Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ojyJ6u2rEc5iYSaz1iTnVtiSHBI.roa
File: ojyJ6u2rEc5iYSaz1iTnVtiSHBI.roa (raw, json)
Hash identifier: FdGRnmrmKCFrxo9JRzqn9ybDQ+No4BxvEaeKKj4LTDQ=
Subject key identifier: A2:3C:89:EA:ED:AB:11:CE:62:61:26:B3:D6:24:E7:56:D8:92:1C:12
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01955878673285FF793BC6004C44FD164F08
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ojyJ6u2rEc5iYSaz1iTnVtiSHBI.roa
Signing time: Sun 02 Mar 2025 20:07:20 +0000
ROA not before: Sun 02 Mar 2025 20:07:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 5.83.129.0/24 maxlen: 24
5.175.138.0/24 maxlen: 24
77.90.54.0/24 maxlen: 24
87.239.131.0/24 maxlen: 24
94.103.163.0/24 maxlen: 24
94.249.195.0/24 maxlen: 24
94.249.215.0/24 maxlen: 24
95.215.32.0/24 maxlen: 24
95.215.34.0/24 maxlen: 24
178.18.144.0/24 maxlen: 24
185.13.156.0/24 maxlen: 24
217.69.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:58:78:67:32:85:ff:79:3b:c6:00:4c:44:fd:16:4f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 2 20:07:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a23c89eaedab11ce626126b3d624e756d8921c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ec:e6:31:02:cb:3c:88:78:19:0b:de:ff:65:
64:33:ad:08:f7:5b:5d:45:53:00:29:e1:dd:75:39:
28:d6:67:7b:27:6c:7c:67:85:54:12:c3:1f:eb:41:
b0:96:22:05:15:58:8e:e2:c0:0a:94:a8:fe:cb:22:
06:d5:8a:fb:61:a6:5a:f7:44:2a:b6:d8:31:ab:36:
e7:76:9b:32:b4:dd:5c:95:a3:82:76:e0:6c:43:68:
bb:90:62:76:78:f9:b7:f7:7b:42:a5:a8:a1:70:2a:
1a:b5:54:ca:02:3b:50:48:ee:6b:e2:c1:f0:f2:74:
4e:2f:11:00:09:de:bf:dc:03:98:68:01:5d:dc:f1:
93:cc:aa:b4:41:82:72:92:88:a0:02:7a:88:8e:ae:
3d:af:d9:07:0f:67:95:47:2f:8a:e8:1e:0c:f1:18:
a9:0c:93:13:c7:a9:32:6a:15:b7:e7:e3:1a:bb:fe:
79:aa:33:f4:78:39:7b:e0:73:ef:ec:83:ee:d8:c8:
f2:6b:e0:e8:78:05:74:8c:5a:c8:10:d9:6d:54:f0:
a1:4c:ff:1f:88:e7:d6:0d:33:d3:a9:54:d4:ad:dc:
72:f9:fc:65:0f:1f:6c:a1:f3:c6:29:cc:da:7a:22:
db:3c:b6:f9:44:40:0a:ad:4e:bf:c4:bd:8b:31:98:
81:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:3C:89:EA:ED:AB:11:CE:62:61:26:B3:D6:24:E7:56:D8:92:1C:12
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ojyJ6u2rEc5iYSaz1iTnVtiSHBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.129.0/24
5.175.138.0/24
77.90.54.0/24
87.239.131.0/24
94.103.163.0/24
94.249.195.0/24
94.249.215.0/24
95.215.32.0/24
95.215.34.0/24
178.18.144.0/24
185.13.156.0/24
217.69.166.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:c1:69:a6:ab:da:99:21:4b:0b:fa:02:fa:0b:ea:31:be:e6:
39:48:82:a3:37:b4:72:cf:80:f1:86:fa:b4:c7:2d:74:de:e0:
26:94:4d:79:1d:47:d3:a3:72:af:f7:2d:09:f1:3b:11:87:ea:
02:ef:a2:4b:e5:8b:6b:aa:cf:46:f0:b1:48:c5:2e:6d:e9:af:
e3:b4:59:51:fe:c5:7b:29:53:b7:73:0f:55:07:4b:7f:c8:51:
56:1e:91:5a:32:e4:44:31:74:c0:1a:33:7b:41:ab:90:26:db:
0b:01:8a:e0:c2:23:22:ac:08:6a:55:e3:a2:df:d8:0e:6e:ca:
3e:b9:09:10:6a:49:34:61:c6:89:d2:9d:20:6c:35:97:3a:90:
1f:8f:96:8b:d9:ca:59:94:2a:d8:d0:e1:c8:51:44:5b:0d:16:
1d:0a:11:35:62:1c:1d:b2:45:c8:5b:10:22:4f:4d:8f:5c:84:
1c:f5:0f:43:65:00:ef:a3:2a:28:65:dd:2c:1a:7f:9b:b5:76:
2d:88:a1:ba:8e:fa:07:90:4c:b2:04:23:d7:31:28:a6:db:d4:
97:c7:a0:e2:90:76:36:f5:bb:65:0d:d1:5d:04:39:34:d9:c1:
14:f1:b8:c4:b8:49:20:85:43:bf:e2:68:55:b0:fa:80:d1:f7:
13:b8:42:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:25:18 2025 by rpki-client