Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/zQTkZDHTJA7RxOD7AgTZH3P5rAA.roa
File: zQTkZDHTJA7RxOD7AgTZH3P5rAA.roa (raw, json)
Hash identifier: Mk5EU/N/NcGfqktaOoLMFKJlNpU5GVNs9Cvwd0THHIc=
Subject key identifier: CD:04:E4:64:31:D3:24:0E:D1:C4:E0:FB:02:04:D9:1F:73:F9:AC:00
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01962C9FEB11138AE5CFCA7A6EE6B791C4B1
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/zQTkZDHTJA7RxOD7AgTZH3P5rAA.roa
Signing time: Sun 13 Apr 2025 00:49:59 +0000
ROA not before: Sun 13 Apr 2025 00:49:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 5.83.138.0/24 maxlen: 24
5.175.238.0/24 maxlen: 24
5.230.164.0/24 maxlen: 24
5.231.61.0/24 maxlen: 24
5.231.71.0/24 maxlen: 24
5.231.72.0/24 maxlen: 24
5.231.73.0/24 maxlen: 24
5.231.74.0/24 maxlen: 24
5.231.75.0/24 maxlen: 24
5.231.79.0/24 maxlen: 24
5.231.92.0/24 maxlen: 24
85.93.5.0/24 maxlen: 24
85.93.31.0/24 maxlen: 24
89.144.5.0/24 maxlen: 24
89.144.11.0/24 maxlen: 24
94.249.168.0/24 maxlen: 24
94.249.169.0/24 maxlen: 24
94.249.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2c:9f:eb:11:13:8a:e5:cf:ca:7a:6e:e6:b7:91:c4:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 13 00:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd04e46431d3240ed1c4e0fb0204d91f73f9ac00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fe:2c:e4:c0:25:d4:15:2b:88:9c:0d:60:6a:
dc:7e:b9:9d:0c:49:48:9b:ec:a9:f5:6b:18:2c:65:
80:f0:1d:38:0a:4a:7a:50:1c:b7:ec:39:d4:b9:32:
a2:f8:b3:ad:a4:49:cf:79:28:2b:2f:2d:c2:14:b8:
e8:39:a3:77:11:01:db:09:eb:b8:bb:c8:d1:30:b3:
e5:60:d3:48:41:82:e1:5e:8e:0f:a9:91:24:3f:6a:
8a:31:89:b2:08:ae:35:3e:a3:02:30:37:fe:a1:32:
a5:47:34:6a:17:f2:6a:25:8d:f9:4b:ef:5e:d0:1f:
8d:54:9d:a6:78:af:71:51:02:63:67:84:41:f1:23:
0d:6b:da:28:8f:d4:d1:47:de:0c:f6:36:ba:c4:db:
ad:98:53:bc:70:b6:39:0e:4d:43:f5:e0:18:75:e1:
c2:bc:7f:c5:66:40:98:9b:3f:5c:46:b1:6c:af:ef:
05:ba:da:68:c3:e8:33:07:37:9f:cb:3b:38:e7:8e:
25:63:48:80:89:86:42:04:45:4d:a9:8c:de:f8:35:
2d:92:63:94:e3:47:3d:ef:27:e4:e1:28:5f:ee:2c:
ac:2e:07:03:b5:7c:94:1c:59:5a:2d:b9:87:a9:36:
87:68:9d:dd:ba:49:0d:78:2a:c6:be:7f:b8:95:4d:
8b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:04:E4:64:31:D3:24:0E:D1:C4:E0:FB:02:04:D9:1F:73:F9:AC:00
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/zQTkZDHTJA7RxOD7AgTZH3P5rAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.138.0/24
5.175.238.0/24
5.230.164.0/24
5.231.61.0/24
5.231.71.0-5.231.75.255
5.231.79.0/24
5.231.92.0/24
85.93.5.0/24
85.93.31.0/24
89.144.5.0/24
89.144.11.0/24
94.249.168.0/23
94.249.237.0/24
Signature Algorithm: sha256WithRSAEncryption
68:7e:a8:74:d0:8c:00:0b:80:a4:50:31:bb:46:4a:82:5d:9c:
5a:5d:63:44:1e:9c:00:d0:89:3a:43:55:f4:ba:6c:21:d8:90:
f3:22:c3:36:8e:6a:41:f5:a2:32:5e:be:39:e3:51:28:25:66:
b6:ae:81:ec:49:05:fa:d3:84:bb:d0:03:a3:5b:06:81:d8:c1:
61:e5:e0:e2:22:f0:b5:c2:f3:f9:91:06:2f:50:e4:b0:91:d8:
5b:95:b3:03:54:48:10:99:51:79:34:a5:d7:97:be:5b:5d:ea:
c0:71:39:f1:1e:fd:b3:7d:04:8c:a3:74:21:30:f1:b4:89:87:
65:87:13:c9:94:7f:8a:a9:d1:ee:7d:f3:00:07:66:03:04:35:
70:de:5c:fa:5f:e5:c0:a5:d6:a4:fb:22:6f:b0:4e:16:86:db:
d5:9f:b1:a7:cd:05:b0:a8:37:62:c1:fc:41:fc:fd:a4:7a:5f:
df:28:16:69:6f:ff:a7:6f:75:99:8b:9c:cc:d3:af:c5:12:00:
09:b5:a7:df:ba:b6:16:08:ea:8c:ea:2e:4d:25:ab:0b:04:74:
e5:a4:18:e9:84:7b:40:93:25:5c:27:43:2a:a0:6d:a3:6e:31:
ab:e9:45:4b:3b:37:ae:ca:8f:db:97:b1:72:55:2a:2f:51:9a:
7f:08:b4:21
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgISAZYsn+sRE4rlz8p6bua3kcSxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjUwNDEzMDA0OTU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDA0ZTQ2NDMxZDMyNDBlZDFjNGUwZmIwMjA0ZDkxZjczZjlhYzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuv4s5MAl1BUriJwNYGrcfrmdDElI
m+yp9WsYLGWA8B04Ckp6UBy37DnUuTKi+LOtpEnPeSgrLy3CFLjoOaN3EQHbCeu4
u8jRMLPlYNNIQYLhXo4PqZEkP2qKMYmyCK41PqMCMDf+oTKlRzRqF/JqJY35S+9e
0B+NVJ2meK9xUQJjZ4RB8SMNa9ooj9TRR94M9ja6xNutmFO8cLY5Dk1D9eAYdeHC
vH/FZkCYmz9cRrFsr+8Futpow+gzBzefyzs4544lY0iAiYZCBEVNqYze+DUtkmOU
40c97yfk4Shf7iysLgcDtXyUHFlaLbmHqTaHaJ3dukkNeCrGvn+4lU2LJQIDAQAB
o4ICWTCCAlUwHQYDVR0OBBYEFM0E5GQx0yQO0cTg+wIE2R9z+awAMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvelFUa1pESFRKQTdSeE9EN0FnVFpIM1A1ckFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG8GCCsGAQUFBwEHAQH/BGAwXjBcBAIAATBWAwQABVOKAwQA
Ba/uAwQABeakAwQABec9MAwDBAAF50cDBAIF50gDBAAF508DBAAF51wDBABVXQUD
BABVXR8DBABZkAUDBABZkAsDBAFe+agDBABe+e0wDQYJKoZIhvcNAQELBQADggEB
AGh+qHTQjAALgKRQMbtGSoJdnFpdY0QenADQiTpDVfS6bCHYkPMiwzaOakH1ojJe
vjnjUSglZraugexJBfrThLvQA6NbBoHYwWHl4OIi8LXC8/mRBi9Q5LCR2FuVswNU
SBCZUXk0pdeXvltd6sBxOfEe/bN9BIyjdCEw8bSJh2WHE8mUf4qp0e598wAHZgME
NXDeXPpf5cCl1qT7Im+wThaG29WfsafNBbCoN2LB/EH8/aR6X98oFmlv/6dvdZmL
nMzTr8USAAm1p9+6thYI6ozqLk0lqwsEdOWkGOmEe0CTJVwnQyqgbaNuMavpRUs7
N67Kj9uXsXJVKi9Rmn8ItCE=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:01 2025 by rpki-client on console.sobornost.net