Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/4P_5RqU8xpoG8gjZDfiO7fMdJiE.roa
File: 4P_5RqU8xpoG8gjZDfiO7fMdJiE.roa (raw, json)
Hash identifier: 0G5lqqai+BxsgoS9rKHGLSKj8uiYkYr2z+pYFyxC6Ak=
Subject key identifier: E0:FF:F9:46:A5:3C:C6:9A:06:F2:08:D9:0D:F8:8E:ED:F3:1D:26:21
Certificate issuer: /CN=ac5fc6c6aea3f0e4edf7ccb92e6eb2377a7479a5
Certificate serial: 018CCA2A14F69516EB0A037D2B4903CF1412
Authority key identifier: AC:5F:C6:C6:AE:A3:F0:E4:ED:F7:CC:B9:2E:6E:B2:37:7A:74:79:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/4P_5RqU8xpoG8gjZDfiO7fMdJiE.roa
Signing time: Tue 02 Jan 2024 12:33:24 +0000
ROA not before: Tue 02 Jan 2024 12:33:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60896
IP address blocks: 185.24.81.0/24 maxlen: 24
185.24.80.0/22 maxlen: 22
185.24.80.0/24 maxlen: 24
185.24.83.0/24 maxlen: 24
185.24.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:14:f6:95:16:eb:0a:03:7d:2b:49:03:cf:14:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac5fc6c6aea3f0e4edf7ccb92e6eb2377a7479a5
Validity
Not Before: Jan 2 12:33:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e0fff946a53cc69a06f208d90df88eedf31d2621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:36:af:fb:02:01:ac:12:01:43:0e:60:00:c3:
92:63:2e:fb:85:1a:d9:34:bb:66:a8:a0:d5:6a:34:
2a:89:c9:86:89:19:6c:fe:25:7d:7b:a8:b8:43:9f:
c5:50:af:9f:90:cf:73:e1:4e:92:94:3b:9e:12:ce:
54:f7:82:d5:7c:ec:01:ec:66:37:f9:bd:be:03:36:
2c:49:7d:71:0c:14:3b:8b:6d:65:4c:18:2a:04:d6:
84:62:b5:c2:38:71:d3:9c:3f:3d:0e:c5:7b:37:4b:
3a:a0:50:fe:80:2d:cb:f1:33:9b:92:05:bb:d7:cb:
3d:d2:55:d0:23:9e:69:97:f4:27:1d:80:7e:5b:93:
e9:28:0a:97:c0:14:53:f6:b7:b0:64:08:a7:c6:2a:
74:5c:f4:9a:28:55:24:11:ad:41:57:38:dc:b7:d6:
4d:37:1d:3b:f8:77:24:89:19:cd:57:70:cf:b5:c0:
6b:f3:1f:a5:1c:3e:f2:ca:c2:22:1e:35:7f:f9:13:
78:01:34:5b:30:08:bf:ab:32:ca:a7:cc:46:14:f8:
6a:00:93:75:7f:98:b4:b7:b5:a0:a3:1c:d6:dd:7c:
37:62:0d:2f:ff:c8:05:bf:20:cd:cd:64:ed:95:b9:
4a:74:1b:f4:50:38:80:d9:c6:b2:00:6e:67:00:bc:
4d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:FF:F9:46:A5:3C:C6:9A:06:F2:08:D9:0D:F8:8E:ED:F3:1D:26:21
X509v3 Authority Key Identifier:
keyid:AC:5F:C6:C6:AE:A3:F0:E4:ED:F7:CC:B9:2E:6E:B2:37:7A:74:79:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/4P_5RqU8xpoG8gjZDfiO7fMdJiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.24.80.0/22
Signature Algorithm: sha256WithRSAEncryption
17:af:23:ee:10:f2:c2:1c:5c:23:40:6f:fc:fa:58:f6:02:a5:
a9:e7:2b:29:8c:d2:67:fe:d8:9d:83:2b:af:42:f5:fd:10:ec:
5f:ff:d6:9c:8b:7e:d4:49:4c:c8:2d:c7:cd:aa:b0:22:96:a0:
de:f7:ad:7c:63:ff:bf:de:ab:39:3e:32:9d:f5:f7:44:55:ad:
33:e5:2d:79:02:c8:cc:54:17:9e:8d:11:16:8e:f1:90:57:3b:
6c:33:20:f6:08:65:15:e7:6c:55:70:38:6d:ac:b0:16:de:9c:
a9:3b:bf:8b:4a:27:d1:bd:a4:b3:9d:19:fb:2e:b2:62:f8:86:
50:be:ab:16:54:20:01:bc:c9:73:df:d1:7b:20:50:b0:47:51:
ad:53:4c:d7:d9:07:09:ba:86:1f:5f:b3:b6:15:f1:96:3e:bb:
b4:8d:9d:65:3b:b7:79:5e:c0:89:bc:10:a0:07:12:7b:4f:af:
14:19:99:b0:70:9b:00:78:13:7a:b6:40:9f:2e:40:19:88:5b:
a2:33:1c:74:22:8e:4a:17:c8:3a:6c:5a:f1:db:32:22:e9:fc:
f1:96:f0:c3:ef:e0:ce:c0:66:9d:39:d7:d2:a9:96:ef:5b:10:
20:e0:03:d8:3e:69:d5:95:6c:dc:f2:b1:97:3c:19:16:a4:94:
b7:37:6b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:32 2024 by rpki-client on console.sobornost.net