Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_ukY4uqli3s3BtaBE4p8hL3saoo.roa
File: _ukY4uqli3s3BtaBE4p8hL3saoo.roa (raw, json)
Hash identifier: k5U/O5z97DPjmtZvON8gfWB3SovcnkX+cMIOxQhbWNM=
Subject key identifier: FE:E9:18:E2:EA:A5:8B:7B:37:06:D6:81:13:8A:7C:84:BD:EC:6A:8A
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019618BB545D07AF86EDE07E6A054378CBAD
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_ukY4uqli3s3BtaBE4p8hL3saoo.roa
Signing time: Wed 09 Apr 2025 04:07:32 +0000
ROA not before: Wed 09 Apr 2025 04:07:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36352
IP address blocks: 5.83.139.0/24 maxlen: 24
77.90.7.0/24 maxlen: 24
89.144.3.0/24 maxlen: 24
94.103.168.0/24 maxlen: 24
95.215.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:18:bb:54:5d:07:af:86:ed:e0:7e:6a:05:43:78:cb:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 9 04:07:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fee918e2eaa58b7b3706d681138a7c84bdec6a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f9:be:c9:09:bb:33:62:8b:98:be:25:2e:2d:
5e:21:34:d2:e7:4e:59:58:38:a0:02:ee:e0:ca:8a:
d1:21:a2:e3:ff:e5:78:7d:71:9c:d1:d9:94:78:6a:
8d:a1:15:4f:12:71:37:e6:77:e9:c0:03:04:29:2c:
d5:da:48:15:e6:7b:21:66:26:06:f2:16:ec:9f:3f:
6e:f4:e7:e2:64:1e:2e:3c:08:bd:da:3c:12:a2:4b:
92:04:94:bd:11:8c:a4:42:de:fe:19:bc:6b:77:0f:
4f:eb:85:8b:a0:4e:6f:42:f7:c0:04:85:3a:8c:c4:
3d:8b:b8:75:9b:f4:92:c8:b9:52:c9:d2:c5:77:18:
5d:3d:1e:a7:a0:ff:ef:17:f2:4f:6c:92:15:6f:7a:
62:d5:ad:e5:a5:15:2e:51:c9:6d:3b:71:79:e5:af:
83:39:39:a6:93:ae:28:e4:f3:04:cd:20:61:2b:61:
aa:b1:b6:ae:1d:1f:a3:b4:c4:7f:39:40:e7:8c:7e:
ae:7c:68:c6:83:13:d4:d5:04:2d:db:78:dc:18:cc:
5f:7c:7a:43:70:c1:01:e4:14:18:ed:fe:20:dc:40:
3f:fd:68:d4:59:57:51:21:05:b2:9d:54:0b:c9:18:
b6:61:b9:e4:24:2c:b6:60:cc:52:a2:f6:c1:bd:17:
10:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E9:18:E2:EA:A5:8B:7B:37:06:D6:81:13:8A:7C:84:BD:EC:6A:8A
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_ukY4uqli3s3BtaBE4p8hL3saoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.139.0/24
77.90.7.0/24
89.144.3.0/24
94.103.168.0/24
95.215.33.0/24
Signature Algorithm: sha256WithRSAEncryption
34:84:37:1c:33:80:19:29:d5:2b:0a:22:87:de:59:ee:3e:92:
35:db:4a:87:18:38:a4:8b:77:fd:a3:ed:8e:c5:41:21:e4:18:
d7:cc:c7:28:aa:83:56:4a:ce:af:cb:6c:7d:17:f2:e9:81:f5:
03:2c:9d:12:91:64:07:d7:32:20:33:40:ad:2f:99:09:4a:08:
a7:69:4c:91:73:e6:f0:1e:6a:ce:89:6b:c7:37:14:46:f6:28:
fb:59:60:90:e3:1c:d5:d3:e2:95:70:66:c3:7f:22:90:1f:d0:
d4:0c:43:38:f8:52:48:6d:30:89:1c:f8:fe:13:28:dd:cc:9f:
60:88:f1:2d:0a:6c:ee:43:90:f0:d3:99:a5:70:73:e4:9a:ab:
0e:e5:92:aa:d3:91:9a:1f:6e:80:86:4d:e1:e2:69:60:82:98:
c7:6b:a3:0c:68:7f:af:c6:4f:c3:9a:24:11:6f:4b:0c:19:9d:
e1:17:43:73:ba:85:b8:7b:a0:22:a8:d0:09:04:f8:0f:b9:91:
2f:e8:fb:24:49:23:58:54:bc:01:61:49:63:4e:a8:21:26:19:
d0:a2:0b:a0:d9:aa:70:76:f6:b8:a8:3d:13:34:57:4b:21:dc:
0e:d4:96:1d:e1:ec:ed:01:9a:55:9c:6d:8a:6a:4d:6e:28:08:
d2:1f:48:ae
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZYYu1RdB6+G7eB+agVDeMutMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwNDA5MDQwNzMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZWU5MThlMmVhYTU4YjdiMzcwNmQ2ODExMzhhN2M4NGJkZWM2YThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPm+yQm7M2KLmL4lLi1eITTS505Z
WDigAu7gyorRIaLj/+V4fXGc0dmUeGqNoRVPEnE35nfpwAMEKSzV2kgV5nshZiYG
8hbsnz9u9OfiZB4uPAi92jwSokuSBJS9EYykQt7+Gbxrdw9P64WLoE5vQvfABIU6
jMQ9i7h1m/SSyLlSydLFdxhdPR6noP/vF/JPbJIVb3pi1a3lpRUuUcltO3F55a+D
OTmmk64o5PMEzSBhK2GqsbauHR+jtMR/OUDnjH6ufGjGgxPU1QQt23jcGMxffHpD
cMEB5BQY7f4g3EA//WjUWVdRIQWynVQLyRi2YbnkJCy2YMxSovbBvRcQHwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFP7pGOLqpYt7NwbWgROKfIS97GqKMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvX3VrWTR1cWxpM3MzQnRhQkU0cDhoTDNzYW9vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQABVOLAwQA
TVoHAwQAWZADAwQAXmeoAwQAX9chMA0GCSqGSIb3DQEBCwUAA4IBAQA0hDccM4AZ
KdUrCiKH3lnuPpI120qHGDiki3f9o+2OxUEh5BjXzMcoqoNWSs6vy2x9F/LpgfUD
LJ0SkWQH1zIgM0CtL5kJSginaUyRc+bwHmrOiWvHNxRG9ij7WWCQ4xzV0+KVcGbD
fyKQH9DUDEM4+FJIbTCJHPj+EyjdzJ9giPEtCmzuQ5Dw05mlcHPkmqsO5ZKq05Ga
H26Ahk3h4mlggpjHa6MMaH+vxk/DmiQRb0sMGZ3hF0NzuoW4e6AiqNAJBPgPuZEv
6PskSSNYVLwBYUljTqghJhnQogug2apwdva4qD0TNFdLIdwO1JYd4eztAZpVnG2K
ak1uKAjSH0iu
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:01 2025 by rpki-client on console.sobornost.net