Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_jR-7BnaoYQ1tyyIF9WaVeadIpU.roa
File: _jR-7BnaoYQ1tyyIF9WaVeadIpU.roa (raw, json)
Hash identifier: OkiREWmXorzuaqc5o0TfV9aIDtrIfJPYd+Vr7NDewVc=
Subject key identifier: FE:34:7E:EC:19:DA:A1:84:35:B7:2C:88:17:D5:9A:55:E6:9D:22:95
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0195D732FF20A46F9696D2951BDCFA17059F
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_jR-7BnaoYQ1tyyIF9WaVeadIpU.roa
Signing time: Thu 27 Mar 2025 10:43:18 +0000
ROA not before: Thu 27 Mar 2025 10:43:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215828
IP address blocks: 5.83.138.0/24 maxlen: 24
5.83.148.0/24 maxlen: 24
77.90.25.0/24 maxlen: 24
94.249.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d7:32:ff:20:a4:6f:96:96:d2:95:1b:dc:fa:17:05:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 27 10:43:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe347eec19daa18435b72c8817d59a55e69d2295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:04:f5:fc:87:ab:59:4f:e1:ec:20:f3:dd:62:
e5:6a:f8:e9:fb:52:d4:9a:18:46:4b:4b:32:1d:e0:
52:94:8c:29:b4:f8:81:9d:26:98:1e:fd:72:24:9d:
f6:55:57:c0:04:00:20:d8:8d:58:02:09:da:1d:e6:
16:3b:15:78:b1:38:29:49:1f:b4:f5:a9:45:13:e5:
df:4c:41:24:db:d6:e4:c0:b3:d3:69:2d:ea:ba:fd:
75:0a:e9:ef:69:03:16:20:b5:3d:cf:b5:45:07:4b:
a5:74:5c:de:06:fc:8e:2a:2d:1f:d3:29:9c:d2:6b:
76:58:c0:d6:ce:a6:bf:06:14:41:c0:82:d9:27:8c:
e4:e2:aa:d1:97:31:be:8f:36:6c:68:c8:15:7f:41:
ad:9e:bd:12:76:ad:fc:15:77:ba:92:4a:43:eb:8b:
0f:1c:ff:13:26:16:f5:a7:a7:a1:e0:04:0b:7e:b8:
b5:be:28:40:b5:5c:b8:33:44:0e:4c:af:a2:f8:98:
d6:67:37:33:e2:3e:4a:a7:93:3e:cf:73:d6:dc:98:
2c:9a:20:cd:07:cc:fa:f8:28:c6:ac:b7:8e:1b:71:
6d:45:18:75:13:cc:cd:f4:c9:7e:10:1a:a6:5f:ef:
5b:d7:d8:d5:df:03:16:84:28:c7:13:31:69:56:5a:
2a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:34:7E:EC:19:DA:A1:84:35:B7:2C:88:17:D5:9A:55:E6:9D:22:95
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_jR-7BnaoYQ1tyyIF9WaVeadIpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.138.0/24
5.83.148.0/24
77.90.25.0/24
94.249.138.0/24
Signature Algorithm: sha256WithRSAEncryption
72:6a:8f:26:dd:71:04:2c:06:af:f3:dc:27:77:23:1e:9d:67:
c2:4b:8e:f4:4e:f6:04:e8:e2:2c:e5:30:50:b6:f9:d4:70:76:
b0:00:32:8e:74:59:03:fd:29:ca:d8:bd:e3:97:a1:c0:95:54:
4b:fc:a8:58:4d:f8:7b:c6:96:a2:39:85:8d:a6:4d:36:14:c5:
27:50:83:6b:fe:58:4b:b3:4c:71:d0:c8:b7:83:9b:a7:eb:22:
5b:af:c8:1d:d9:d6:80:14:b1:bb:2f:b2:d7:07:ec:8e:87:77:
90:2a:3c:6c:da:5f:f0:40:ab:f6:76:d2:d7:33:79:d2:2b:b7:
54:f1:21:7f:00:52:85:0d:f5:d1:30:a3:4b:48:d0:75:8b:f2:
08:e6:b9:2d:94:cc:92:1f:2f:33:2b:97:ff:04:3f:2d:05:d2:
63:a2:3f:c9:90:bd:30:33:2a:57:49:74:b1:3e:87:36:96:e1:
c8:79:4e:b4:7d:90:3b:28:11:59:4f:39:14:06:7d:14:ed:58:
dc:25:ad:9e:21:9e:44:b6:45:75:72:88:7c:64:7d:56:99:da:
1f:f8:a4:83:b8:3d:85:7d:83:ce:16:40:44:4e:58:f7:0d:ee:
2e:b6:d3:b2:7a:c3:ee:90:1c:9d:d3:47:6f:2a:1e:44:18:20:
4e:aa:87:05
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZXXMv8gpG+WltKVG9z6FwWfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwMzI3MTA0MzE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTM0N2VlYzE5ZGFhMTg0MzViNzJjODgxN2Q1OWE1NWU2OWQyMjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQT1/IerWU/h7CDz3WLlavjp+1LU
mhhGS0syHeBSlIwptPiBnSaYHv1yJJ32VVfABAAg2I1YAgnaHeYWOxV4sTgpSR+0
9alFE+XfTEEk29bkwLPTaS3quv11CunvaQMWILU9z7VFB0uldFzeBvyOKi0f0ymc
0mt2WMDWzqa/BhRBwILZJ4zk4qrRlzG+jzZsaMgVf0Gtnr0Sdq38FXe6kkpD64sP
HP8TJhb1p6eh4AQLfri1vihAtVy4M0QOTK+i+JjWZzcz4j5Kp5M+z3PW3JgsmiDN
B8z6+CjGrLeOG3FtRRh1E8zN9Ml+EBqmX+9b19jV3wMWhCjHEzFpVloqdQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFP40fuwZ2qGENbcsiBfVmlXmnSKVMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvX2pSLTdCbmFvWVExdHl5SUY5V2FWZWFkSXBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQABVOKAwQA
BVOUAwQATVoZAwQAXvmKMA0GCSqGSIb3DQEBCwUAA4IBAQByao8m3XEELAav89wn
dyMenWfCS470TvYE6OIs5TBQtvnUcHawADKOdFkD/SnK2L3jl6HAlVRL/KhYTfh7
xpaiOYWNpk02FMUnUINr/lhLs0xx0Mi3g5un6yJbr8gd2daAFLG7L7LXB+yOh3eQ
Kjxs2l/wQKv2dtLXM3nSK7dU8SF/AFKFDfXRMKNLSNB1i/II5rktlMySHy8zK5f/
BD8tBdJjoj/JkL0wMypXSXSxPoc2luHIeU60fZA7KBFZTzkUBn0U7VjcJa2eIZ5E
tkV1coh8ZH1Wmdof+KSDuD2FfYPOFkBETlj3De4uttOyesPukByd00dvKh5EGCBO
qocF
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:46:14 2025 by rpki-client