89.144.58.0/23
Signature Algorithm: sha256WithRSAEncryption
49:58:f8:81:0d:cc:97:12:88:1f:51:1b:12:f6:27:ac:d6:56:
a8:65:7f:5e:17:fb:0d:58:67:57:d9:53:a9:66:66:5b:8f:82:
b1:ac:4a:d6:06:7d:03:a7:11:b5:0e:39:d0:ff:2b:1f:ec:81:
af:40:99:32:15:38:be:8b:86:cf:28:07:81:71:ff:76:8f:18:
88:5c:db:90:8e:86:15:f6:a7:f3:3a:e1:68:1c:15:0c:45:83:
f5:6b:38:bb:60:79:81:6b:42:be:b4:f5:b9:7e:eb:7e:4f:6e:
92:b1:74:35:a4:85:26:25:71:a0:1d:80:7f:38:81:73:74:d9:
51:96:a6:11:1e:e8:19:22:d2:a9:fc:d4:5a:23:9d:e6:ed:e1:
a5:fd:50:bf:7c:40:3d:bc:53:61:eb:68:b4:2d:e4:40:34:4f:
3e:e9:23:15:98:db:04:58:f4:a0:d1:7e:5e:08:19:8e:7a:79:
2e:02:a3:0f:ea:06:f1:49:ff:e8:7d:d6:07:72:29:14:e1:ea:
1f:f2:23:17:fc:a3:8a:54:31:d9:96:95:d5:cf:aa:09:aa:50:
d7:ad:92:56:6c:8f:1f:48:9e:89:48:80:fb:97:5c:c0:2c:8b:
07:63:79:89:f9:49:cd:f2:47:15:e3:d3:46:88:b8:15:a2:89:
1d:c2:55:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:22:55 2025 by rpki-client