Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1-ECW7rv9Lf6qcXFzw-mlddcY8HI.roa
File: 1-ECW7rv9Lf6qcXFzw-mlddcY8HI.roa (raw, json)
Hash identifier: sr1VobtzQhBLexw69E/RkzoAFdR/HFIeuF+krxd9v+E=
Subject key identifier: F8:40:96:EE:BB:FD:2D:FE:AA:71:71:73:C3:E9:A5:75:D7:18:F0:72
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01961445F0DC2C6F02B6B95308544A35FA5B
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1-ECW7rv9Lf6qcXFzw-mlddcY8HI.roa
Signing time: Tue 08 Apr 2025 07:20:50 +0000
ROA not before: Tue 08 Apr 2025 07:20:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48314
IP address blocks: 5.175.233.0/24 maxlen: 24
77.90.0.0/24 maxlen: 24
77.90.2.0/24 maxlen: 24
77.90.8.0/24 maxlen: 24
77.90.13.0/24 maxlen: 24
77.90.51.0/24 maxlen: 24
87.239.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:14:45:f0:dc:2c:6f:02:b6:b9:53:08:54:4a:35:fa:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 8 07:20:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f84096eebbfd2dfeaa717173c3e9a575d718f072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6c:bc:98:d9:8a:87:26:74:f2:65:34:14:42:
7e:b4:fc:f5:8c:4f:c3:35:59:6b:49:7e:a5:d5:40:
71:fd:78:08:94:e3:9e:4c:75:b7:47:88:32:53:13:
4d:a8:38:e2:74:33:ea:8b:a0:ff:ca:6e:0e:4e:f2:
1e:d9:e8:72:24:87:d4:a5:60:7c:a1:e9:3d:ab:7c:
c8:a7:0e:61:78:a3:28:db:d2:b0:a9:e5:30:c3:80:
02:da:ce:8d:41:e3:3c:1b:fa:1f:73:f9:c1:03:47:
5d:57:6d:3b:4a:e8:ed:e1:bb:75:f2:36:0f:3b:c3:
84:9d:2b:04:8c:e7:06:f8:8c:49:20:76:25:a2:68:
73:24:8c:b2:d8:d3:ab:e3:58:44:ff:17:4d:6f:ed:
e8:92:30:9f:db:28:bd:2b:78:1a:61:8e:44:34:1f:
0d:bf:3d:b5:17:c8:57:ae:f3:cf:48:1c:3b:e3:4d:
ac:00:6e:a0:ea:cd:d4:b6:05:21:78:56:ee:18:94:
8a:ed:54:c4:b0:e5:b5:86:9a:d9:dd:61:43:08:88:
48:bf:01:d9:20:d4:6a:fb:c9:26:23:e0:27:51:50:
15:7e:2b:0d:59:9f:4d:5f:c4:ea:36:5c:9d:7b:a6:
30:6b:38:5a:ba:b1:2d:5a:67:d0:b4:a5:17:11:a2:
2a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:40:96:EE:BB:FD:2D:FE:AA:71:71:73:C3:E9:A5:75:D7:18:F0:72
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1-ECW7rv9Lf6qcXFzw-mlddcY8HI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.233.0/24
77.90.0.0/24
77.90.2.0/24
77.90.8.0/24
77.90.13.0/24
77.90.51.0/24
87.239.130.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:c9:19:5d:1a:f6:ab:df:a9:10:76:29:1b:31:a0:d5:8a:9f:
1e:fe:35:d5:e1:98:48:a3:74:b5:84:75:c9:9d:ff:cf:45:41:
f5:44:b4:2e:59:45:37:45:ff:63:e7:ed:7b:a8:4c:20:c6:95:
5f:71:d4:90:bf:2e:64:1a:7a:2a:fa:6c:a5:d4:73:66:5c:0a:
2f:35:e2:ee:ab:df:6a:3f:39:10:32:50:50:78:2e:81:d3:00:
a4:b4:9d:ba:f7:95:91:77:52:f0:22:83:a6:d2:66:36:f7:d2:
ac:93:9b:eb:13:0a:0e:cf:cb:8a:b8:ec:47:8d:eb:06:d9:5b:
2c:3e:8d:9b:d3:f6:36:49:f4:71:11:a3:ef:e7:bc:88:59:61:
51:f5:5e:78:00:6d:87:b7:8d:43:fb:86:ac:56:0a:57:a1:bc:
a2:43:64:47:7b:87:25:ec:cc:2c:a1:07:f7:02:c4:d7:7c:af:
8f:46:33:8f:50:81:eb:35:ab:b5:c4:2b:41:95:af:81:51:ce:
30:95:78:c8:77:85:22:61:a9:a3:87:8d:89:54:b2:55:43:78:
32:9f:f2:d1:c9:6c:9c:92:3d:60:33:d7:28:83:70:f8:7c:04:
4b:2a:91:a6:d2:f5:93:42:69:c1:9a:9d:c5:5f:01:8c:84:85:
5e:84:af:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:01 2025 by rpki-client on console.sobornost.net