Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/dP7pr_BxlGy0kqiAOM548tlWjio.roa
File: dP7pr_BxlGy0kqiAOM548tlWjio.roa (raw, json)
Hash identifier: ffNDC9MUuxZ4jOeciqpPXqHG9Z+JCpjqK+t/ubPHykU=
Subject key identifier: 74:FE:E9:AF:F0:71:94:6C:B4:92:A8:80:38:CE:78:F2:D9:56:8E:2A
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019615D5C0A41DA286DF4D6C0538895F9317
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/dP7pr_BxlGy0kqiAOM548tlWjio.roa
Signing time: Tue 08 Apr 2025 14:37:32 +0000
ROA not before: Tue 08 Apr 2025 14:37:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207252
IP address blocks: 5.83.152.0/24 maxlen: 24
5.231.29.0/24 maxlen: 24
77.90.12.0/24 maxlen: 24
77.90.42.0/24 maxlen: 24
85.93.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:15:d5:c0:a4:1d:a2:86:df:4d:6c:05:38:89:5f:93:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 8 14:37:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74fee9aff071946cb492a88038ce78f2d9568e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bc:25:ff:ff:51:ac:fc:fd:50:35:47:14:9a:
af:f2:f4:07:06:5f:fe:92:7b:d5:55:d1:97:30:39:
dd:54:31:ea:1d:f0:0a:ca:c3:12:9f:6d:d6:57:94:
a1:23:ab:e7:31:1a:6e:5b:7f:9e:95:ef:5c:f0:7c:
8f:c5:3d:7d:37:a6:57:14:73:78:c0:e4:db:31:5b:
3f:ce:89:c4:17:cc:3c:fc:52:57:14:8f:df:9d:31:
85:35:76:1e:ba:09:b1:52:44:6b:ce:05:bc:d3:39:
03:e9:fc:0a:e9:01:0d:5c:32:55:5a:6e:6e:24:47:
05:60:3d:75:5e:97:a7:b4:de:f5:f9:be:c8:77:b0:
e2:b9:34:ad:81:e5:db:de:b4:15:7d:5e:0a:d8:54:
13:e5:29:ad:0e:ba:3c:de:a5:e6:70:67:59:5f:5b:
31:b3:97:b7:32:d0:25:3b:ce:1a:3a:3a:78:e6:2c:
0d:66:ff:1f:9b:28:93:44:9b:2e:34:da:3d:84:27:
6e:2e:c9:6d:6c:95:1d:ac:f4:a4:d6:c4:ce:ff:f7:
1f:f5:4d:24:7d:1d:d3:68:16:21:c2:8f:fd:58:2f:
ca:c8:b6:32:68:8e:a2:d6:8f:8a:a4:17:72:f0:c8:
cf:69:05:b2:5c:f0:ed:08:55:33:45:54:f2:02:bd:
29:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:FE:E9:AF:F0:71:94:6C:B4:92:A8:80:38:CE:78:F2:D9:56:8E:2A
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/dP7pr_BxlGy0kqiAOM548tlWjio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.152.0/24
5.231.29.0/24
77.90.12.0/24
77.90.42.0/24
85.93.8.0/24
Signature Algorithm: sha256WithRSAEncryption
07:96:dc:a5:6e:24:31:9f:2c:8b:ee:65:9d:cd:99:4f:29:c5:
dd:da:40:47:74:27:c1:94:60:06:cf:c7:df:6a:2a:1f:f3:9a:
61:ab:47:b9:40:25:30:5d:51:ab:75:9a:d4:23:d5:53:01:6a:
73:b9:f7:47:55:a3:57:96:92:5b:e8:12:58:b7:1d:fc:18:06:
86:7f:58:c0:72:4d:44:5b:d9:8f:35:0f:58:ef:61:3e:4c:c7:
bb:a5:6b:d8:1f:b0:ca:15:32:55:1a:e7:f9:9f:df:4b:0e:1e:
37:c7:27:f7:21:2f:2f:f2:53:d3:75:c1:c1:84:f3:7e:95:e2:
d2:93:a2:51:fe:d8:f0:43:8c:b2:6e:9d:55:6a:8e:00:05:16:
0d:ac:51:c6:f8:5e:97:4f:4b:53:bb:6e:a6:e4:64:e3:4d:9e:
1c:36:b2:c3:76:b8:33:b3:67:09:5d:96:da:d2:d1:dd:db:83:
d5:b9:a5:16:87:b8:01:d6:cd:5f:3f:69:55:b2:22:5e:1d:da:
8e:6e:fd:13:a2:82:ec:59:76:22:b9:c5:79:65:af:9b:c4:28:
13:a7:f4:86:40:a5:21:06:39:02:87:8a:f6:f9:27:3d:df:59:
03:5c:e2:18:4b:b7:c9:bd:29:89:ff:43:88:43:da:8a:65:eb:
36:a0:7f:36
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZYV1cCkHaKG301sBTiJX5MXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwNDA4MTQzNzMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NGZlZTlhZmYwNzE5NDZjYjQ5MmE4ODAzOGNlNzhmMmQ5NTY4ZTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybwl//9RrPz9UDVHFJqv8vQHBl/+
knvVVdGXMDndVDHqHfAKysMSn23WV5ShI6vnMRpuW3+ele9c8HyPxT19N6ZXFHN4
wOTbMVs/zonEF8w8/FJXFI/fnTGFNXYeugmxUkRrzgW80zkD6fwK6QENXDJVWm5u
JEcFYD11XpentN71+b7Id7DiuTStgeXb3rQVfV4K2FQT5SmtDro83qXmcGdZX1sx
s5e3MtAlO84aOjp45iwNZv8fmyiTRJsuNNo9hCduLsltbJUdrPSk1sTO//cf9U0k
fR3TaBYhwo/9WC/KyLYyaI6i1o+KpBdy8MjPaQWyXPDtCFUzRVTyAr0p7QIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFHT+6a/wcZRstJKogDjOePLZVo4qMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvZFA3cHJfQnhsR3kwa3FpQU9NNTQ4dGxXamlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQABVOYAwQA
BecdAwQATVoMAwQATVoqAwQAVV0IMA0GCSqGSIb3DQEBCwUAA4IBAQAHltylbiQx
nyyL7mWdzZlPKcXd2kBHdCfBlGAGz8ffaiof85phq0e5QCUwXVGrdZrUI9VTAWpz
ufdHVaNXlpJb6BJYtx38GAaGf1jAck1EW9mPNQ9Y72E+TMe7pWvYH7DKFTJVGuf5
n99LDh43xyf3IS8v8lPTdcHBhPN+leLSk6JR/tjwQ4yybp1Vao4ABRYNrFHG+F6X
T0tTu26m5GTjTZ4cNrLDdrgzs2cJXZba0tHd24PVuaUWh7gB1s1fP2lVsiJeHdqO
bv0TooLsWXYiucV5Za+bxCgTp/SGQKUhBjkCh4r2+Sc931kDXOIYS7fJvSmJ/0OI
Q9qKZes2oH82
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:01 2025 by rpki-client on console.sobornost.net