Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/vOpvfQFFvhfe-Bv6gd1abOxSYnA.roa
File: vOpvfQFFvhfe-Bv6gd1abOxSYnA.roa (raw, json)
Hash identifier: G2tgxlh6kaIzqEurqcIWRTxTQda7esvTgCEWdmT/El8=
Subject key identifier: BC:EA:6F:7D:01:45:BE:17:DE:F8:1B:FA:81:DD:5A:6C:EC:52:62:70
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194B524FA0EEF6617706F395A368233B1C4
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/vOpvfQFFvhfe-Bv6gd1abOxSYnA.roa
Signing time: Thu 30 Jan 2025 02:58:06 +0000
ROA not before: Thu 30 Jan 2025 02:58:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 5.83.153.0/24 maxlen: 24
77.90.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b5:24:fa:0e:ef:66:17:70:6f:39:5a:36:82:33:b1:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 30 02:58:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bcea6f7d0145be17def81bfa81dd5a6cec526270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c6:c5:81:d2:4b:cf:ad:82:91:93:25:ae:17:
2b:e3:51:0e:b6:50:e1:48:a9:be:43:74:57:62:6d:
c2:9d:1c:ac:c5:44:5c:34:fa:9f:ac:ed:0d:97:28:
e2:66:e9:3e:60:e9:05:8d:cd:c1:7a:fa:55:a7:10:
64:41:3d:26:44:a6:b2:4c:4a:2f:c3:5b:96:a3:15:
fc:cb:0a:0e:57:d5:b9:22:bd:3c:f1:43:26:1e:7c:
b5:c8:67:19:1b:a4:56:29:c5:c0:4d:54:c6:e7:16:
36:35:ec:11:e0:c8:f4:bb:4e:3a:d9:2f:d9:41:70:
5c:a9:ce:d5:5d:76:c3:a8:6c:83:20:3f:35:4b:cb:
c5:7e:bb:c5:33:61:c4:e6:44:17:ff:f9:15:9a:21:
84:fb:16:0c:59:59:4a:25:49:ae:47:3b:ef:40:06:
7d:cd:de:6d:38:c8:0b:9b:4c:2e:14:a0:b6:16:50:
ba:b3:00:57:75:c3:d6:db:e5:d2:55:60:04:b3:9b:
0e:52:85:ac:f6:5b:08:44:56:f8:af:68:73:ca:cd:
6b:0a:ce:10:ad:2b:54:ff:a6:9a:25:3a:3a:23:68:
f7:a7:1a:93:6a:33:08:15:04:29:ef:5c:1a:45:a5:
02:d6:de:68:1b:36:b9:94:cc:99:39:b4:94:86:94:
49:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:EA:6F:7D:01:45:BE:17:DE:F8:1B:FA:81:DD:5A:6C:EC:52:62:70
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/vOpvfQFFvhfe-Bv6gd1abOxSYnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.153.0/24
77.90.49.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:7f:c7:00:73:75:05:be:86:5b:b3:19:42:26:4d:dc:7b:9c:
46:19:77:e9:a3:1a:a5:4d:77:a6:8d:13:87:5d:b9:4b:a8:57:
79:9e:20:88:b2:30:6c:23:0b:56:fb:58:8e:40:2b:2c:65:48:
2b:e6:a7:78:c5:2c:82:e4:ca:8b:75:98:8a:6a:df:4a:f9:e2:
ff:37:db:10:0d:66:4e:f4:54:a2:69:16:34:aa:ab:ad:31:e2:
c3:16:8a:ca:73:23:74:b3:b4:33:25:ae:17:8d:35:d1:f6:8d:
5b:a8:82:40:05:1d:57:c9:84:97:2a:25:44:7b:8e:a5:5d:c1:
67:0e:a6:5d:e3:73:33:c8:b5:c9:82:68:15:32:75:da:3e:c8:
f2:99:6e:97:70:29:04:f7:44:0e:8a:ac:15:6f:c6:e7:0f:d7:
ad:b7:01:2e:b9:29:52:78:4c:91:6e:2e:79:fb:50:0c:a4:fd:
95:9e:68:c8:b6:61:50:34:ba:b1:26:75:4b:63:0d:23:ea:3e:
04:43:43:3e:b8:e7:f8:d6:8c:5d:98:84:12:2d:68:05:5a:74:
60:e8:5e:77:d9:60:b7:52:01:f2:ee:db:3b:2c:48:06:03:ac:
b0:7c:93:67:60:15:b7:f8:c4:3e:4e:51:94:4e:09:00:a6:01:
66:6f:35:12
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZS1JPoO72YXcG85WjaCM7HEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwMTMwMDI1ODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiY2VhNmY3ZDAxNDViZTE3ZGVmODFiZmE4MWRkNWE2Y2VjNTI2MjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8bFgdJLz62CkZMlrhcr41EOtlDh
SKm+Q3RXYm3CnRysxURcNPqfrO0NlyjiZuk+YOkFjc3BevpVpxBkQT0mRKayTEov
w1uWoxX8ywoOV9W5Ir088UMmHny1yGcZG6RWKcXATVTG5xY2NewR4Mj0u0462S/Z
QXBcqc7VXXbDqGyDID81S8vFfrvFM2HE5kQX//kVmiGE+xYMWVlKJUmuRzvvQAZ9
zd5tOMgLm0wuFKC2FlC6swBXdcPW2+XSVWAEs5sOUoWs9lsIRFb4r2hzys1rCs4Q
rStU/6aaJTo6I2j3pxqTajMIFQQp71waRaUC1t5oGza5lMyZObSUhpRJ5QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLzqb30BRb4X3vgb+oHdWmzsUmJwMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvdk9wdmZRRkZ2aGZlLUJ2NmdkMWFiT3hTWW5BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABVOZAwQA
TVoxMA0GCSqGSIb3DQEBCwUAA4IBAQDMf8cAc3UFvoZbsxlCJk3ce5xGGXfpoxql
TXemjROHXblLqFd5niCIsjBsIwtW+1iOQCssZUgr5qd4xSyC5MqLdZiKat9K+eL/
N9sQDWZO9FSiaRY0qqutMeLDForKcyN0s7QzJa4XjTXR9o1bqIJABR1XyYSXKiVE
e46lXcFnDqZd43MzyLXJgmgVMnXaPsjymW6XcCkE90QOiqwVb8bnD9ettwEuuSlS
eEyRbi55+1AMpP2VnmjItmFQNLqxJnVLYw0j6j4EQ0M+uOf41oxdmIQSLWgFWnRg
6F532WC3UgHy7ts7LEgGA6ywfJNnYBW3+MQ+TlGUTgkApgFmbzUS
-----END CERTIFICATE-----
Generated at Sat Apr 12 03:12:49 2025 by rpki-client