Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/saUKT6D6bfZZPO38YMOF0mTQhqs.roa
File: saUKT6D6bfZZPO38YMOF0mTQhqs.roa (raw, json)
Hash identifier: yp3Hci3AL4Pw4TRERBpmO5GUDFOXjceWniFUMKPDbyw=
Subject key identifier: B1:A5:0A:4F:A0:FA:6D:F6:59:3C:ED:FC:60:C3:85:D2:64:D0:86:AB
Certificate issuer: /CN=ac5fc6c6aea3f0e4edf7ccb92e6eb2377a7479a5
Certificate serial: 01942748609A5DBE398C49C61C9533BB0AE1
Authority key identifier: AC:5F:C6:C6:AE:A3:F0:E4:ED:F7:CC:B9:2E:6E:B2:37:7A:74:79:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/saUKT6D6bfZZPO38YMOF0mTQhqs.roa
Signing time: Thu 02 Jan 2025 13:50:42 +0000
ROA not before: Thu 02 Jan 2025 13:50:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9121
IP address blocks: 185.24.80.0/24 maxlen: 24
185.24.81.0/24 maxlen: 24
185.24.82.0/24 maxlen: 24
185.24.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:60:9a:5d:be:39:8c:49:c6:1c:95:33:bb:0a:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac5fc6c6aea3f0e4edf7ccb92e6eb2377a7479a5
Validity
Not Before: Jan 2 13:50:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1a50a4fa0fa6df6593cedfc60c385d264d086ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cb:12:7b:4e:27:bc:e2:97:73:bc:ce:49:20:
51:96:2d:d1:ae:ba:df:28:ed:df:88:13:03:7b:0f:
a0:58:73:f0:14:4d:49:34:16:fe:5c:61:1f:c7:3f:
db:d2:92:e9:96:b9:d7:bf:d9:c2:fd:e5:fd:70:fc:
4a:80:7c:f9:a1:9e:2f:0b:10:e1:58:c1:e6:3f:32:
18:5b:a8:62:93:21:d6:2c:19:be:a4:af:03:97:68:
a9:8f:d4:c8:bc:4e:5e:ef:82:7b:4f:31:96:00:49:
35:0c:3e:81:7d:1c:b4:b4:9e:38:6b:70:73:de:d9:
9b:6a:a2:8d:90:91:5e:ee:97:b6:0b:85:15:2f:14:
8c:93:17:a0:f5:df:8f:a0:e2:a4:33:2e:f7:74:13:
cc:c9:92:41:1c:64:00:24:8f:87:59:22:f1:6a:6c:
02:41:dc:63:5e:b3:fa:48:82:6a:30:ef:6b:40:33:
71:a3:0f:11:5c:3e:9d:95:0e:97:2b:18:3c:e5:33:
29:14:85:8b:8d:0c:df:21:93:12:5e:20:65:ce:a6:
0a:37:24:f0:38:91:db:cb:cd:a9:0b:2e:2b:77:27:
2b:a8:7e:bb:a8:59:a4:95:cc:7b:73:a3:11:b2:37:
5f:43:eb:e9:60:37:60:37:f8:7a:80:9b:56:79:54:
26:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A5:0A:4F:A0:FA:6D:F6:59:3C:ED:FC:60:C3:85:D2:64:D0:86:AB
X509v3 Authority Key Identifier:
keyid:AC:5F:C6:C6:AE:A3:F0:E4:ED:F7:CC:B9:2E:6E:B2:37:7A:74:79:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/saUKT6D6bfZZPO38YMOF0mTQhqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.24.80.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:71:2e:e3:ce:ce:33:ff:7a:db:e8:5a:82:0f:40:9a:16:1e:
c4:6c:6f:53:73:ea:dc:88:ed:3d:7c:c8:05:4d:22:0a:ab:56:
d8:6e:f9:68:69:ce:b8:7f:d4:1d:73:ac:85:b3:6b:54:9d:8c:
b0:31:5f:71:71:25:a8:19:30:e5:5f:dd:31:6b:51:ed:f3:e9:
be:36:6c:1c:de:fa:df:f1:e0:2b:be:03:5c:99:a0:84:25:54:
9b:6d:ba:e8:22:ce:df:1e:41:d1:3b:1a:9f:b0:f4:d0:45:eb:
10:0c:7f:b6:7c:cd:92:bd:15:5f:27:54:21:0b:a6:5d:32:64:
47:04:22:29:25:14:b2:af:2f:42:42:b7:7f:d4:9f:57:0d:dd:
9e:2e:e0:bc:fe:e1:6f:97:63:d7:f6:59:33:2a:9a:82:d5:07:
94:b1:5c:70:26:9c:b2:12:ff:98:b2:e2:32:f4:f1:e5:93:a9:
d7:b0:24:23:16:24:e0:84:41:c7:82:e1:6d:97:32:48:95:3b:
7a:ca:09:7d:0d:86:71:fb:85:0e:89:9e:8a:b3:55:d0:34:41:
1c:1d:2d:91:da:4a:0e:0f:e9:5b:17:43:9f:ff:c1:6c:91:4d:
bd:20:30:3d:2e:64:c4:62:67:af:d1:45:14:43:a4:f6:fa:46:
4f:43:d0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:54:58 2025 by rpki-client