Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/b2MmoHIeWxgVxOAdU5Dwhgruq7M.roa
File: b2MmoHIeWxgVxOAdU5Dwhgruq7M.roa (raw, json)
Hash identifier: jO++tZdrzXz3xgziTUEzSJPx4b4ddBVr98sMROB9llY=
Subject key identifier: 6F:63:26:A0:72:1E:5B:18:15:C4:E0:1D:53:90:F0:86:0A:EE:AB:B3
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019543E7DAB6CA70B512EE588C29372B6F4D
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/b2MmoHIeWxgVxOAdU5Dwhgruq7M.roa
Signing time: Wed 26 Feb 2025 20:17:03 +0000
ROA not before: Wed 26 Feb 2025 20:17:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215828
IP address blocks: 5.83.138.0/24 maxlen: 24
5.83.148.0/24 maxlen: 24
77.90.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:43:e7:da:b6:ca:70:b5:12:ee:58:8c:29:37:2b:6f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 26 20:17:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f6326a0721e5b1815c4e01d5390f0860aeeabb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:33:6e:d2:68:b4:a8:e6:86:b7:01:5d:e6:ad:
08:d9:c2:c9:d8:7b:ab:96:90:63:34:4f:4e:cc:f2:
88:06:d4:dc:46:0c:d5:80:75:19:93:44:60:b9:4b:
05:55:67:86:e9:2b:e3:be:8a:f9:5e:18:41:81:06:
ce:5c:8b:d3:69:f9:85:ef:40:2c:02:65:4b:6d:94:
df:aa:29:32:87:c1:a0:9f:05:e7:15:7e:07:58:aa:
b8:f6:1e:22:5e:c5:54:e6:1b:67:e5:b5:65:93:3f:
04:79:7d:96:de:5e:7f:5e:2e:38:4b:a9:64:ab:e4:
cd:6d:70:3b:9c:ff:ff:af:03:0d:cf:32:87:75:bf:
ee:0e:10:9e:04:65:ed:f0:8f:72:6a:3b:02:d2:04:
cd:98:86:79:b3:87:ae:7b:bd:b6:27:79:54:9e:66:
a7:fc:0b:8c:f9:66:13:a5:13:8a:4d:c9:47:91:6f:
cc:77:6f:80:b9:9b:77:9a:cc:46:fe:3a:c6:af:d8:
07:95:13:2f:53:77:1a:a3:1b:e5:9e:9a:28:ce:dd:
26:37:8e:7a:3d:6e:be:52:e0:6e:ed:4e:54:e0:a4:
fd:c1:0f:f1:2d:6d:42:3c:12:b3:de:7d:93:e2:47:
af:b3:f4:b9:ac:3f:1e:25:3b:a1:4f:e2:5e:cc:58:
29:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:63:26:A0:72:1E:5B:18:15:C4:E0:1D:53:90:F0:86:0A:EE:AB:B3
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/b2MmoHIeWxgVxOAdU5Dwhgruq7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.138.0/24
5.83.148.0/24
77.90.25.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:d2:9f:bf:29:89:1f:22:7c:07:c9:aa:88:45:7e:bf:6e:f4:
bd:0b:11:8e:0e:00:3e:56:fe:6b:ec:5b:ad:1f:e9:ce:58:2d:
9c:c0:98:4f:93:1f:51:17:fa:ef:ba:60:09:c9:ba:45:d4:8a:
47:68:2a:f4:2f:e6:9b:f8:38:04:23:1b:6e:e2:2c:2c:74:4c:
2d:ca:08:f7:af:4f:8c:49:01:35:9a:1d:35:1d:54:fe:d2:e7:
fc:6a:f5:d2:c8:8f:2a:dd:46:ce:11:13:1f:98:df:06:10:b4:
02:4f:e4:77:9f:c9:e3:26:a4:d8:46:a1:04:41:f4:42:72:b7:
c5:ac:9d:51:de:ab:93:3e:43:48:e9:fa:e9:79:ec:33:13:2f:
38:35:ad:a5:70:c6:0f:6e:9e:ab:1a:78:3e:fb:54:fd:f9:16:
da:9c:b3:07:e1:92:09:3d:4e:26:0c:13:94:31:b2:c9:e8:1c:
c6:fc:b0:07:c5:67:eb:0b:22:99:01:a8:14:17:72:14:f3:07:
39:27:ca:ef:a9:4a:45:5b:a8:be:26:87:e1:17:01:77:af:62:
9d:55:e4:89:60:01:9c:18:b5:19:c4:0c:fc:5b:95:86:b0:c9:
c0:c6:ee:93:27:fa:a9:6a:5c:83:5b:88:be:de:a3:53:35:8e:
81:71:be:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:12:56 2025 by rpki-client