Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/jDmMVnVEj7iOPqXeCoy4UcNMtC0.roa
File: jDmMVnVEj7iOPqXeCoy4UcNMtC0.roa (raw, json)
Hash identifier: AlwSkDNB+PyouSsBObLeJD6B/YCADYnElpRrUwT9nkM=
Subject key identifier: 8C:39:8C:56:75:44:8F:B8:8E:3E:A5:DE:0A:8C:B8:51:C3:4C:B4:2D
Certificate issuer: /CN=de01c443831cf930b7478708d76a3cf44d89a162
Certificate serial: 0192C52C23035FC9491623C658C8198F06C0
Authority key identifier: DE:01:C4:43:83:1C:F9:30:B7:47:87:08:D7:6A:3C:F4:4D:89:A1:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gHEQ4Mc-TC3R4cI12o89E2JoWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/jDmMVnVEj7iOPqXeCoy4UcNMtC0.roa
Signing time: Fri 25 Oct 2024 19:34:16 +0000
ROA not before: Fri 25 Oct 2024 19:34:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59504
IP address blocks: 185.42.24.0/24 maxlen: 24
185.42.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c5:2c:23:03:5f:c9:49:16:23:c6:58:c8:19:8f:06:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de01c443831cf930b7478708d76a3cf44d89a162
Validity
Not Before: Oct 25 19:34:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c398c5675448fb88e3ea5de0a8cb851c34cb42d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ed:21:71:3f:db:2c:bc:e7:f5:57:5b:54:79:
ac:83:09:93:dd:ba:5b:15:81:83:c3:26:15:83:7a:
9f:c4:2e:81:d2:0f:ac:f1:36:81:51:a8:09:96:18:
71:7c:8b:0c:a5:7d:1d:46:2a:d0:a3:65:99:20:ef:
da:2e:eb:9d:26:69:ad:66:0f:de:17:70:05:4d:0c:
3c:f3:e2:e6:c7:45:75:85:38:c6:a6:b3:ad:97:4b:
13:b6:e9:49:01:22:fb:6e:0c:0d:47:c8:8b:d2:d5:
13:3c:e2:1a:11:35:8d:3f:55:1f:51:cc:d8:d8:22:
74:76:64:02:99:f0:74:2d:c7:93:52:f8:c0:0c:30:
51:75:02:b7:28:95:18:77:ff:10:e6:91:41:33:c7:
7d:f5:a2:9a:ce:13:ed:f6:e2:e1:03:54:9c:3b:26:
35:c7:0d:a6:bd:8c:3c:1e:f5:8a:bf:85:78:53:6c:
e2:15:10:49:fb:96:1d:b6:d6:20:2b:fb:df:01:c9:
65:9f:44:17:a6:27:f7:6b:18:4e:23:fe:97:41:ff:
5b:e1:45:d2:c0:88:fd:0f:eb:48:2d:ec:a5:9c:d1:
c5:cd:9c:68:bf:73:fd:f2:40:98:5a:f2:ce:2f:55:
df:4c:3e:26:87:4e:83:6c:e8:4e:4a:e5:fb:de:cd:
97:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:39:8C:56:75:44:8F:B8:8E:3E:A5:DE:0A:8C:B8:51:C3:4C:B4:2D
X509v3 Authority Key Identifier:
keyid:DE:01:C4:43:83:1C:F9:30:B7:47:87:08:D7:6A:3C:F4:4D:89:A1:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gHEQ4Mc-TC3R4cI12o89E2JoWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/jDmMVnVEj7iOPqXeCoy4UcNMtC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/3gHEQ4Mc-TC3R4cI12o89E2JoWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.24.0/24
185.42.26.0/24
Signature Algorithm: sha256WithRSAEncryption
38:5e:74:c0:c1:c3:31:42:06:e6:91:1f:62:6e:9d:c5:43:f6:
31:a6:4a:4b:c0:84:ad:db:a0:1f:75:00:4c:0a:1b:e9:aa:e9:
97:58:8b:a9:9c:ba:9a:2d:1b:82:c1:8a:ff:d3:b5:ff:16:3c:
bd:ba:67:ee:13:98:7a:6e:b8:e4:61:ac:c8:ce:c6:3e:cb:a2:
99:a1:4a:7c:b7:55:30:5b:57:c8:83:cc:7d:ab:81:cc:d8:1e:
6d:4d:6c:f6:e4:8f:12:9c:8e:d7:ca:b7:c7:70:19:aa:cf:9d:
76:d2:25:3c:fe:06:81:9a:62:cf:3f:2b:fa:59:39:5e:5a:2b:
36:57:6b:45:65:de:a9:2d:f6:aa:57:b8:6c:1b:81:e0:c1:a6:
4d:e1:b7:2b:b9:bc:bb:a5:04:03:dc:e0:25:63:f4:8d:0f:48:
61:90:62:10:db:0f:43:49:f8:3f:07:22:04:09:96:26:d5:77:
bd:31:85:17:c8:57:09:b6:04:01:61:57:10:94:43:e4:56:8f:
14:ff:d0:35:78:57:87:f9:42:4a:38:15:6d:c9:09:69:ab:cf:
a0:3a:23:2e:44:74:0b:5e:bf:50:f6:fb:f8:26:0b:0f:3f:6e:
d3:5e:9c:7d:bf:e5:18:53:da:ae:fc:0b:34:d0:76:f3:e5:4b:
76:ff:cf:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:35:45 2025 by rpki-client