Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/N5B5WcceOX8-5008CdVB5Z2Yf_U.roa
File: N5B5WcceOX8-5008CdVB5Z2Yf_U.roa (raw, json)
Hash identifier: N6x2VI2LM0pBE2WvbvROlXs2jZlgeDuNmVuOamFJP3o=
Subject key identifier: 37:90:79:59:C7:1E:39:7F:3E:E7:4D:3C:09:D5:41:E5:9D:98:7F:F5
Certificate issuer: /CN=e60064dcf719ed8999da792f6fbfc3fe9bc70898
Certificate serial: 019425209F4B4E67D0BE4F9391934A8B3726
Authority key identifier: E6:00:64:DC:F7:19:ED:89:99:DA:79:2F:6F:BF:C3:FE:9B:C7:08:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/N5B5WcceOX8-5008CdVB5Z2Yf_U.roa
Signing time: Thu 02 Jan 2025 03:48:02 +0000
ROA not before: Thu 02 Jan 2025 03:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57736
IP address blocks: 185.59.104.0/23 maxlen: 24
185.59.106.0/23 maxlen: 24
2a04:e3c0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:9f:4b:4e:67:d0:be:4f:93:91:93:4a:8b:37:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e60064dcf719ed8999da792f6fbfc3fe9bc70898
Validity
Not Before: Jan 2 03:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37907959c71e397f3ee74d3c09d541e59d987ff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bf:bb:e9:bd:73:53:b4:e2:51:9c:e7:51:18:
be:e5:e3:a1:52:aa:01:f4:cd:e4:97:ce:f3:e4:5a:
ab:18:df:4c:6c:39:68:d4:c8:01:e5:82:fb:5e:de:
9e:39:9e:f0:5b:04:c2:b4:3e:70:3f:01:7d:dd:78:
54:28:e1:4e:5b:c1:6b:24:e1:2f:74:34:a9:f5:a5:
f5:b9:15:ea:54:d2:e1:20:2f:cc:7d:60:ec:73:a0:
6b:60:fe:b2:8f:7d:79:aa:01:0d:c3:f7:f2:0a:d0:
37:4c:4c:ff:d7:0a:07:0a:9a:fd:5c:d7:be:47:12:
94:50:e2:88:37:d1:8f:e4:77:31:c3:d9:34:b4:79:
f8:be:95:b7:17:14:58:ae:45:a7:c1:28:9f:87:47:
d2:84:7a:c5:7e:ca:37:44:75:9b:db:1c:f2:b9:7c:
2a:17:4f:89:69:33:f6:98:5c:f1:ec:55:a5:9d:77:
20:2c:a8:93:59:75:a3:b9:a4:6d:14:18:92:25:35:
4f:7a:df:20:62:48:76:63:af:fa:cf:11:f2:f2:56:
0b:67:7a:e2:70:0c:f5:8a:c7:9d:4d:80:45:cf:bc:
4a:57:fd:da:af:0e:de:bf:d3:1c:05:d5:81:9d:50:
a6:b2:d1:5b:67:94:e6:16:89:db:df:ad:25:e9:22:
08:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:90:79:59:C7:1E:39:7F:3E:E7:4D:3C:09:D5:41:E5:9D:98:7F:F5
X509v3 Authority Key Identifier:
keyid:E6:00:64:DC:F7:19:ED:89:99:DA:79:2F:6F:BF:C3:FE:9B:C7:08:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/N5B5WcceOX8-5008CdVB5Z2Yf_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.59.104.0/22
IPv6:
2a04:e3c0::/29
Signature Algorithm: sha256WithRSAEncryption
84:2e:87:d5:3c:6f:62:8c:a3:ea:92:ce:eb:bc:02:0a:d8:45:
f0:fa:9a:fd:84:d1:78:ab:c7:b6:29:5e:69:a6:39:c4:2e:0a:
9e:17:5b:d7:67:34:6b:5e:0e:c3:e8:4c:b4:01:eb:9f:b6:ad:
10:00:84:66:6b:8a:03:a1:fe:a8:3a:6b:18:60:1f:86:c9:82:
5d:ab:a6:66:4c:90:37:4d:55:6b:71:3d:d3:02:4c:89:63:91:
de:c6:47:04:b4:13:ca:c8:75:a7:db:e1:ea:eb:07:9c:dc:40:
06:64:1c:81:88:fc:18:8d:ae:97:c6:56:1e:0c:9a:4f:ef:43:
83:5d:c7:48:c0:1e:bb:29:d0:89:8c:e0:90:71:f0:d6:08:8b:
0b:89:f9:f9:f2:fd:c1:af:b9:a1:4c:3e:67:a2:89:67:68:b3:
6e:68:c3:8d:12:4e:cb:f7:a9:ac:50:7e:d1:97:3d:36:88:19:
ac:7c:97:20:93:ad:a5:28:eb:e3:51:45:36:e3:b0:0c:79:a2:
75:d5:6f:1f:44:8b:0e:21:fc:a6:82:a0:10:eb:45:77:f6:a9:
bb:46:7f:df:9d:73:92:ec:b3:70:8b:f5:4e:d8:10:1e:e2:67:
2b:30:d3:c0:8d:de:0d:0a:d6:b5:00:f9:d5:a1:e5:aa:79:91:
9d:78:14:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:51 2025 by rpki-client on console.sobornost.net