Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/zcwOA3e_Q-wm1aOX4dXnixiKbYM.roa
File: zcwOA3e_Q-wm1aOX4dXnixiKbYM.roa (raw, json)
Hash identifier: DGRN5bXdw/zt4BvRHbClb4CJIATrpfQS2huM/D9wxX4=
Subject key identifier: CD:CC:0E:03:77:BF:43:EC:26:D5:A3:97:E1:D5:E7:8B:18:8A:6D:83
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01962F5F0B1F83AB9BC950C6161495EEF8C5
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/zcwOA3e_Q-wm1aOX4dXnixiKbYM.roa
Signing time: Sun 13 Apr 2025 13:37:59 +0000
ROA not before: Sun 13 Apr 2025 13:37:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215365
IP address blocks: 5.231.253.0/24 maxlen: 24
77.90.15.0/24 maxlen: 24
77.90.60.0/24 maxlen: 24
89.144.61.0/24 maxlen: 24
94.249.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:5f:0b:1f:83:ab:9b:c9:50:c6:16:14:95:ee:f8:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 13 13:37:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cdcc0e0377bf43ec26d5a397e1d5e78b188a6d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:15:78:07:4d:4b:07:d9:d3:ad:e7:e5:6a:69:
91:9f:9c:39:91:f3:6d:7c:a6:18:23:99:57:fc:47:
76:12:ca:58:c4:c1:d7:70:40:c0:c5:91:1d:70:8d:
56:f1:fc:ea:77:8d:40:06:ed:93:a4:65:32:78:ab:
fb:01:1e:ae:2d:d4:c9:9d:55:25:2a:72:94:d9:53:
99:7f:b3:80:74:48:c3:c8:09:dc:19:ce:fa:3f:94:
c6:16:a3:8c:e9:fc:8a:83:62:bd:82:62:6c:71:3b:
ca:d9:c9:31:ff:6d:f5:18:c4:24:7a:2b:69:b9:52:
ee:13:93:2f:11:88:5a:61:e2:51:4e:58:b6:dc:b9:
e3:67:1b:ac:70:0a:cf:49:07:63:61:52:28:b5:4a:
7c:46:b3:d0:25:5f:0e:24:ec:c0:7b:c2:73:07:91:
03:e8:22:1c:e5:84:72:76:84:b7:2a:5c:5e:be:91:
44:ee:dc:56:04:4f:ba:58:3e:3c:81:9d:b7:0b:06:
3b:06:cb:64:c8:c7:39:ae:e6:a3:84:6c:6f:ad:46:
98:34:c1:51:f8:fe:6e:57:67:5a:f2:ad:e2:bb:d8:
98:93:07:77:91:77:44:92:b0:b3:53:1a:48:13:d4:
51:76:4e:a6:8c:89:07:6a:a1:d2:16:5f:43:81:ce:
1e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:CC:0E:03:77:BF:43:EC:26:D5:A3:97:E1:D5:E7:8B:18:8A:6D:83
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/zcwOA3e_Q-wm1aOX4dXnixiKbYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.253.0/24
77.90.15.0/24
77.90.60.0/24
89.144.61.0/24
94.249.148.0/24
Signature Algorithm: sha256WithRSAEncryption
28:e9:58:80:53:82:9b:37:eb:21:54:eb:c6:0d:6b:81:a7:65:
c6:db:b3:4e:ef:c6:67:36:54:99:2c:21:ef:e5:47:a1:0a:f5:
d5:f5:01:5e:ae:12:43:af:9b:f1:f3:6e:56:ac:66:8f:bb:59:
a0:86:20:1c:0b:7d:60:32:ec:eb:c8:cb:6a:bf:d2:44:9c:12:
33:31:a1:da:cf:fb:f3:7c:77:fe:30:fd:72:e9:c8:40:78:5e:
d8:4f:00:e1:96:11:59:6b:2a:5f:5c:9b:64:2b:52:78:42:76:
8a:79:0a:78:30:e6:1c:8e:a8:ef:e5:e0:33:f5:01:11:56:0e:
31:bc:16:b1:e2:a5:6d:ce:0a:b5:d0:0a:5a:cc:66:cb:55:7c:
c0:91:81:de:a6:47:53:cc:11:ce:33:ce:9b:30:52:2c:f2:5d:
c4:f5:2e:8a:2c:09:3f:7d:bc:3b:42:69:9e:92:0e:c7:60:ac:
96:8a:b4:eb:a8:04:1f:e6:02:08:05:fc:30:a6:a5:bb:0b:1f:
93:78:d8:d7:cf:52:82:b3:de:4b:95:42:a4:c2:8b:87:d3:50:
e7:6f:d7:ab:26:ff:99:5f:ce:a2:b9:55:47:c4:04:73:81:28:
ea:fc:c4:e2:74:25:e7:d1:9b:98:42:cd:48:59:79:c6:c0:d9:
1d:17:f7:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:01 2025 by rpki-client on console.sobornost.net