Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/dBMJpVLGRQoTKZQpQqDPu3BVMTw.roa
File: dBMJpVLGRQoTKZQpQqDPu3BVMTw.roa (raw, json)
Hash identifier: y7lqJ7uW4lmOcL9eEyRfqx2SbaFMyQX43zjAsjfpk98=
Subject key identifier: 74:13:09:A5:52:C6:45:0A:13:29:94:29:42:A0:CF:BB:70:55:31:3C
Certificate issuer: /CN=ac67c93b8225d04c3761c13cefee5f8329358e23
Certificate serial: 01942747997F9759D5403B22E2B87E6213F5
Authority key identifier: AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/dBMJpVLGRQoTKZQpQqDPu3BVMTw.roa
Signing time: Thu 02 Jan 2025 13:49:51 +0000
ROA not before: Thu 02 Jan 2025 13:49:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62140
IP address blocks: 185.24.138.0/24 maxlen: 24
185.24.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:99:7f:97:59:d5:40:3b:22:e2:b8:7e:62:13:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac67c93b8225d04c3761c13cefee5f8329358e23
Validity
Not Before: Jan 2 13:49:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=741309a552c6450a1329942942a0cfbb7055313c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:65:05:d5:c2:00:6a:8f:d2:39:03:ef:67:59:
93:fb:e3:39:e8:07:e9:f5:90:a0:62:dc:75:16:0c:
39:58:b4:7d:5d:3c:e8:53:b7:45:04:44:36:af:f8:
28:a7:e1:4e:8b:12:71:b1:ab:32:73:c8:c2:6d:de:
1c:65:a2:49:40:08:9a:d9:89:2f:b8:5f:b0:8a:11:
bc:e2:54:11:da:60:2f:1b:ee:f4:a3:08:97:9f:c1:
bb:be:81:0b:9c:a3:51:00:30:01:0a:0c:96:58:50:
a3:95:03:4e:5d:bd:83:3c:ea:7e:ac:dc:2d:fd:fb:
98:cc:8c:cb:8d:0a:e4:4d:5d:c3:ee:0e:2e:ba:d6:
ba:c6:28:db:91:02:37:dc:44:1e:cf:31:a5:ab:80:
3f:7a:13:d9:99:0e:0f:97:86:2e:88:2b:81:d1:ef:
87:95:03:d4:86:be:10:14:87:df:6c:ed:e7:33:ba:
ff:fa:a9:60:6c:17:af:f4:2f:3f:d3:90:b1:a3:ef:
3b:c3:3d:12:67:f2:e3:6a:72:a4:8d:55:cc:15:44:
7f:fc:57:86:79:c7:4d:56:8a:65:1f:43:4d:ca:64:
b4:92:11:17:72:51:58:a4:ed:c6:43:36:77:ec:e9:
42:2e:92:9a:50:23:2f:56:49:8f:60:f4:4a:94:40:
09:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:13:09:A5:52:C6:45:0A:13:29:94:29:42:A0:CF:BB:70:55:31:3C
X509v3 Authority Key Identifier:
keyid:AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/dBMJpVLGRQoTKZQpQqDPu3BVMTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.24.138.0/23
Signature Algorithm: sha256WithRSAEncryption
15:03:75:3f:dc:ab:94:1a:64:3d:d2:0a:d8:af:9c:03:0d:1d:
63:b2:e9:d6:f8:a7:f5:0b:7b:68:5f:da:d0:a2:71:0e:ba:3c:
16:7d:a8:78:01:2c:b9:e3:17:b5:b7:08:c9:a5:71:c0:8a:ea:
f4:ad:1f:0f:63:25:5c:9c:3c:31:06:0b:a6:ae:57:44:81:e6:
d5:b2:4b:91:db:7a:46:ef:46:48:91:c2:d0:0a:5f:07:63:5b:
92:e0:15:6a:e7:b9:ca:3f:d3:e4:88:4f:04:ff:3c:ad:f6:52:
a1:ca:77:4d:f4:6c:cf:bf:d1:b7:2d:76:36:40:7d:ff:45:df:
97:a9:7a:c8:b9:f3:2c:ac:6a:a8:bf:f9:a6:9a:4e:c2:d9:df:
ed:1c:4a:fd:a9:46:01:3e:fc:24:c5:3a:40:d7:e4:b3:12:f7:
6e:65:ff:0e:6e:13:2f:e3:28:b2:0d:ef:32:bf:77:ad:1f:84:
e6:14:c0:66:23:7e:42:7b:43:04:73:ee:73:0e:bc:ee:df:57:
1a:80:a8:d5:03:2f:b8:29:43:65:69:0f:27:29:7c:0f:82:e6:
ca:5e:a4:01:90:49:3b:e9:e9:52:be:5a:54:28:99:44:56:70:
69:b9:ed:2b:7b:31:37:d9:e9:df:5c:60:ed:3e:54:30:78:6e:
96:30:a9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:43 2025 by rpki-client on console.sobornost.net