Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/i09pw2BhgFM8OPkdRH2maIInHLM.roa
File: i09pw2BhgFM8OPkdRH2maIInHLM.roa (raw, json)
Hash identifier: 4iRUfyb5K8uVoLZInEmBUCIFCEaGA28YxcjgTh5Jj+U=
Subject key identifier: 8B:4F:69:C3:60:61:80:53:3C:38:F9:1D:44:7D:A6:68:82:27:1C:B3
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0193B422D93025168791511E7B212E47C911
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/i09pw2BhgFM8OPkdRH2maIInHLM.roa
Signing time: Wed 11 Dec 2024 05:13:22 +0000
ROA not before: Wed 11 Dec 2024 05:13:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 5.83.129.0/24 maxlen: 24
77.90.54.0/24 maxlen: 24
87.239.131.0/24 maxlen: 24
94.249.138.0/24 maxlen: 24
94.249.153.0/24 maxlen: 24
94.249.212.0/24 maxlen: 24
94.249.237.0/24 maxlen: 24
185.47.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b4:22:d9:30:25:16:87:91:51:1e:7b:21:2e:47:c9:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Dec 11 05:13:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b4f69c3606180533c38f91d447da66882271cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:30:c0:98:9e:93:04:4c:52:56:77:9c:80:41:
3f:22:f0:21:65:f7:13:74:2e:4b:d8:29:11:94:3a:
dc:80:46:73:33:8a:fc:d8:ba:6e:a9:66:be:4f:39:
a3:bf:2b:47:b1:23:1e:b3:87:18:f6:e4:36:1a:bd:
b1:c4:79:cd:16:32:7e:4d:9a:02:d4:9c:5c:1a:64:
3e:d9:a2:7e:cf:06:14:c5:86:ee:a2:e7:7e:55:fe:
57:cb:74:5d:22:42:87:bb:e7:11:95:95:04:7b:5f:
6f:41:c7:9b:d1:71:63:da:6d:0c:80:4d:1d:d9:59:
0b:6d:47:94:a9:cb:9b:36:f9:4e:ee:c1:3e:8f:2e:
f4:5b:27:de:69:30:64:a3:f6:b6:18:39:65:d5:98:
32:38:f3:fe:17:30:77:e5:47:92:4e:6a:ec:08:9e:
6c:f7:6f:76:14:d3:9c:68:77:d5:cc:5d:07:8e:1b:
02:8e:ef:10:01:40:fa:73:ee:5f:20:ed:b3:4d:ec:
39:56:74:cd:b5:64:9f:32:35:1f:27:aa:08:1f:1e:
67:fe:64:18:2b:b3:1a:f0:84:40:8f:87:2f:15:8f:
71:01:12:fa:4c:bc:d8:d3:2e:1f:61:62:d7:38:67:
d1:68:1d:3f:a7:ac:b9:31:2c:67:e6:76:9d:ed:8e:
eb:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:4F:69:C3:60:61:80:53:3C:38:F9:1D:44:7D:A6:68:82:27:1C:B3
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/i09pw2BhgFM8OPkdRH2maIInHLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.129.0/24
77.90.54.0/24
87.239.131.0/24
94.249.138.0/24
94.249.153.0/24
94.249.212.0/24
94.249.237.0/24
185.47.143.0/24
Signature Algorithm: sha256WithRSAEncryption
12:3e:4f:a6:83:2b:1d:19:bd:2d:88:4b:64:b9:8d:c0:b1:43:
31:8a:9b:5d:95:bb:b8:87:c3:e9:94:6a:7a:f6:ca:df:67:f3:
8b:a8:65:65:c5:62:98:fb:ac:9b:43:6f:e8:ab:72:82:df:5b:
70:de:11:ac:d0:57:ef:3f:40:09:a6:a5:da:90:bf:df:4c:d5:
90:8c:e3:9e:b6:2e:ba:33:c0:17:ef:e8:c9:83:7d:64:ad:b6:
35:2d:dc:e9:87:1e:5f:e4:ac:d7:af:31:f8:06:4c:98:eb:dc:
2e:34:ea:a9:ff:4e:d2:6d:48:7d:0f:d8:a6:09:4f:d2:f5:5b:
92:64:9a:6f:3e:c4:84:3d:ae:42:b3:1a:c1:c9:b5:f3:58:eb:
c5:3c:50:08:af:1e:08:a8:18:02:52:c7:51:7c:8f:55:43:7a:
e7:dc:ac:e0:29:2c:5b:b5:ed:fa:da:e3:e5:2e:cb:e8:4c:0a:
c4:d5:93:46:2e:0f:1c:31:2f:38:d4:10:c0:a3:89:81:d9:77:
11:f0:b5:76:f3:29:a1:d2:b4:7f:b1:15:c3:1f:39:8b:d8:91:
c9:42:d8:0c:fa:bf:b5:74:42:c4:46:bd:2e:d2:06:8d:70:a8:
89:40:27:c8:65:ce:19:a3:c5:e9:2e:27:bc:7c:78:3c:7f:fa:
ba:91:4c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:25:29 2025 by rpki-client