Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/dJBz3U_PbeoSua0TVMj30rKTUUs.roa
File: dJBz3U_PbeoSua0TVMj30rKTUUs.roa (raw, json)
Hash identifier: KV3BkMXTJNpiwmgM/7W7h9kVfuj1Z5nBhbcON7gYBco=
Subject key identifier: 74:90:73:DD:4F:CF:6D:EA:12:B9:AD:13:54:C8:F7:D2:B2:93:51:4B
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01962C061DAC364108FBBDD601332D1B941C
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/dJBz3U_PbeoSua0TVMj30rKTUUs.roa
Signing time: Sat 12 Apr 2025 22:02:00 +0000
ROA not before: Sat 12 Apr 2025 22:02:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211066
IP address blocks: 5.83.134.0/24 maxlen: 24
5.175.140.0/24 maxlen: 24
85.118.162.0/24 maxlen: 24
89.144.17.0/24 maxlen: 24
89.144.18.0/24 maxlen: 24
89.144.22.0/24 maxlen: 24
94.103.163.0/24 maxlen: 24
94.249.213.0/24 maxlen: 24
94.249.214.0/24 maxlen: 24
185.13.159.0/24 maxlen: 24
185.47.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2c:06:1d:ac:36:41:08:fb:bd:d6:01:33:2d:1b:94:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 12 22:02:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=749073dd4fcf6dea12b9ad1354c8f7d2b293514b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:81:fb:66:13:2b:16:ea:d3:f2:c2:bf:18:3f:
6f:9f:48:a2:3c:38:55:35:71:41:19:2e:e4:66:09:
e3:d3:cb:d6:0b:7f:ca:e6:c9:25:3e:32:95:03:fd:
aa:ed:79:63:84:3d:ae:61:40:e7:f9:86:a3:43:58:
a6:a7:e0:e0:c5:15:2f:ca:3a:a6:e5:88:36:00:c3:
38:bd:11:ec:a0:d4:2d:c3:1e:15:6f:e0:3f:59:66:
7b:0b:6c:0a:11:9a:b0:9e:4d:98:8a:fc:0a:ec:e9:
ba:04:eb:d0:94:7e:22:37:2f:d6:54:61:77:f5:57:
27:54:ed:22:b7:05:87:e1:22:f3:22:41:2e:24:3e:
f9:95:82:ac:c4:a7:2e:2e:64:52:4d:53:ef:61:90:
b4:f5:3b:23:97:69:46:ef:8b:fa:1a:78:22:1d:91:
05:5b:b1:a4:59:d2:85:58:92:5b:b9:9f:93:18:18:
cd:68:23:30:64:22:76:e1:bc:cd:b1:ec:61:0d:6c:
d3:9c:f3:e1:5d:5b:50:fc:38:bd:33:00:7f:a8:20:
1d:76:34:0c:6f:85:84:13:d0:e2:59:8a:c6:6e:1e:
33:5b:b7:5a:6d:d1:8e:2b:a7:dd:b7:03:31:42:a2:
c7:a0:85:d7:24:be:1c:9f:8f:71:1d:bb:f5:e9:55:
9a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:90:73:DD:4F:CF:6D:EA:12:B9:AD:13:54:C8:F7:D2:B2:93:51:4B
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/dJBz3U_PbeoSua0TVMj30rKTUUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.134.0/24
5.175.140.0/24
85.118.162.0/24
89.144.17.0-89.144.18.255
89.144.22.0/24
94.103.163.0/24
94.249.213.0-94.249.214.255
185.13.159.0/24
185.47.143.0/24
Signature Algorithm: sha256WithRSAEncryption
73:c4:e6:ee:2a:6b:e5:9f:1e:ed:97:54:d8:31:dc:87:61:e0:
df:22:7c:c0:06:02:58:65:ea:72:fb:2b:ea:5b:78:fb:f0:49:
b7:3f:41:0f:65:1a:6c:00:d0:ca:37:94:05:5b:fa:48:43:62:
e9:13:a6:d3:9e:71:95:24:42:60:7f:dd:57:f0:5b:de:54:a4:
22:c2:8d:67:d1:31:e0:67:fa:fa:32:55:eb:2e:91:16:f1:40:
3a:bc:34:ab:ec:18:55:c4:f0:93:61:03:5f:9a:4b:c1:a1:53:
35:fd:1f:6d:06:c3:14:ea:82:b8:86:41:1e:19:38:ea:67:14:
5a:1b:6a:46:ec:82:14:ff:78:fb:40:ff:53:42:9d:d8:1b:1c:
f5:7f:fb:9d:56:1a:10:79:c6:ca:b4:cb:16:4f:de:00:a4:d5:
05:53:b1:f5:ca:b8:d2:0e:11:35:83:5a:eb:73:a9:c7:50:d4:
87:16:9a:b8:d7:13:62:e6:9e:db:8c:bf:f6:de:e9:14:b6:09:
18:96:87:8c:4e:99:48:c8:7c:06:f7:34:3a:fa:23:df:97:b6:
53:c4:71:c5:b9:77:8b:a0:0e:60:d4:3d:09:a9:17:0e:95:36:
ad:c8:72:f9:35:09:57:91:8b:c3:e5:a4:d2:2b:7d:2c:7b:0d:
c4:a2:55:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:01 2025 by rpki-client on console.sobornost.net