Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/i01vDxyJF9kYpuOC78jDhnb_xnY.roa
File: i01vDxyJF9kYpuOC78jDhnb_xnY.roa (raw, json)
Hash identifier: AbnaQnGy7l5b1GJAhh4SNMeesMnfwqO9xlcHkTqf3X4=
Subject key identifier: 8B:4D:6F:0F:1C:89:17:D9:18:A6:E3:82:EF:C8:C3:86:76:FF:C6:76
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0195D7F0FE91281BBAF7C44096DE641E8787
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/i01vDxyJF9kYpuOC78jDhnb_xnY.roa
Signing time: Thu 27 Mar 2025 14:10:50 +0000
ROA not before: Thu 27 Mar 2025 14:10:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215828
IP address blocks: 5.83.148.0/24 maxlen: 24
77.90.25.0/24 maxlen: 24
94.249.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d7:f0:fe:91:28:1b:ba:f7:c4:40:96:de:64:1e:87:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 27 14:10:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b4d6f0f1c8917d918a6e382efc8c38676ffc676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:05:8c:77:02:af:1c:81:d5:93:0c:cf:ca:27:
c1:74:54:11:7f:2b:48:ac:5d:b3:95:17:03:b1:0c:
fd:60:b6:ba:36:f9:ce:8b:ba:e0:99:38:7b:f2:34:
55:45:7b:a7:38:bf:89:de:98:bb:e7:4a:ac:7a:de:
80:71:26:5d:06:40:c1:54:40:c6:c7:48:d0:28:ce:
4e:9d:05:09:3a:b3:07:32:c4:5b:e5:5d:7c:3e:a4:
78:05:76:7b:4f:3a:5f:d6:37:c2:42:f3:e4:4b:fe:
de:3b:da:4f:50:a2:34:4a:28:bf:7a:ca:87:94:de:
6f:b7:8c:b2:13:1d:83:cb:6e:f5:a3:b1:61:a0:e5:
e5:34:bf:00:ce:66:fa:3d:d3:40:67:66:77:74:72:
13:06:71:86:fc:37:0d:79:36:e0:d1:1a:6b:43:20:
08:d0:63:14:db:e5:c5:99:af:21:53:f7:15:14:8e:
b2:47:e2:77:40:68:d4:da:7e:df:6e:9b:f4:55:1d:
c9:72:67:0e:aa:d4:28:26:f9:e2:ea:c7:58:fa:e3:
73:98:06:a8:00:3b:27:63:be:db:7d:d3:9c:77:9d:
0b:3a:cc:e2:1a:50:ca:bb:82:ee:a9:ea:67:90:04:
27:16:b1:8e:a7:8c:b6:0b:58:3f:8c:c4:67:c3:5c:
4c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:4D:6F:0F:1C:89:17:D9:18:A6:E3:82:EF:C8:C3:86:76:FF:C6:76
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/i01vDxyJF9kYpuOC78jDhnb_xnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.148.0/24
77.90.25.0/24
94.249.138.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:21:c4:ff:cf:1e:c0:e3:c6:8c:6d:11:24:d3:6e:70:70:dd:
72:47:aa:02:0a:68:2e:01:50:4c:da:f6:7a:69:04:c6:b4:87:
a7:0a:79:5b:50:2d:6a:43:29:5f:77:94:1b:19:0b:91:79:2b:
c5:f2:08:91:c5:06:5f:f5:e3:01:50:93:10:c1:53:ba:e4:5c:
7d:3f:aa:9f:9f:00:b0:6a:be:96:46:f1:cb:e1:8e:12:ed:1b:
2e:92:a3:ea:19:45:0b:3e:29:32:4e:81:4a:e3:be:fc:1f:b7:
51:71:02:24:70:f9:9a:34:d2:d2:07:94:36:c0:a1:34:ea:0e:
e3:96:82:48:23:31:55:48:7e:6c:4b:5d:d6:e9:be:8d:f1:9d:
aa:5f:53:bd:e3:dc:b7:d0:62:a1:17:57:a9:d7:22:c9:71:13:
05:b6:98:95:7a:c2:7d:36:8c:07:b3:61:07:82:18:9f:0d:c2:
fd:9a:e1:c5:29:3d:7b:d6:70:72:79:a4:8e:d1:50:17:88:19:
71:4d:23:aa:6e:85:ac:58:f2:34:5d:ab:07:27:b7:bb:5f:47:
93:5e:11:d4:8d:b5:84:65:16:4f:eb:b3:46:df:14:7a:06:29:
a9:64:8d:66:c5:01:22:12:b1:99:49:a8:46:0c:e5:61:4c:59:
be:65:6d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 11:07:24 2025 by rpki-client