Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/idSC5Hw5WkkMOAbfku6Dkz9XO6I.roa
File: idSC5Hw5WkkMOAbfku6Dkz9XO6I.roa (raw, json)
Hash identifier: UXJcLdtFjpO9Edbh8qYFBpHmdjidm11out2Ag90FqaE=
Subject key identifier: 89:D4:82:E4:7C:39:5A:49:0C:38:06:DF:92:EE:83:93:3F:57:3B:A2
Certificate issuer: /CN=3c614bf257d3af770bbf3c6c2d35bfa465686ceb
Certificate serial: 0194258FB966BFCA2AEA55C2E21525F29BA6
Authority key identifier: 3C:61:4B:F2:57:D3:AF:77:0B:BF:3C:6C:2D:35:BF:A4:65:68:6C:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PGFL8lfTr3cLvzxsLTW_pGVobOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/idSC5Hw5WkkMOAbfku6Dkz9XO6I.roa
Signing time: Thu 02 Jan 2025 05:49:23 +0000
ROA not before: Thu 02 Jan 2025 05:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61171
IP address blocks: 185.10.24.0/24 maxlen: 24
185.10.25.0/24 maxlen: 24
185.10.26.0/24 maxlen: 24
185.10.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:b9:66:bf:ca:2a:ea:55:c2:e2:15:25:f2:9b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c614bf257d3af770bbf3c6c2d35bfa465686ceb
Validity
Not Before: Jan 2 05:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89d482e47c395a490c3806df92ee83933f573ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:bb:8c:de:3d:dd:1c:17:bc:db:da:89:2d:15:
ca:d6:0f:ef:44:4f:e6:1c:1b:85:d7:3f:6f:a5:76:
fa:46:8d:d9:62:0b:2d:f4:50:70:52:a4:68:fe:8a:
ad:1c:ee:13:5b:7d:c3:1b:0c:17:9f:20:a6:15:ff:
46:f3:40:31:89:2e:f8:ea:3c:71:25:a9:c1:d6:8a:
89:8c:5d:03:fc:bf:2c:86:3a:0a:57:a6:fa:1f:69:
43:aa:67:91:cd:73:2a:71:c9:16:c7:fe:ab:5b:26:
4a:6f:29:a2:13:d2:15:2c:61:4d:87:e8:a9:6e:b8:
b1:96:6b:3b:04:9d:6a:43:4b:e1:a7:20:3b:15:62:
59:23:fd:88:b1:7e:81:93:76:3d:d3:0c:33:43:92:
9a:11:ce:9b:ab:47:db:fe:ff:52:0c:4c:85:6e:94:
dd:24:3f:15:a1:e7:64:8e:d3:56:ff:a2:8d:d4:3d:
66:e4:f2:5c:19:e7:ba:5e:4e:81:7f:9a:5a:ba:74:
a7:4f:c4:17:90:b2:59:16:26:07:49:f2:37:1e:05:
fa:18:38:02:12:41:be:8a:ff:b3:97:e0:33:e9:fc:
d9:ba:b4:28:9a:4c:4d:5a:76:3b:ee:a7:98:aa:d6:
e6:ff:6c:93:f0:07:0b:73:db:44:cf:6d:45:31:d8:
1f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D4:82:E4:7C:39:5A:49:0C:38:06:DF:92:EE:83:93:3F:57:3B:A2
X509v3 Authority Key Identifier:
keyid:3C:61:4B:F2:57:D3:AF:77:0B:BF:3C:6C:2D:35:BF:A4:65:68:6C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PGFL8lfTr3cLvzxsLTW_pGVobOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/idSC5Hw5WkkMOAbfku6Dkz9XO6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.10.24.0/22
Signature Algorithm: sha256WithRSAEncryption
19:99:1b:31:7e:7d:11:d8:63:55:6e:91:0c:73:81:80:f1:6e:
b2:aa:d4:6c:e5:97:29:5c:32:1b:6b:f7:2f:58:2b:eb:b9:76:
95:96:99:85:a4:aa:19:fe:85:98:f4:36:0a:db:fe:2b:d4:aa:
f5:93:8a:2d:77:91:37:f1:3e:85:92:91:83:2d:3d:40:ce:5d:
97:3b:52:41:a9:77:97:ca:94:ae:18:93:38:28:0b:9c:26:ed:
23:56:1d:e1:ca:b5:cc:68:98:43:6d:fc:27:ba:e8:b2:93:19:
a8:d1:62:55:5b:f0:7b:59:fd:fe:b6:1c:e5:f0:4c:57:b4:b5:
7e:68:86:89:a9:5d:15:32:9c:7c:c4:1b:e1:30:73:a1:b7:52:
55:46:a0:55:7f:16:ab:95:a5:19:50:c1:b3:0d:20:c5:75:03:
b9:be:b5:75:e0:eb:2b:6b:5c:c0:9e:c2:79:d7:06:64:fe:c9:
74:ca:57:f9:fd:29:3f:29:e6:35:9c:2b:56:c3:68:79:c8:40:
75:d2:37:1d:df:e1:41:aa:52:f2:b7:36:4f:c6:11:d7:88:65:
b7:2e:b3:64:00:08:33:da:de:d3:ff:e7:c0:b9:f5:0c:f0:d0:
d7:f3:62:ae:c4:52:57:fb:f5:1b:ae:ac:7e:5b:ee:ed:3d:b2:
06:00:66:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:27 2025 by rpki-client on console.sobornost.net