Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/iSUFoEoY9-RI-VwYGZLz1f8-a3U.roa
File: iSUFoEoY9-RI-VwYGZLz1f8-a3U.roa (raw, json)
Hash identifier: o30NgkYYiCE9sul3DmnNTGnq00WzUMvnhTo7g5IHsoE=
Subject key identifier: 89:25:05:A0:4A:18:F7:E4:48:F9:5C:18:19:92:F3:D5:FF:3E:6B:75
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194AB4D71A027A0802EAE3DF477400FBF32
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/iSUFoEoY9-RI-VwYGZLz1f8-a3U.roa
Signing time: Tue 28 Jan 2025 05:06:06 +0000
ROA not before: Tue 28 Jan 2025 05:06:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 5.83.129.0/24 maxlen: 24
5.175.138.0/24 maxlen: 24
77.90.54.0/24 maxlen: 24
87.239.131.0/24 maxlen: 24
89.106.69.0/24 maxlen: 24
94.103.163.0/24 maxlen: 24
94.103.164.0/24 maxlen: 24
94.249.148.0/24 maxlen: 24
94.249.153.0/24 maxlen: 24
94.249.195.0/24 maxlen: 24
94.249.212.0/24 maxlen: 24
94.249.214.0/24 maxlen: 24
94.249.237.0/24 maxlen: 24
95.215.32.0/24 maxlen: 24
95.215.34.0/24 maxlen: 24
178.18.144.0/24 maxlen: 24
185.13.156.0/24 maxlen: 24
185.13.159.0/24 maxlen: 24
185.47.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ab:4d:71:a0:27:a0:80:2e:ae:3d:f4:77:40:0f:bf:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 28 05:06:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=892505a04a18f7e448f95c181992f3d5ff3e6b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b0:36:72:f1:0a:0d:95:86:59:9f:e5:5d:6b:
42:26:0e:ba:65:42:67:66:e3:82:f9:b5:37:20:a9:
e9:39:7d:d2:2b:ac:35:e0:35:e4:8d:d2:5d:38:92:
df:e3:63:00:bf:97:af:a5:5c:1c:fd:75:d8:a6:52:
eb:87:5a:09:e7:47:1f:ba:c4:45:c4:b6:bb:db:69:
14:30:f3:a4:bd:1f:09:c3:dc:7e:6d:0b:8f:e2:bb:
73:6c:d9:a8:d9:23:76:d7:03:43:c1:b0:1b:0a:f7:
91:24:ea:20:7b:63:40:3b:19:3b:96:33:e6:52:f9:
e4:40:eb:83:ce:d0:6b:46:a6:39:5d:c9:db:9f:dc:
70:8a:64:2e:bc:13:87:3c:1c:a0:79:95:7b:06:85:
3e:24:c9:10:70:ae:d5:14:32:43:76:f3:af:8c:ea:
fa:2d:85:2b:aa:9f:1b:ba:5a:dc:43:c9:4a:7b:31:
02:46:91:8f:1e:84:4f:25:b7:df:62:87:55:09:05:
9c:b8:74:1e:a0:a3:6b:2a:77:14:a1:36:ea:b0:68:
c4:c4:32:f3:26:06:39:4d:cb:cd:81:38:0d:96:88:
b6:76:ba:d6:ef:83:04:6b:55:13:50:24:b2:42:95:
a2:22:1e:81:7f:1f:99:06:e1:0c:9d:c2:59:69:76:
1e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:25:05:A0:4A:18:F7:E4:48:F9:5C:18:19:92:F3:D5:FF:3E:6B:75
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/iSUFoEoY9-RI-VwYGZLz1f8-a3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.129.0/24
5.175.138.0/24
77.90.54.0/24
87.239.131.0/24
89.106.69.0/24
94.103.163.0-94.103.164.255
94.249.148.0/24
94.249.153.0/24
94.249.195.0/24
94.249.212.0/24
94.249.214.0/24
94.249.237.0/24
95.215.32.0/24
95.215.34.0/24
178.18.144.0/24
185.13.156.0/24
185.13.159.0/24
185.47.143.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:aa:43:8a:76:18:27:64:f8:6b:95:a7:bc:70:97:29:0a:0f:
11:17:a9:63:d3:2f:46:63:fe:fb:8c:dc:ea:66:66:f6:5b:57:
e7:dc:9d:9a:97:dc:73:ce:86:67:f4:dc:96:f3:a7:50:ee:50:
c7:2e:49:57:50:ee:b8:95:8c:32:12:ab:f5:47:95:0f:95:95:
10:f1:e1:dd:3a:88:44:30:e4:94:99:96:40:46:18:e1:e1:c5:
e1:ec:2a:84:fb:dc:bc:53:94:f0:e1:d1:ec:a6:da:2d:f3:e3:
95:74:96:1a:c1:8e:ac:1f:0f:7e:2e:38:15:44:81:6b:51:99:
76:67:a0:e3:ca:5c:36:0c:9f:2d:24:4e:66:4d:3f:f5:a8:b7:
6e:0e:e2:ba:75:68:b5:a8:ce:17:48:92:eb:37:00:de:9b:96:
ca:b4:50:fc:e8:da:19:d0:0d:57:d0:68:df:3f:9d:c8:4c:14:
21:69:d0:9b:68:95:36:b2:09:c0:8a:aa:bf:83:21:74:73:aa:
5e:87:bf:7c:fc:ce:21:bb:e9:76:27:c0:f7:37:45:45:f3:f9:
13:39:0c:c3:3b:a5:79:3a:25:48:73:a1:18:05:6e:b6:37:f8:
3a:ab:cc:88:63:ca:23:27:57:0e:d6:73:d1:a1:91:ec:2c:05:
e1:ca:99:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:16:06 2025 by rpki-client