Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/N3-917WPyl7E_IHoSS2FMLc18wo.roa
File: N3-917WPyl7E_IHoSS2FMLc18wo.roa (raw, json)
Hash identifier: VHNMzSlgwcYRKlzGy0Nb6X63KDdiRRNUd0w6+PH3+3w=
Subject key identifier: 37:7F:BD:D7:B5:8F:CA:5E:C4:FC:81:E8:49:2D:85:30:B7:35:F3:0A
Certificate issuer: /CN=d535f8fac7062f77f24b98cd5c3b54a89bad4838
Certificate serial: 01941F8C9B3CF7D9CD3515E13B80BDEBB0F5
Authority key identifier: D5:35:F8:FA:C7:06:2F:77:F2:4B:98:CD:5C:3B:54:A8:9B:AD:48:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/N3-917WPyl7E_IHoSS2FMLc18wo.roa
Signing time: Wed 01 Jan 2025 01:48:15 +0000
ROA not before: Wed 01 Jan 2025 01:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200561
IP address blocks: 185.79.24.0/22 maxlen: 22
185.79.24.0/24 maxlen: 24
185.79.25.0/24 maxlen: 24
185.175.28.0/22 maxlen: 24
185.175.28.0/24 maxlen: 24
185.175.29.0/24 maxlen: 24
2a03:20::/32 maxlen: 32
2a0b:cb00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:9b:3c:f7:d9:cd:35:15:e1:3b:80:bd:eb:b0:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d535f8fac7062f77f24b98cd5c3b54a89bad4838
Validity
Not Before: Jan 1 01:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=377fbdd7b58fca5ec4fc81e8492d8530b735f30a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e0:bf:e6:5f:c1:31:3b:05:c6:2b:6d:c8:b3:
e7:da:a4:8e:79:d8:79:e2:8b:03:6f:b5:e0:24:cf:
cc:61:13:ca:f5:4e:d3:7d:71:31:9e:9f:c6:80:ac:
08:2e:02:4e:89:de:00:ad:75:c2:f5:35:88:ac:be:
cd:41:73:2e:80:b2:11:d4:b7:40:1f:ca:27:c8:6a:
24:8a:5b:df:48:1c:69:98:db:0e:23:c1:d8:46:f7:
39:45:27:76:58:0d:2a:46:24:a0:f3:f7:e2:4d:ef:
66:3a:8d:b8:bc:e5:6a:af:e5:49:a3:4d:9c:7f:2f:
78:56:b4:fc:f3:3f:ce:6e:e2:9c:e8:e7:0e:5c:e4:
0b:b8:16:29:63:04:04:52:76:76:b0:e9:66:07:d0:
a6:8c:ac:b4:32:ff:28:49:c4:b1:60:50:6c:92:0d:
47:5c:74:e4:3f:99:91:2a:1b:69:9d:fb:de:bb:7d:
bf:da:80:9a:ab:1c:02:0c:dc:a3:a3:6b:29:c2:a5:
b2:84:2a:f8:ea:9e:3e:96:e2:12:05:d9:27:19:9f:
27:74:3c:fa:04:33:1a:a4:f2:e3:a0:27:7d:65:3b:
98:bf:d7:4c:0b:48:37:80:63:5a:ae:b8:29:b0:f2:
95:3a:8b:87:f0:81:f1:cf:55:98:3d:ce:bc:1e:04:
97:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:7F:BD:D7:B5:8F:CA:5E:C4:FC:81:E8:49:2D:85:30:B7:35:F3:0A
X509v3 Authority Key Identifier:
keyid:D5:35:F8:FA:C7:06:2F:77:F2:4B:98:CD:5C:3B:54:A8:9B:AD:48:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TX4-scGL3fyS5jNXDtUqJutSDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/N3-917WPyl7E_IHoSS2FMLc18wo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/097da1-7cc9-4343-8024-b310d71c2cad/1/1TX4-scGL3fyS5jNXDtUqJutSDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.79.24.0/22
185.175.28.0/22
IPv6:
2a03:20::/32
2a0b:cb00::/29
Signature Algorithm: sha256WithRSAEncryption
45:3c:4c:76:ac:ee:18:fc:d5:da:f5:85:ec:10:d3:f0:a4:3b:
d6:9c:12:86:2c:ab:32:d3:e1:b2:15:fc:d9:18:88:f3:b9:fa:
8a:49:08:95:07:e9:6c:9a:db:6a:f2:ac:5a:b8:4b:f7:89:af:
45:70:a2:88:f4:35:80:8f:d2:54:69:18:7a:6e:9a:13:d4:c9:
39:7c:24:b9:06:fa:f4:0d:02:a6:21:db:09:2f:fd:35:97:1a:
ce:a6:f4:5d:a0:26:f6:cc:98:3c:cf:b6:f2:30:c0:f8:e8:90:
d3:50:e9:da:60:90:f1:f0:39:54:5f:b0:37:f6:c2:af:31:b8:
47:85:a0:ec:f5:69:b7:3c:2b:0a:f2:29:19:22:70:62:95:14:
b2:ec:ae:ea:a7:91:69:7a:f2:ab:9b:29:93:c2:f1:b8:be:44:
84:b9:15:dc:22:f5:50:9f:9e:b3:ca:33:d6:e7:98:31:2a:d5:
c0:9f:ea:9c:40:5b:c9:b2:7b:e4:29:87:01:5b:2e:dd:d8:6a:
f3:17:b4:f3:15:8e:55:51:22:32:f9:d9:d3:ae:d4:ba:86:35:
f9:25:85:c8:67:bc:42:a6:3a:ce:78:4f:15:7d:a0:3f:da:22:
28:31:98:c8:b2:47:1d:04:6d:59:18:ed:e7:02:b4:51:55:c4:
50:f0:be:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:04 2025 by rpki-client on console.sobornost.net