Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/GYW1w5H1fCSzQGMUGm7AC3JBs8Y.roa
File: GYW1w5H1fCSzQGMUGm7AC3JBs8Y.roa (raw, json)
Hash identifier: V0EcLMC4XuDYJ/kvpzV/Rsop4ueur69Fmxw85x9DMqY=
Subject key identifier: 19:85:B5:C3:91:F5:7C:24:B3:40:63:14:1A:6E:C0:0B:72:41:B3:C6
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0195EEDF5C2D14A4BC5F968DFC2F6176006E
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/GYW1w5H1fCSzQGMUGm7AC3JBs8Y.roa
Signing time: Tue 01 Apr 2025 01:02:50 +0000
ROA not before: Tue 01 Apr 2025 01:02:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214902
IP address blocks: 5.83.147.0/24 maxlen: 24
5.231.28.0/24 maxlen: 24
5.231.45.0/24 maxlen: 24
77.90.6.0/24 maxlen: 24
77.90.19.0/24 maxlen: 24
77.90.43.0/24 maxlen: 24
77.90.45.0/24 maxlen: 24
85.93.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ee:df:5c:2d:14:a4:bc:5f:96:8d:fc:2f:61:76:00:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 1 01:02:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1985b5c391f57c24b34063141a6ec00b7241b3c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c3:fa:31:36:2e:6b:44:f9:17:b6:46:f1:d1:
77:65:19:74:46:69:3a:54:40:d5:1a:0c:ec:90:db:
9e:fb:5b:a6:53:c4:15:44:5a:8e:65:8e:00:33:5c:
01:ab:15:e3:65:5b:d1:15:f2:18:c6:f3:e6:e4:9e:
3e:fa:72:4f:d6:7e:a5:71:9b:f1:35:ab:ea:e1:33:
7e:ee:ce:b8:54:b9:42:d1:06:f8:6b:f5:b2:78:96:
84:ab:b7:15:31:50:e6:61:bf:32:c2:12:ed:ec:12:
7f:5b:ad:9d:9c:a1:c8:15:75:c9:33:29:15:85:68:
df:02:9e:39:c1:bf:5c:33:79:74:72:94:33:b7:d2:
09:43:4a:64:ae:bb:82:ee:b1:eb:da:57:5f:6b:23:
52:03:78:fa:17:49:02:f5:54:44:e2:aa:d6:ec:8e:
c4:55:4d:26:7d:81:8f:6b:01:7b:ed:b1:e3:4f:f2:
b3:09:7f:c6:ce:83:f1:bc:4d:34:e7:1b:7c:51:17:
d8:8b:e9:0e:5a:f2:16:5d:f5:38:82:6d:b0:e1:52:
f5:4b:63:c1:3b:f2:7a:ad:b0:37:86:95:b4:fc:ea:
13:7c:8d:53:ba:3c:8d:1a:41:90:94:5f:f1:65:6b:
85:04:32:c3:12:f4:27:82:74:3a:bf:f8:bc:0e:df:
2e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:85:B5:C3:91:F5:7C:24:B3:40:63:14:1A:6E:C0:0B:72:41:B3:C6
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/GYW1w5H1fCSzQGMUGm7AC3JBs8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.147.0/24
5.231.28.0/24
5.231.45.0/24
77.90.6.0/24
77.90.19.0/24
77.90.43.0/24
77.90.45.0/24
85.93.9.0/24
Signature Algorithm: sha256WithRSAEncryption
65:dc:11:6b:23:25:d6:8f:aa:e4:ec:ef:69:f1:48:6f:4b:a7:
fd:10:bc:a9:9d:d2:5c:cd:c1:d9:2a:7b:8f:be:4c:5e:32:97:
04:f8:b5:f0:a7:63:aa:2f:6f:9e:83:b6:bf:4d:46:d1:32:fd:
f4:d2:e9:f0:cc:94:66:5c:c5:bd:96:34:b5:3f:06:56:54:ec:
c4:5a:a1:35:89:43:ad:92:93:ba:e4:83:62:7b:a9:6c:38:65:
44:70:23:c2:38:72:9e:01:01:83:39:1f:b0:8e:b1:b5:00:b2:
5f:c8:d8:b4:e4:9d:37:0d:d3:3b:87:d3:36:49:ab:fe:8f:5c:
3e:cf:5b:b6:f5:f2:aa:4a:c7:58:19:63:ab:cb:85:e0:0b:6b:
81:69:c1:69:3e:79:49:9d:a8:bf:fc:f3:1c:5d:91:b6:c1:0c:
a4:5d:e6:0e:49:4e:3b:93:57:c8:0e:c5:09:cd:d5:57:c9:95:
54:b0:24:70:d2:84:ea:5f:24:66:69:1c:36:6f:13:0c:9e:d3:
42:97:eb:56:b5:59:45:b0:16:89:0f:f0:44:a2:64:66:cc:87:
54:ef:46:9d:10:17:70:72:f2:ee:10:62:4e:01:a7:98:2b:28:
b8:d6:bd:71:bc:e7:b0:4b:79:7b:93:c5:e9:a6:49:bc:2c:95:
1e:2c:3c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:01 2025 by rpki-client on console.sobornost.net