Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/Nco7jM6fCKkEkhm4JQ4zIvrvqCo.roa
File: Nco7jM6fCKkEkhm4JQ4zIvrvqCo.roa (raw, json)
Hash identifier: BIdys9GlZzlGys/T7bq6Tcptb5M/oc7ReQGRtjoEJCs=
Subject key identifier: 35:CA:3B:8C:CE:9F:08:A9:04:92:19:B8:25:0E:33:22:FA:EF:A8:2A
Certificate issuer: /CN=ac5fc6c6aea3f0e4edf7ccb92e6eb2377a7479a5
Certificate serial: 019427486122989E92CFC446E2F5F2835194
Authority key identifier: AC:5F:C6:C6:AE:A3:F0:E4:ED:F7:CC:B9:2E:6E:B2:37:7A:74:79:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/Nco7jM6fCKkEkhm4JQ4zIvrvqCo.roa
Signing time: Thu 02 Jan 2025 13:50:42 +0000
ROA not before: Thu 02 Jan 2025 13:50:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60896
IP address blocks: 185.24.80.0/22 maxlen: 22
185.24.80.0/24 maxlen: 24
185.24.81.0/24 maxlen: 24
185.24.82.0/24 maxlen: 24
185.24.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:61:22:98:9e:92:cf:c4:46:e2:f5:f2:83:51:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac5fc6c6aea3f0e4edf7ccb92e6eb2377a7479a5
Validity
Not Before: Jan 2 13:50:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35ca3b8cce9f08a9049219b8250e3322faefa82a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c0:42:3c:89:1d:ed:58:ae:82:8e:c2:bf:b3:
ee:08:ee:d1:54:98:09:ca:0d:15:8d:71:cb:f8:9c:
8a:0a:91:4b:ff:a2:cf:1b:51:fc:cb:0e:88:e2:79:
7b:3e:a8:ea:05:09:bc:00:20:ff:29:a1:d4:03:57:
5a:31:51:7a:83:f6:89:29:71:90:dc:7a:b7:48:11:
a3:ad:cd:46:2a:55:23:46:4d:d6:77:93:24:02:28:
74:4d:4e:ce:b5:3e:c6:89:d4:2e:80:49:02:83:d0:
d3:27:2a:fc:a5:52:4a:5e:6f:46:b0:7e:57:f7:31:
c4:0a:27:7d:ce:f3:65:03:a0:2d:15:a5:6c:fd:2f:
1a:e5:ca:09:28:b9:bc:dd:1d:60:b6:05:03:3d:5e:
8c:1b:e2:ae:08:10:04:c1:e5:e6:38:60:58:97:3f:
90:4b:36:db:a4:85:3c:4b:c0:2a:82:6d:04:ce:e3:
42:58:b0:a7:0b:bc:b6:2a:12:c4:ef:c8:24:e9:ed:
e3:59:bf:ce:7e:e2:c5:ae:7b:6e:ce:ec:51:f1:ff:
07:e5:76:33:d4:a2:95:17:ab:9d:88:c6:17:d0:dd:
66:9a:96:83:35:12:f3:6b:2c:39:0e:cf:cf:78:69:
dc:7b:65:8f:b1:06:c6:ce:64:4d:93:d1:54:ee:01:
75:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CA:3B:8C:CE:9F:08:A9:04:92:19:B8:25:0E:33:22:FA:EF:A8:2A
X509v3 Authority Key Identifier:
keyid:AC:5F:C6:C6:AE:A3:F0:E4:ED:F7:CC:B9:2E:6E:B2:37:7A:74:79:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/Nco7jM6fCKkEkhm4JQ4zIvrvqCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.24.80.0/22
Signature Algorithm: sha256WithRSAEncryption
35:1e:f0:8a:a2:01:ba:d9:91:97:2d:20:f7:20:90:99:e2:e7:
ab:b8:cc:dd:d2:66:df:f4:3b:4d:72:5e:6e:8a:02:37:1b:82:
0b:16:86:7a:62:0a:1b:d0:f5:96:37:d4:9b:76:9e:aa:47:80:
6b:ac:0a:a0:dc:61:33:af:fa:ef:98:15:57:89:38:fb:c8:11:
b4:99:bf:f6:43:9a:ec:8e:ea:ac:32:4d:aa:73:f4:91:8c:53:
c9:2c:95:de:d0:bd:ba:e3:53:20:e7:1e:8c:5e:9e:f7:27:f5:
45:45:5f:71:6d:d6:d2:96:c7:dc:e4:7d:40:74:2a:e5:6f:84:
0d:ae:43:d6:a0:f8:25:8a:d0:52:7d:f4:0f:91:48:6e:ba:b1:
0d:4e:f0:89:16:4d:f5:fe:5b:3f:14:f1:4c:1a:f5:cc:b8:d3:
f6:e6:1d:db:c5:51:33:6a:59:1a:b7:fe:12:1d:40:e2:cb:5b:
69:f4:97:3d:be:67:b1:39:ef:e6:eb:16:0d:28:ef:32:f5:c0:
f4:ba:7a:00:af:25:da:3c:e4:aa:be:9a:4c:f5:8e:97:f7:a6:
aa:d2:40:50:8c:12:da:43:e7:55:5e:99:23:13:70:97:10:66:
d3:be:08:8f:0c:4f:41:90:4b:ad:69:44:2b:04:55:2e:23:9c:
48:19:38:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:47 2025 by rpki-client on console.sobornost.net