Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/zwYQa4CuIc1Y2wXVOyoGO--7cmE.roa
File: zwYQa4CuIc1Y2wXVOyoGO--7cmE.roa (raw, json)
Hash identifier: KEyGXFMS95BFX3LywKu2sFEvRzz1nshKkbR0c2UmuoU=
Subject key identifier: CF:06:10:6B:80:AE:21:CD:58:DB:05:D5:3B:2A:06:3B:EF:BB:72:61
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019403CA54AEE6FF12AD276DCE03DCC78DFB
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/zwYQa4CuIc1Y2wXVOyoGO--7cmE.roa
Signing time: Thu 26 Dec 2024 16:26:19 +0000
ROA not before: Thu 26 Dec 2024 16:26:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 5.83.129.0/24 maxlen: 24
5.175.138.0/24 maxlen: 24
77.90.54.0/24 maxlen: 24
87.239.130.0/24 maxlen: 24
87.239.131.0/24 maxlen: 24
89.106.69.0/24 maxlen: 24
94.103.163.0/24 maxlen: 24
94.249.148.0/24 maxlen: 24
94.249.153.0/24 maxlen: 24
94.249.212.0/24 maxlen: 24
94.249.237.0/24 maxlen: 24
95.215.32.0/24 maxlen: 24
95.215.34.0/24 maxlen: 24
185.13.159.0/24 maxlen: 24
185.47.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:03:ca:54:ae:e6:ff:12:ad:27:6d:ce:03:dc:c7:8d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Dec 26 16:26:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cf06106b80ae21cd58db05d53b2a063befbb7261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f3:3b:3d:2a:e4:b5:15:da:b7:ed:c7:50:ed:
bd:0b:5c:2f:a8:b7:ce:fa:a0:85:c2:dd:56:1c:8f:
88:c1:7b:5a:04:5f:80:4f:72:a3:94:13:70:d7:c2:
d0:ec:cb:aa:7e:16:f7:a7:19:b9:c1:ba:24:95:b1:
8c:1d:1c:2f:8c:37:5e:19:e8:20:06:f8:3f:3e:12:
5d:bc:3b:6d:62:88:e3:f1:50:e0:31:38:08:92:cf:
f1:19:d5:50:bc:5c:9a:7d:5c:bd:a9:a2:b4:c4:f0:
08:be:58:7a:05:d2:3e:99:60:ea:c4:16:e6:13:2d:
ce:de:20:f2:9a:60:c2:c6:1e:da:90:2f:bb:ba:54:
88:95:cd:59:3a:eb:7d:d4:c8:4a:9a:f1:2e:71:0d:
5c:89:00:89:e2:2f:a7:1e:74:b8:2d:ef:76:4a:bf:
41:f5:13:92:0f:6e:1e:c4:45:0d:41:c8:f8:b8:73:
5b:82:d8:2c:54:91:2c:af:58:75:6e:99:fb:e7:a3:
3f:ca:e6:ca:7c:5c:6b:e2:d9:fa:82:bc:dd:85:d6:
76:8c:02:71:49:11:eb:f7:fa:48:8f:9a:70:7c:39:
b4:24:cf:24:98:73:52:c2:0e:7b:99:4e:51:53:0e:
d3:57:b5:59:0a:a0:7f:15:08:99:fe:d4:e8:34:11:
83:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:06:10:6B:80:AE:21:CD:58:DB:05:D5:3B:2A:06:3B:EF:BB:72:61
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/zwYQa4CuIc1Y2wXVOyoGO--7cmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.129.0/24
5.175.138.0/24
77.90.54.0/24
87.239.130.0/23
89.106.69.0/24
94.103.163.0/24
94.249.148.0/24
94.249.153.0/24
94.249.212.0/24
94.249.237.0/24
95.215.32.0/24
95.215.34.0/24
185.13.159.0/24
185.47.143.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:8c:db:41:90:64:43:20:d0:4c:74:2a:91:9a:c4:41:e0:80:
db:7e:79:e4:07:43:ce:05:91:b6:b9:92:b8:71:f3:77:aa:76:
93:20:20:6d:e1:f0:7f:3a:7d:b2:67:75:af:3e:b2:74:68:85:
bc:9a:f5:1b:01:d0:1f:40:5a:f2:a8:6d:91:4d:ab:3f:24:3b:
87:58:50:19:b4:ac:ec:61:8d:0d:1c:ba:f7:60:ab:93:5f:95:
ba:8a:21:73:90:6f:6a:f3:4c:a0:14:9b:84:df:99:b3:7d:d8:
9a:8a:67:8c:8d:b3:f6:ad:39:ab:c1:52:c5:db:68:5e:e5:fa:
70:ad:ac:4d:c0:50:a2:87:5e:c6:20:59:fa:69:31:8f:b0:24:
c1:d8:34:f1:ec:c1:17:26:f6:64:bd:62:d3:e5:e6:d5:8b:1d:
30:ec:50:93:5d:63:02:ea:26:58:84:66:8b:b6:3f:d5:31:ea:
5c:9b:2b:48:51:ce:be:c7:32:8a:d6:36:a2:b7:51:0f:35:96:
05:f8:95:e0:f0:fd:7a:14:96:18:cc:62:da:68:62:8e:3b:3b:
d1:bb:5e:e5:90:6e:52:5e:fa:e0:4c:27:70:39:46:2b:ab:25:
c8:42:d0:74:66:4c:1d:06:74:7b:8c:8f:9b:30:f1:00:b3:91:
b7:ec:66:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:22:59 2025 by rpki-client