Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/oB1kRbXoyEwyFCbIYkUdrHukGeM.roa
File: oB1kRbXoyEwyFCbIYkUdrHukGeM.roa (raw, json)
Hash identifier: 1z6P7YkBZWJ35IEPAWncN85JyqVACkRsV2hHpmEi92g=
Subject key identifier: A0:1D:64:45:B5:E8:C8:4C:32:14:26:C8:62:45:1D:AC:7B:A4:19:E3
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01945D84CC67432E8EC7985F3E6DC9A435AA
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/oB1kRbXoyEwyFCbIYkUdrHukGeM.roa
Signing time: Mon 13 Jan 2025 02:36:11 +0000
ROA not before: Mon 13 Jan 2025 02:36:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 5.83.129.0/24 maxlen: 24
77.90.54.0/24 maxlen: 24
87.239.130.0/24 maxlen: 24
87.239.131.0/24 maxlen: 24
89.106.69.0/24 maxlen: 24
94.103.163.0/24 maxlen: 24
94.103.164.0/24 maxlen: 24
94.249.153.0/24 maxlen: 24
94.249.158.0/24 maxlen: 24
94.249.195.0/24 maxlen: 24
94.249.212.0/24 maxlen: 24
94.249.214.0/24 maxlen: 24
94.249.215.0/24 maxlen: 24
94.249.237.0/24 maxlen: 24
95.215.32.0/24 maxlen: 24
95.215.34.0/24 maxlen: 24
178.18.144.0/24 maxlen: 24
185.13.156.0/24 maxlen: 24
185.13.159.0/24 maxlen: 24
185.47.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:5d:84:cc:67:43:2e:8e:c7:98:5f:3e:6d:c9:a4:35:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 13 02:36:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a01d6445b5e8c84c321426c862451dac7ba419e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:aa:e5:03:ae:c3:da:bb:94:e1:23:a0:5d:70:
0d:24:66:d9:b0:87:0d:18:6a:24:7d:c8:42:4c:64:
d2:95:79:2c:c5:47:f5:24:57:9e:64:54:79:1b:98:
4f:16:bd:81:74:0b:f9:fe:40:58:58:d2:b1:54:3f:
c9:19:77:96:0a:dc:5d:d0:84:67:a2:6f:87:54:de:
79:81:78:8a:3e:29:25:c3:f1:38:74:4f:cb:68:34:
42:fd:65:fb:9d:4c:45:af:71:9e:34:e7:85:40:4d:
83:20:b0:76:f4:b6:17:52:be:a1:90:cd:09:a9:ae:
38:39:d1:50:ac:be:de:df:86:6b:d0:40:0d:bd:42:
45:c2:d9:be:8c:eb:a1:c5:97:90:47:aa:2a:30:a0:
85:f8:a2:c8:d2:1c:20:af:86:c8:c4:5e:b3:b3:eb:
8a:04:58:c0:7d:b5:75:20:9c:41:a1:81:0a:c3:4f:
29:31:0a:d3:2d:d2:1e:3c:43:16:23:2a:3a:c2:19:
4b:9c:45:a2:84:34:01:ae:de:d8:0b:4d:af:3e:39:
a9:72:fd:5e:60:92:47:8e:f7:cf:18:dd:fa:90:23:
c8:cf:22:d9:39:db:0a:67:27:98:37:87:41:35:70:
ea:75:49:a9:21:b6:07:d6:a2:0c:c0:7e:ec:f7:48:
06:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:1D:64:45:B5:E8:C8:4C:32:14:26:C8:62:45:1D:AC:7B:A4:19:E3
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/oB1kRbXoyEwyFCbIYkUdrHukGeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.129.0/24
77.90.54.0/24
87.239.130.0/23
89.106.69.0/24
94.103.163.0-94.103.164.255
94.249.153.0/24
94.249.158.0/24
94.249.195.0/24
94.249.212.0/24
94.249.214.0/23
94.249.237.0/24
95.215.32.0/24
95.215.34.0/24
178.18.144.0/24
185.13.156.0/24
185.13.159.0/24
185.47.143.0/24
Signature Algorithm: sha256WithRSAEncryption
19:66:37:f3:5b:80:63:d9:6e:aa:d4:b3:90:8f:3d:47:b2:68:
96:2e:97:fb:89:35:1a:a9:f1:5c:a0:29:f5:60:95:80:26:49:
d1:6d:e8:65:07:f8:4c:c1:bd:16:d8:d9:ed:65:5a:44:cc:9e:
80:7d:b8:9f:79:a1:58:27:0c:cd:58:b4:ef:89:16:8d:56:97:
67:76:6e:43:16:9b:19:31:3f:9e:ef:34:4d:88:f8:36:cb:8d:
40:8c:4c:79:a9:42:87:0b:13:72:e8:64:39:78:b3:d8:7b:8b:
21:6c:7d:a8:1d:7b:50:67:01:6e:b7:15:21:d0:10:1a:6d:fa:
39:1c:1e:17:fa:3a:2d:67:87:dc:73:d5:0a:8a:18:87:4e:a0:
44:a6:4c:5d:4b:8f:16:33:f0:ba:67:11:a5:b1:3e:6b:3d:83:
6f:9d:20:0f:07:88:62:a2:9a:c2:fb:69:62:f9:da:97:e5:9d:
fa:c7:b9:8f:b9:67:7b:90:02:c3:28:d1:f6:be:c2:59:c7:6b:
a2:cf:f0:69:b6:ae:a1:12:c2:47:0f:57:98:19:10:5b:09:b9:
ee:3c:f1:78:a1:27:99:f4:c6:74:83:4d:c0:24:5a:ee:d0:6b:
04:27:4a:1b:5c:8e:7e:eb:ad:22:ff:25:c1:db:4c:aa:c5:f8:
c7:94:e0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:20:34 2025 by rpki-client