Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/y75ItfuyJFpvh9SUFcaTXSH5Qgw.roa
File: y75ItfuyJFpvh9SUFcaTXSH5Qgw.roa (raw, json)
Hash identifier: soU0bwXJLFOUVPmL1zT8c5EZRbmyBdDy5uzw8S5IziQ=
Subject key identifier: CB:BE:48:B5:FB:B2:24:5A:6F:87:D4:94:15:C6:93:5D:21:F9:42:0C
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01958FAFAF0DF43F4F9F6ECDAC8BA4ECBCC9
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/y75ItfuyJFpvh9SUFcaTXSH5Qgw.roa
Signing time: Thu 13 Mar 2025 13:26:50 +0000
ROA not before: Thu 13 Mar 2025 13:26:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58212
IP address blocks: 5.83.150.0/24 maxlen: 24
5.175.142.0/24 maxlen: 24
5.175.220.0/24 maxlen: 24
5.231.70.0/24 maxlen: 24
5.231.82.0/24 maxlen: 24
77.90.22.0/24 maxlen: 24
77.90.39.0/24 maxlen: 24
77.90.41.0/24 maxlen: 24
77.90.52.0/24 maxlen: 24
77.90.58.0/24 maxlen: 24
89.106.70.0/24 maxlen: 24
89.144.16.0/24 maxlen: 24
89.144.25.0/24 maxlen: 24
89.144.34.0/24 maxlen: 24
89.144.35.0/24 maxlen: 24
89.144.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:af:af:0d:f4:3f:4f:9f:6e:cd:ac:8b:a4:ec:bc:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 13 13:26:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cbbe48b5fbb2245a6f87d49415c6935d21f9420c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8b:fe:29:94:83:93:44:4b:83:fc:65:92:9c:
89:ca:3a:29:7a:89:14:79:36:b2:83:3f:7b:1a:c5:
38:6a:49:f0:af:8e:5e:b8:da:56:9f:64:c8:6b:f0:
0f:3b:ac:4f:c6:a1:86:a4:01:02:49:7f:b3:87:6d:
a6:d7:88:da:a8:e7:ce:19:31:80:c2:86:32:06:c9:
b5:e9:42:27:ac:a2:79:5c:52:3b:a6:e0:f5:b6:6c:
5e:f2:4f:fc:9a:1d:98:13:0f:9f:c5:e9:81:5a:4b:
68:cf:cc:f7:37:89:3e:b0:f6:a1:7c:d8:d1:42:29:
89:53:23:d1:32:f1:de:93:bf:a2:31:9c:c7:b6:56:
a8:16:10:bf:48:67:66:1b:da:c4:f0:4f:4c:27:58:
37:23:30:67:0f:8d:cb:6c:16:b7:0e:aa:3d:fe:5a:
67:bc:f5:76:3e:9b:1f:ca:f6:e9:92:54:bf:6c:1a:
e6:50:82:de:4b:1a:10:60:6f:8e:bf:9b:86:ac:ca:
4e:a6:0b:f7:fe:5a:43:85:87:96:e8:b7:a6:20:47:
04:76:af:b4:db:12:15:0d:d7:97:ec:b5:d2:f4:b3:
31:1d:1e:9c:07:dc:f1:2c:f0:e1:cc:13:22:c2:82:
93:85:8d:fe:f6:9f:b9:6c:cd:0e:c5:02:6e:a7:a9:
99:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:BE:48:B5:FB:B2:24:5A:6F:87:D4:94:15:C6:93:5D:21:F9:42:0C
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/y75ItfuyJFpvh9SUFcaTXSH5Qgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.150.0/24
5.175.142.0/24
5.175.220.0/24
5.231.70.0/24
5.231.82.0/24
77.90.22.0/24
77.90.39.0/24
77.90.41.0/24
77.90.52.0/24
77.90.58.0/24
89.106.70.0/24
89.144.16.0/24
89.144.25.0/24
89.144.34.0/23
89.144.60.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:81:b5:a9:37:49:c2:d2:66:fc:67:bf:66:17:b0:34:c2:56:
77:81:0b:6f:59:37:3a:96:ec:75:6f:93:f6:5f:50:2f:71:83:
ff:1a:1d:a9:61:bc:ab:8e:8d:1d:16:2e:38:f1:97:6f:70:23:
50:b3:90:04:16:07:49:a7:a8:5c:84:13:86:3d:3b:44:03:b3:
c4:53:46:ab:64:c0:09:20:3f:ac:fd:82:11:da:03:23:c4:53:
7b:b0:8b:89:3a:3a:26:cc:3d:db:fb:13:c1:17:56:28:f5:3a:
fa:62:7b:64:da:ea:8b:37:21:ab:84:4d:46:ac:0a:e4:1c:6b:
62:a5:9c:71:34:f6:6a:b7:1c:71:53:33:21:69:28:75:1e:8d:
60:e9:80:f1:24:96:26:67:12:e8:72:d0:ff:fe:d8:0b:8c:ce:
53:25:3e:12:34:8e:aa:f2:69:d0:67:ce:6a:11:51:3c:e8:d7:
58:f8:66:44:d6:55:b2:92:75:fa:a2:35:2e:2c:a8:0c:dc:42:
ab:87:c1:a3:21:5c:a2:b7:5e:64:f8:c5:83:5a:93:bb:2f:c5:
56:bd:47:13:07:ae:41:b4:e2:3c:ab:e2:2a:da:06:dd:d9:a7:
a6:3d:12:c0:b5:87:36:e1:c4:10:99:c3:77:71:c4:f2:56:5a:
1e:87:f1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:30:20 2025 by rpki-client