Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/fc5TVxiRHEE1CD_75LdlnHepzT8.roa
File: fc5TVxiRHEE1CD_75LdlnHepzT8.roa (raw, json)
Hash identifier: MQgP6cz8O6XPu6EeDuGbQujKupKD1sfkWc2Nn+EjEYE=
Subject key identifier: 7D:CE:53:57:18:91:1C:41:35:08:3F:FB:E4:B7:65:9C:77:A9:CD:3F
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0196207E073C5D1327861AD38112E9843AA4
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/fc5TVxiRHEE1CD_75LdlnHepzT8.roa
Signing time: Thu 10 Apr 2025 16:17:32 +0000
ROA not before: Thu 10 Apr 2025 16:17:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49581
IP address blocks: 5.175.237.0/24 maxlen: 24
5.231.25.0/24 maxlen: 24
5.231.26.0/24 maxlen: 24
89.106.69.0/24 maxlen: 24
89.106.71.0/24 maxlen: 24
94.103.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:20:7e:07:3c:5d:13:27:86:1a:d3:81:12:e9:84:3a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 10 16:17:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7dce535718911c4135083ffbe4b7659c77a9cd3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5e:0f:d3:42:8d:c4:04:e7:9a:01:7e:5f:86:
77:03:d0:9d:18:be:04:75:8b:3a:87:e7:72:a7:9b:
ce:d4:ee:bd:01:21:5b:36:28:6e:1a:70:6e:81:26:
dd:f9:57:13:4b:2b:b3:e9:b3:d0:2c:93:4e:a6:55:
28:92:cb:eb:09:d5:66:54:5e:61:2f:d3:05:66:27:
02:68:8a:76:a7:92:72:61:67:8f:36:aa:7f:2b:2a:
60:77:e4:76:6c:13:c1:4e:87:b6:95:2e:4c:f9:42:
55:5c:05:a0:4a:f2:b7:49:75:1b:d6:91:9b:1e:73:
cd:9e:aa:ce:ae:c8:46:23:ce:d6:5a:f2:20:37:eb:
8f:9f:f8:c0:66:72:3d:4e:06:68:8f:36:43:20:59:
59:2e:26:c3:f2:87:11:52:5a:85:0d:65:b1:b1:62:
57:7d:9d:bb:87:d9:6c:a2:37:2a:1c:9e:71:22:32:
d8:b2:59:1a:17:08:8d:05:22:27:e7:38:cf:a8:b6:
99:7d:4c:f2:76:0f:a0:69:76:b0:0d:78:90:57:2b:
41:a1:45:af:41:62:5f:d1:3b:19:51:32:d2:bd:c6:
8f:66:b5:bf:ae:fc:f0:c5:fa:3b:8d:5a:76:f5:9b:
82:3a:8e:71:2c:fa:93:e2:22:c4:a4:29:ac:0e:5d:
0c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:CE:53:57:18:91:1C:41:35:08:3F:FB:E4:B7:65:9C:77:A9:CD:3F
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/fc5TVxiRHEE1CD_75LdlnHepzT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.237.0/24
5.231.25.0-5.231.26.255
89.106.69.0/24
89.106.71.0/24
94.103.167.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:5e:78:9e:08:8e:27:40:72:8e:2b:b1:9d:4e:9e:aa:55:b7:
cd:bf:d4:f9:41:70:94:58:a9:6a:0b:fe:1b:ef:a9:82:ae:32:
54:2b:79:a9:1d:0f:21:99:7f:19:58:7e:a1:91:41:71:00:ad:
e1:9b:48:43:09:85:aa:60:36:4b:f0:d8:21:79:35:fd:f6:36:
10:41:eb:61:1e:ca:b2:e7:7b:13:1d:d3:a3:79:ee:04:5a:aa:
e2:b0:51:d1:64:40:f2:af:fe:bf:1e:16:69:e9:4b:92:4a:d6:
66:e3:49:8e:26:75:ac:7a:d9:8e:13:fc:ce:b4:8d:f4:76:b0:
6a:7a:fe:c8:54:3b:c0:85:8f:2c:6e:f7:1c:c4:ba:cf:01:e6:
e7:56:a8:43:92:30:ba:2f:c2:4d:88:68:b9:31:42:af:c9:ad:
40:ca:fe:8c:c2:ba:48:cb:99:47:8e:10:2f:86:2b:64:3d:b1:
86:db:0c:cb:88:40:2c:08:3a:11:77:c1:7a:db:b6:8e:18:99:
65:2a:dd:8a:e6:a5:d3:42:40:af:fc:50:2b:45:4f:16:7b:e7:
1a:95:7c:f5:9c:71:89:54:e3:c4:1b:fb:4d:dc:fc:69:ea:5a:
5f:74:32:1c:11:f4:3d:42:81:28:3e:ce:a4:19:09:db:7f:6c:
87:95:95:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:01 2025 by rpki-client on console.sobornost.net