Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/Ngryz_JDCTWxsZghCdDW2bggtbY.roa
File: Ngryz_JDCTWxsZghCdDW2bggtbY.roa (raw, json)
Hash identifier: OLqWc5pDqp3VYp84vSGxFeZ1JPG4ouAU9S0kjVUHjeY=
Subject key identifier: 36:0A:F2:CF:F2:43:09:35:B1:B1:98:21:09:D0:D6:D9:B8:20:B5:B6
Certificate issuer: /CN=5f7179eff5e0e67d0337aa8912f95a687fd44089
Certificate serial: 019424453951F6709DB655FCFEE30CAD740F
Authority key identifier: 5F:71:79:EF:F5:E0:E6:7D:03:37:AA:89:12:F9:5A:68:7F:D4:40:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X3F57_Xg5n0DN6qJEvlaaH_UQIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/Ngryz_JDCTWxsZghCdDW2bggtbY.roa
Signing time: Wed 01 Jan 2025 23:48:23 +0000
ROA not before: Wed 01 Jan 2025 23:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201606
IP address blocks: 185.69.80.0/22 maxlen: 22
185.69.80.0/24 maxlen: 24
185.69.81.0/24 maxlen: 24
185.69.82.0/24 maxlen: 24
185.69.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:39:51:f6:70:9d:b6:55:fc:fe:e3:0c:ad:74:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7179eff5e0e67d0337aa8912f95a687fd44089
Validity
Not Before: Jan 1 23:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=360af2cff2430935b1b1982109d0d6d9b820b5b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:90:07:d9:91:d9:d8:84:59:4c:c0:95:aa:4e:
43:28:ca:c2:69:63:aa:32:f2:db:59:08:59:56:4d:
ec:4a:64:1f:31:ac:9f:df:ad:0a:6c:8f:de:3f:d1:
a9:b5:cd:bf:d7:5b:a6:90:3a:db:c6:04:e2:3a:de:
5a:f0:ac:85:e4:fe:4e:05:a4:0b:87:43:46:4e:3d:
33:a8:0a:6d:73:09:df:56:2d:d6:20:6d:8d:1c:67:
64:8d:8c:ee:52:91:39:f1:e9:a0:cc:7e:e7:69:c3:
06:55:d1:3f:e3:40:21:38:88:07:fb:71:1b:42:f6:
88:a3:d5:3b:ab:19:34:89:36:2a:53:6d:31:3b:62:
f6:1d:5c:e6:ac:02:0f:d1:2e:45:ca:c4:9c:71:99:
4e:e3:23:34:ed:49:dc:32:83:1e:5e:01:50:12:b0:
9a:9e:ad:91:90:ce:48:93:33:fb:18:99:42:86:7e:
79:a0:7e:fd:37:b5:6e:58:13:9a:07:c2:8c:04:84:
75:0a:77:76:b8:df:30:69:2c:23:f1:3a:a8:82:a6:
06:f0:19:69:93:d8:40:a3:3d:7b:24:6f:ac:df:57:
ca:48:f8:93:a6:97:51:60:1c:ce:db:0f:38:c8:07:
56:3c:70:39:59:af:8f:5a:30:83:a3:7c:37:29:a9:
ac:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:0A:F2:CF:F2:43:09:35:B1:B1:98:21:09:D0:D6:D9:B8:20:B5:B6
X509v3 Authority Key Identifier:
keyid:5F:71:79:EF:F5:E0:E6:7D:03:37:AA:89:12:F9:5A:68:7F:D4:40:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X3F57_Xg5n0DN6qJEvlaaH_UQIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/Ngryz_JDCTWxsZghCdDW2bggtbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.80.0/22
Signature Algorithm: sha256WithRSAEncryption
c2:9a:aa:e5:8f:9e:60:65:a1:df:12:ab:45:7d:cc:9c:24:7d:
ea:be:1e:26:99:1a:04:4f:b5:46:3a:86:c7:1e:92:64:89:21:
2b:53:ea:9b:77:ad:f8:57:72:d9:d2:4f:a1:2d:ed:25:c6:bf:
af:5a:5b:f8:9e:05:98:7b:0d:4d:fc:5c:b0:4a:13:7d:b1:aa:
5a:49:57:f4:11:ba:b8:39:50:49:e3:0f:9d:6b:17:68:dd:fc:
4b:9c:b3:90:6f:9e:63:3b:ee:e0:44:a0:3e:e2:58:50:65:3e:
c9:20:c0:4e:50:80:9e:fc:2a:21:8d:8f:48:a3:a7:d5:d3:43:
48:a9:24:70:86:89:b6:e1:61:5e:ee:b7:30:a6:2c:91:16:a9:
3d:0c:5a:96:d6:69:a6:a3:66:71:7e:3f:7b:87:d1:53:46:fe:
7f:8b:1f:d1:db:04:d1:4b:8f:87:5a:22:25:3c:83:ce:22:02:
e3:ba:e8:0e:79:5e:3e:b5:9f:0a:94:9f:16:d6:d3:55:67:e2:
83:9d:0e:1e:37:3e:c7:6d:16:9f:59:14:0c:0b:08:f0:97:c4:
f4:da:8e:23:f1:5b:9d:bf:69:04:c9:7c:33:b9:1e:b3:d7:b0:
22:b3:8d:09:8b:61:14:a3:10:a9:c4:69:e3:5a:d3:0c:e7:f1:
7c:76:9c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:37 2025 by rpki-client on console.sobornost.net