Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/e-Ttm34X7meuaoA5bD61KL0Apaw.roa
File: e-Ttm34X7meuaoA5bD61KL0Apaw.roa (raw, json)
Hash identifier: OtQaJxd+6aPyjv0UhdTyJZCehANUPbVGt+KMEo6p0GI=
Subject key identifier: 7B:E4:ED:9B:7E:17:EE:67:AE:6A:80:39:6C:3E:B5:28:BD:00:A5:AC
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019574277D9172148B4767B71684EADDF000
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/e-Ttm34X7meuaoA5bD61KL0Apaw.roa
Signing time: Sat 08 Mar 2025 05:08:19 +0000
ROA not before: Sat 08 Mar 2025 05:08:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58212
IP address blocks: 5.83.150.0/24 maxlen: 24
5.175.142.0/24 maxlen: 24
5.175.220.0/24 maxlen: 24
5.231.82.0/24 maxlen: 24
77.90.7.0/24 maxlen: 24
77.90.39.0/24 maxlen: 24
77.90.52.0/24 maxlen: 24
77.90.58.0/24 maxlen: 24
89.106.70.0/24 maxlen: 24
89.144.25.0/24 maxlen: 24
89.144.34.0/24 maxlen: 24
89.144.35.0/24 maxlen: 24
89.144.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:74:27:7d:91:72:14:8b:47:67:b7:16:84:ea:dd:f0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 8 05:08:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7be4ed9b7e17ee67ae6a80396c3eb528bd00a5ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c6:bd:6f:e4:df:24:ed:c5:2f:2d:d2:21:8c:
7e:8f:39:8c:5d:92:23:f7:f6:14:61:87:79:f1:7d:
15:1d:4a:6b:7c:17:3d:00:31:e3:68:b0:4b:d9:69:
e3:5d:76:d4:70:17:48:9e:0a:a0:ff:c2:e8:ec:b4:
dc:d1:4d:12:97:fc:94:fe:84:ca:01:1b:1b:35:ba:
28:a8:03:2c:28:7f:50:71:c5:d8:ac:03:16:ee:21:
ba:97:4f:f0:8d:48:0c:94:1a:e7:eb:52:7b:d3:01:
1f:60:b2:51:7e:32:f2:92:82:51:bf:1d:9f:69:4a:
fd:f7:54:c1:d3:8b:74:e7:31:33:a2:9a:75:4f:10:
65:94:40:e0:af:90:17:39:dd:77:d4:26:68:a2:96:
eb:30:50:02:2a:76:5d:05:1d:2a:82:23:9b:36:19:
1a:34:89:22:73:b2:90:07:b2:26:ec:f3:f4:0c:fa:
89:84:57:25:85:98:51:16:90:b3:ca:e1:4f:14:64:
fa:72:f5:58:20:fc:1a:da:7e:80:30:7e:e0:2b:29:
84:51:40:d3:4e:65:3b:9e:bf:23:50:ee:9f:00:e2:
4b:82:a2:0b:92:e3:93:0a:1c:29:c3:47:ca:35:59:
dd:b8:90:41:48:97:2f:61:1a:f6:7a:b0:96:cc:3d:
ef:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E4:ED:9B:7E:17:EE:67:AE:6A:80:39:6C:3E:B5:28:BD:00:A5:AC
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/e-Ttm34X7meuaoA5bD61KL0Apaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.150.0/24
5.175.142.0/24
5.175.220.0/24
5.231.82.0/24
77.90.7.0/24
77.90.39.0/24
77.90.52.0/24
77.90.58.0/24
89.106.70.0/24
89.144.25.0/24
89.144.34.0/23
89.144.60.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:c3:cc:81:2f:44:2f:cb:cd:a8:b9:5e:4b:cb:8c:15:85:16:
ca:df:61:23:d2:4c:d7:ae:44:cd:c1:f4:27:cd:a3:57:c9:2b:
44:33:b9:1c:0c:b9:7c:69:21:b3:03:ba:53:4f:93:27:d0:5e:
53:dd:e4:12:67:6a:ed:e1:a8:61:98:53:12:76:12:a2:d6:4e:
5a:38:d3:e2:c8:58:bc:3f:e8:0d:2d:8e:b8:16:b1:fd:f2:9c:
92:31:80:9a:7d:91:17:0e:dd:92:e6:55:b7:ab:4a:5d:17:42:
0e:39:57:f4:ba:73:59:a6:51:e9:89:20:45:54:8a:13:f4:ef:
d3:f7:3b:e8:45:95:61:c9:34:1c:4e:68:51:8e:39:6f:09:b4:
84:12:cb:ad:7b:21:86:cf:6c:01:1b:01:d1:b7:c3:10:53:0d:
71:12:b8:d8:6d:67:e5:91:9f:19:26:32:4c:09:4b:4d:62:2e:
f2:1c:a4:ce:31:e5:d0:c6:36:ef:a1:e0:10:29:fc:c1:1a:fd:
f0:95:2c:40:20:f2:1f:0d:47:e1:9d:69:ed:06:3b:ed:c7:4a:
fa:b1:1b:51:cc:ea:bd:98:8b:27:f8:a3:84:3f:02:7f:80:d7:
b6:06:d0:77:eb:c9:91:b7:f7:a3:cd:2c:ea:e6:c6:9d:08:27:
90:39:18:d0
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgISAZV0J32RchSLR2e3FoTq3fAAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwMzA4MDUwODE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmU0ZWQ5YjdlMTdlZTY3YWU2YTgwMzk2YzNlYjUyOGJkMDBhNWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMa9b+TfJO3FLy3SIYx+jzmMXZIj
9/YUYYd58X0VHUprfBc9ADHjaLBL2WnjXXbUcBdIngqg/8Lo7LTc0U0Sl/yU/oTK
ARsbNbooqAMsKH9QccXYrAMW7iG6l0/wjUgMlBrn61J70wEfYLJRfjLykoJRvx2f
aUr991TB04t05zEzopp1TxBllEDgr5AXOd131CZoopbrMFACKnZdBR0qgiObNhka
NIkic7KQB7Im7PP0DPqJhFclhZhRFpCzyuFPFGT6cvVYIPwa2n6AMH7gKymEUUDT
TmU7nr8jUO6fAOJLgqILkuOTChwpw0fKNVnduJBBSJcvYRr2erCWzD3vFwIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFHvk7Zt+F+5nrmqAOWw+tSi9AKWsMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvZS1UdG0zNFg3bWV1YW9BNWJENjFLTDBBcGF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQABVOWAwQA
Ba+OAwQABa/cAwQABedSAwQATVoHAwQATVonAwQATVo0AwQATVo6AwQAWWpGAwQA
WZAZAwQBWZAiAwQAWZA8MA0GCSqGSIb3DQEBCwUAA4IBAQAPw8yBL0Qvy82ouV5L
y4wVhRbK32Ej0kzXrkTNwfQnzaNXyStEM7kcDLl8aSGzA7pTT5Mn0F5T3eQSZ2rt
4ahhmFMSdhKi1k5aONPiyFi8P+gNLY64FrH98pySMYCafZEXDt2S5lW3q0pdF0IO
OVf0unNZplHpiSBFVIoT9O/T9zvoRZVhyTQcTmhRjjlvCbSEEsuteyGGz2wBGwHR
t8MQUw1xErjYbWflkZ8ZJjJMCUtNYi7yHKTOMeXQxjbvoeAQKfzBGv3wlSxAIPIf
DUfhnWntBjvtx0r6sRtRzOq9mIsn+KOEPwJ/gNe2BtB368mRt/ejzSzq5sadCCeQ
ORjQ
-----END CERTIFICATE-----
Generated at Sat Apr 12 03:23:01 2025 by rpki-client