Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/gWkJ8sZMKtUd9lw9LLAUZAfgc7s.roa
File: gWkJ8sZMKtUd9lw9LLAUZAfgc7s.roa (raw, json)
Hash identifier: TZeugf7hu1TYrCuVYjUubhyjk22cxWkHLCd+lUYhgys=
Subject key identifier: 81:69:09:F2:C6:4C:2A:D5:1D:F6:5C:3D:2C:B0:14:64:07:E0:73:BB
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194B9725AAAD30FA98B6B5025DD7F940D31
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/gWkJ8sZMKtUd9lw9LLAUZAfgc7s.roa
Signing time: Thu 30 Jan 2025 23:01:06 +0000
ROA not before: Thu 30 Jan 2025 23:01:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207252
IP address blocks: 5.83.152.0/24 maxlen: 24
5.231.29.0/24 maxlen: 24
5.231.70.0/24 maxlen: 24
77.90.12.0/24 maxlen: 24
77.90.22.0/24 maxlen: 24
77.90.33.0/24 maxlen: 24
77.90.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b9:72:5a:aa:d3:0f:a9:8b:6b:50:25:dd:7f:94:0d:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 30 23:01:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=816909f2c64c2ad51df65c3d2cb0146407e073bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:80:a6:bd:c0:4b:a4:39:1c:c7:f8:5b:0f:43:
42:c0:2d:bc:22:be:79:f3:e6:77:b4:ba:b3:68:19:
0b:ed:3c:b0:64:0f:8d:73:9f:47:62:70:d5:4f:87:
07:89:b6:7a:90:da:14:fb:0f:49:18:d3:3a:10:3a:
68:d9:58:0c:7a:af:92:ba:ce:ed:02:94:d7:a7:37:
f7:dd:81:4d:32:4c:8a:93:6e:a7:28:a1:06:40:a0:
7b:2f:aa:89:f5:49:4b:91:41:71:7f:c8:91:50:c4:
d5:d9:ff:05:c9:7d:d4:eb:77:f9:b4:f5:38:ed:6f:
eb:cd:c8:38:00:a5:a7:41:91:13:b6:b1:b6:bc:69:
74:5f:c4:3f:59:65:44:5f:d8:b6:5a:42:63:4a:2e:
7d:d8:13:cf:da:37:d7:39:4b:13:1b:58:2e:8b:40:
e8:fd:ff:20:8b:64:f0:4f:3e:12:f7:74:4e:51:9e:
2c:8e:e0:5c:6b:03:32:27:e0:4a:b4:6d:60:ca:f1:
ca:bb:e2:d4:8e:6e:de:45:67:6c:67:48:96:2d:4e:
eb:31:35:19:25:0a:98:1b:88:e7:ba:94:f7:15:3e:
fc:5f:30:dd:d6:3f:90:27:81:dd:3d:45:0b:95:3f:
57:96:02:e4:13:36:23:13:16:05:b9:7e:3f:3f:d4:
7c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:69:09:F2:C6:4C:2A:D5:1D:F6:5C:3D:2C:B0:14:64:07:E0:73:BB
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/gWkJ8sZMKtUd9lw9LLAUZAfgc7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.152.0/24
5.231.29.0/24
5.231.70.0/24
77.90.12.0/24
77.90.22.0/24
77.90.33.0/24
77.90.42.0/24
Signature Algorithm: sha256WithRSAEncryption
15:99:12:b0:e0:9c:9a:54:cb:ee:9d:29:89:bc:c0:e2:0a:28:
e7:f6:9b:83:01:c7:ff:e9:14:85:da:fe:dd:a4:1e:9c:31:cd:
65:cc:3c:83:a4:1d:77:5c:e0:f8:04:d0:d9:99:e7:fa:7d:20:
18:c1:16:ea:d8:c3:7b:b6:32:15:43:03:b9:0e:d6:b0:ff:79:
a5:5f:1a:b4:2e:4a:9f:47:7e:bb:a2:5b:a5:3f:10:cd:5c:73:
9a:9b:21:39:60:e2:a8:c3:80:bd:6b:0d:cd:3d:0c:4c:7f:b8:
2e:a0:a1:ac:ce:8c:6c:78:b5:30:11:f2:96:39:13:56:08:6d:
12:00:50:6a:d4:27:30:01:2d:8f:ba:78:dd:5d:26:e8:1d:e4:
f5:58:b8:21:98:aa:f8:44:e0:88:52:81:fb:b8:d0:b4:63:53:
a1:78:40:1c:bf:5e:9a:53:7b:bd:26:16:17:32:8f:2a:12:91:
f6:8d:a7:3e:52:56:19:22:29:84:b5:23:0a:35:b4:42:80:59:
da:79:21:69:b1:1d:ab:67:09:38:c6:8a:aa:ec:68:f0:fc:e8:
90:dc:a7:a6:f5:ee:b6:32:85:94:7b:5b:8d:20:6f:1d:28:da:
ff:41:31:14:bf:eb:9c:d1:b6:1d:81:c3:af:f9:dc:f9:5d:3d:
0a:8d:b1:80
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZS5clqq0w+pi2tQJd1/lA0xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwMTMwMjMwMTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTY5MDlmMmM2NGMyYWQ1MWRmNjVjM2QyY2IwMTQ2NDA3ZTA3M2JiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYCmvcBLpDkcx/hbD0NCwC28Ir55
8+Z3tLqzaBkL7TywZA+Nc59HYnDVT4cHibZ6kNoU+w9JGNM6EDpo2VgMeq+Sus7t
ApTXpzf33YFNMkyKk26nKKEGQKB7L6qJ9UlLkUFxf8iRUMTV2f8FyX3U63f5tPU4
7W/rzcg4AKWnQZETtrG2vGl0X8Q/WWVEX9i2WkJjSi592BPP2jfXOUsTG1gui0Do
/f8gi2TwTz4S93ROUZ4sjuBcawMyJ+BKtG1gyvHKu+LUjm7eRWdsZ0iWLU7rMTUZ
JQqYG4jnupT3FT78XzDd1j+QJ4HdPUULlT9XlgLkEzYjExYFuX4/P9R8lQIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFIFpCfLGTCrVHfZcPSywFGQH4HO7MB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvZ1drSjhzWk1LdFVkOWx3OUxMQVVaQWZnYzdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQABVOYAwQA
BecdAwQABedGAwQATVoMAwQATVoWAwQATVohAwQATVoqMA0GCSqGSIb3DQEBCwUA
A4IBAQAVmRKw4JyaVMvunSmJvMDiCijn9puDAcf/6RSF2v7dpB6cMc1lzDyDpB13
XOD4BNDZmef6fSAYwRbq2MN7tjIVQwO5Dtaw/3mlXxq0LkqfR367olulPxDNXHOa
myE5YOKow4C9aw3NPQxMf7guoKGszoxseLUwEfKWORNWCG0SAFBq1CcwAS2Punjd
XSboHeT1WLghmKr4ROCIUoH7uNC0Y1OheEAcv16aU3u9JhYXMo8qEpH2jac+UlYZ
IimEtSMKNbRCgFnaeSFpsR2rZwk4xoqq7Gjw/OiQ3Kem9e62MoWUe1uNIG8dKNr/
QTEUv+uc0bYdgcOv+dz5XT0KjbGA
-----END CERTIFICATE-----
Generated at Sat Apr 12 03:20:38 2025 by rpki-client