Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/TSnW5LPn5ivCEhZ09WlDUHGtTTs.roa
File: TSnW5LPn5ivCEhZ09WlDUHGtTTs.roa (raw, json)
Hash identifier: G+x6DV9h2vgaW8F6rPRXljn5SD+izN1YCHl7dux4srI=
Subject key identifier: 4D:29:D6:E4:B3:E7:E6:2B:C2:12:16:74:F5:69:43:50:71:AD:4D:3B
Certificate issuer: /CN=ac5fc6c6aea3f0e4edf7ccb92e6eb2377a7479a5
Certificate serial: 0194274861577F684B2642533949904F47E2
Authority key identifier: AC:5F:C6:C6:AE:A3:F0:E4:ED:F7:CC:B9:2E:6E:B2:37:7A:74:79:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/TSnW5LPn5ivCEhZ09WlDUHGtTTs.roa
Signing time: Thu 02 Jan 2025 13:50:42 +0000
ROA not before: Thu 02 Jan 2025 13:50:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202254
IP address blocks: 185.24.80.0/24 maxlen: 24
185.24.81.0/24 maxlen: 24
185.24.82.0/24 maxlen: 24
185.24.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:61:57:7f:68:4b:26:42:53:39:49:90:4f:47:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac5fc6c6aea3f0e4edf7ccb92e6eb2377a7479a5
Validity
Not Before: Jan 2 13:50:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d29d6e4b3e7e62bc2121674f569435071ad4d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bb:b8:fd:ab:f0:38:8a:30:2a:81:51:0a:bb:
a7:64:29:6d:b2:8f:ab:00:58:83:83:c5:3c:ac:ee:
40:03:1b:ac:19:f6:9b:c1:1b:9a:86:f3:f5:c5:08:
6a:d0:de:39:8f:d1:cd:32:27:0b:75:a7:70:30:ee:
15:c2:fa:58:47:cb:b6:f9:b3:51:16:3b:43:b6:38:
7a:49:34:10:18:32:a9:c4:18:48:1d:5d:1f:61:15:
e8:60:9f:7d:cc:5d:36:7a:94:97:1c:34:c1:c4:81:
f5:da:57:bb:99:27:d2:c1:0d:d1:bf:14:30:b0:4e:
47:63:db:94:30:4c:af:36:33:83:e4:80:42:91:d3:
54:84:58:b2:a8:1a:b6:d6:b6:b6:20:61:1a:70:b6:
4b:b3:a4:f8:9d:be:53:7f:b6:1a:47:61:7a:a5:8a:
44:d4:2a:3c:71:a7:78:70:eb:91:89:c3:38:4f:91:
ac:0d:2d:a6:77:c4:50:d8:56:21:79:56:15:ab:e7:
e4:e7:ba:f8:38:59:88:35:b8:a2:7c:a7:dd:70:a8:
3e:06:57:a5:40:d2:aa:f6:72:5f:12:87:65:9b:11:
bb:21:68:36:6f:86:66:09:82:9b:1a:e4:05:00:52:
1e:ec:11:77:38:df:47:fc:67:80:36:e0:57:f4:b3:
92:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:29:D6:E4:B3:E7:E6:2B:C2:12:16:74:F5:69:43:50:71:AD:4D:3B
X509v3 Authority Key Identifier:
keyid:AC:5F:C6:C6:AE:A3:F0:E4:ED:F7:CC:B9:2E:6E:B2:37:7A:74:79:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/TSnW5LPn5ivCEhZ09WlDUHGtTTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.24.80.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:e7:1f:b3:2b:f4:cb:dd:35:7f:8c:08:8a:20:dd:96:3b:67:
8f:b0:be:5a:05:08:2f:28:9c:54:29:46:d3:de:c1:dc:a1:ae:
ca:4e:06:1b:a6:e1:c4:d4:bb:d2:f4:a5:cc:2a:e6:8c:37:4a:
26:54:ec:e1:50:ee:bc:97:01:81:ad:03:1b:e8:c7:d0:12:d9:
48:f1:fc:3d:d5:24:59:32:5c:a1:3f:e7:7c:9f:9d:be:5a:7d:
89:51:86:84:ef:5e:04:20:7f:13:93:dc:71:e7:63:f8:45:31:
04:8d:20:c1:61:73:c4:df:ba:af:74:11:6f:2e:e8:de:c6:d2:
b7:2a:5c:30:93:1d:f4:0b:4e:45:94:8c:69:36:c1:2a:03:31:
c1:eb:1d:5b:1b:59:5a:2a:d3:84:62:26:b0:8d:dc:33:a6:e5:
c0:e1:d0:5b:17:c7:3c:80:20:48:a1:e3:bf:cf:73:17:99:95:
f8:5d:7b:0e:33:8c:7e:72:08:74:0a:54:38:89:b2:06:b7:84:
b4:46:8c:d4:76:fc:6d:12:2d:2c:35:2b:2c:65:d1:e1:d5:48:
b4:60:ed:cc:29:15:33:51:95:a9:5e:44:bf:36:f1:7f:9c:70:
6b:f7:d5:9e:f0:81:30:0b:75:c4:84:8d:f9:5b:3b:33:25:8d:
cd:7d:91:a2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnSGFXf2hLJkJTOUmQT0fiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjNWZjNmM2YWVhM2YwZTRlZGY3Y2NiOTJlNmViMjM3N2E3
NDc5YTUwHhcNMjUwMTAyMTM1MDQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZDI5ZDZlNGIzZTdlNjJiYzIxMjE2NzRmNTY5NDM1MDcxYWQ0ZDNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbu4/avwOIowKoFRCrunZCltso+r
AFiDg8U8rO5AAxusGfabwRuahvP1xQhq0N45j9HNMicLdadwMO4VwvpYR8u2+bNR
FjtDtjh6STQQGDKpxBhIHV0fYRXoYJ99zF02epSXHDTBxIH12le7mSfSwQ3RvxQw
sE5HY9uUMEyvNjOD5IBCkdNUhFiyqBq21ra2IGEacLZLs6T4nb5Tf7YaR2F6pYpE
1Co8cad4cOuRicM4T5GsDS2md8RQ2FYheVYVq+fk57r4OFmINbiifKfdcKg+Blel
QNKq9nJfEodlmxG7IWg2b4ZmCYKbGuQFAFIe7BF3ON9H/GeANuBX9LOS1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE0p1uSz5+YrwhIWdPVpQ1BxrU07MB8GA1UdIwQY
MBaAFKxfxsauo/Dk7ffMuS5usjd6dHmlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckZfR3hxNmo4T1R0OTh5NUxtNnlOM3AwZWFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8wODI3ZTAtMzMzMS00MGI0LTk5YjIt
OWExMzcwOTJjZGQwLzEvVFNuVzVMUG41aXZDRWhaMDlXbERVSEd0VFRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8wODI3ZTAtMzMzMS00MGI0LTk5YjItOWExMzcwOTJjZGQw
LzEvckZfR3hxNmo4T1R0OTh5NUxtNnlOM3AwZWFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuRhQMA0G
CSqGSIb3DQEBCwUAA4IBAQCd5x+zK/TL3TV/jAiKIN2WO2ePsL5aBQgvKJxUKUbT
3sHcoa7KTgYbpuHE1LvS9KXMKuaMN0omVOzhUO68lwGBrQMb6MfQEtlI8fw91SRZ
MlyhP+d8n52+Wn2JUYaE714EIH8Tk9xx52P4RTEEjSDBYXPE37qvdBFvLujextK3
Klwwkx30C05FlIxpNsEqAzHB6x1bG1laKtOEYiawjdwzpuXA4dBbF8c8gCBIoeO/
z3MXmZX4XXsOM4x+cgh0ClQ4ibIGt4S0RozUdvxtEi0sNSssZdHh1Ui0YO3MKRUz
UZWpXkS/NvF/nHBr99We8IEwC3XEhI35WzszJY3NfZGi
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:47 2025 by rpki-client on console.sobornost.net