Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/SAgNfRxoLbgBEDbU-6ncovKJhHw.roa
File: SAgNfRxoLbgBEDbU-6ncovKJhHw.roa (raw, json)
Hash identifier: QeEI4esZGWqS8Qe01K8/o0HdADfE+Fnrwkcr+x1KDtc=
Subject key identifier: 48:08:0D:7D:1C:68:2D:B8:01:10:36:D4:FB:A9:DC:A2:F2:89:84:7C
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0196230CA13F79477CD551C11BFA3B34619A
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/SAgNfRxoLbgBEDbU-6ncovKJhHw.roa
Signing time: Fri 11 Apr 2025 04:12:32 +0000
ROA not before: Fri 11 Apr 2025 04:12:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44486
IP address blocks: 5.83.145.0/24 maxlen: 24
77.90.3.0/24 maxlen: 24
77.90.28.0/24 maxlen: 24
89.144.6.0/24 maxlen: 24
89.144.30.0/24 maxlen: 24
89.144.31.0/24 maxlen: 24
89.144.33.0/24 maxlen: 24
89.144.42.0/24 maxlen: 24
89.144.43.0/24 maxlen: 24
89.144.44.0/24 maxlen: 24
89.144.46.0/24 maxlen: 24
89.144.47.0/24 maxlen: 24
89.144.48.0/24 maxlen: 24
89.144.49.0/24 maxlen: 24
89.144.50.0/24 maxlen: 24
89.144.51.0/24 maxlen: 24
89.144.52.0/24 maxlen: 24
89.144.53.0/24 maxlen: 24
89.144.54.0/24 maxlen: 24
89.144.55.0/24 maxlen: 24
89.144.58.0/24 maxlen: 24
89.144.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:23:0c:a1:3f:79:47:7c:d5:51:c1:1b:fa:3b:34:61:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 11 04:12:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48080d7d1c682db8011036d4fba9dca2f289847c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fd:22:3c:f1:ce:50:12:e9:33:ec:d5:67:20:
68:5b:8b:2b:89:ef:08:ce:77:33:ed:fb:6f:38:4a:
01:90:13:bb:e0:b3:67:75:51:dd:3f:7d:95:14:fa:
34:cc:be:e0:87:28:0b:83:75:c6:73:e9:6a:02:21:
23:ae:d9:e5:f0:b9:9e:08:bc:aa:cf:f5:1d:68:1f:
93:f9:d8:1f:1a:3d:d5:d5:47:ba:a3:7a:b5:09:6a:
1b:b9:13:b8:01:b3:1b:60:8c:0e:33:e1:6e:fd:74:
f1:8a:a0:ad:ab:6e:71:4e:9b:22:9d:cc:cb:36:60:
c9:e9:cb:52:fc:bf:e1:67:74:ea:19:a1:fc:8d:29:
89:2b:05:31:26:b6:13:be:57:bb:5b:6f:06:f6:5c:
ac:25:87:f4:1b:1f:d2:5b:86:58:10:24:5e:85:a7:
b7:0c:09:f2:58:49:b6:53:d3:32:2b:a9:85:29:aa:
29:76:3c:a8:db:d5:c8:5d:cd:ee:ef:50:4f:e7:67:
cb:83:92:c5:eb:2f:ee:aa:bc:f6:1f:99:25:35:5d:
5c:e9:a3:73:d9:cd:81:36:a4:44:d1:66:cb:c2:3c:
6c:30:02:9b:fc:7a:36:13:54:66:3e:c8:ad:7d:3a:
9a:77:30:99:66:01:8f:a2:76:d4:b2:e1:33:c8:d8:
cd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:08:0D:7D:1C:68:2D:B8:01:10:36:D4:FB:A9:DC:A2:F2:89:84:7C
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/SAgNfRxoLbgBEDbU-6ncovKJhHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.145.0/24
77.90.3.0/24
77.90.28.0/24
89.144.6.0/24
89.144.30.0/23
89.144.33.0/24
89.144.42.0-89.144.44.255
89.144.46.0-89.144.55.255
89.144.58.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:2b:80:93:cf:4d:8a:90:32:42:07:7a:cc:81:82:ce:1b:4f:
e1:6e:3c:41:2f:fe:1f:03:b8:3b:80:33:35:42:7f:dd:8a:bf:
41:24:58:41:7a:45:af:6d:f1:66:a1:f5:4b:37:65:27:0d:de:
f7:43:c3:d6:f0:c4:77:d2:71:2f:61:60:0b:9d:9e:99:77:ba:
1f:b1:53:ea:ee:60:05:1d:73:13:38:f3:c3:95:52:e1:e2:b1:
20:ae:b5:58:fd:d4:6a:22:f3:0e:9c:2d:d8:ea:ea:94:98:ed:
89:78:5c:f1:84:0e:58:62:6e:e1:18:b0:17:9f:06:ac:dc:2d:
23:93:37:f0:9c:84:56:ec:c6:18:33:f1:c4:d5:66:a6:e5:10:
55:8d:a1:43:71:55:c1:3a:98:dd:b9:48:9a:3d:0b:d5:25:01:
80:3f:d6:58:0f:52:bb:ab:01:67:b6:3f:51:f3:9c:ab:ce:34:
bd:8a:4f:e7:fc:d3:d8:1b:e7:6c:5e:cb:cf:ed:89:29:56:00:
10:d0:9f:4b:66:10:e1:b4:33:a9:39:ba:c1:d2:6d:c5:f9:65:
3b:76:f0:6e:df:e8:30:d3:37:8e:51:a4:fb:fe:4d:69:41:e2:
52:b7:50:48:f1:22:0a:bf:e6:8c:4b:80:5d:96:a0:d7:b0:95:
25:a4:17:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:01 2025 by rpki-client on console.sobornost.net