Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/G4xGjeiK9NbX0jXJY8uDkRmJuDc.roa
File: G4xGjeiK9NbX0jXJY8uDkRmJuDc.roa (raw, json)
Hash identifier: muHuLGPiPatokQGw15YR2MNayDycTrh2aeAcpqtHkYI=
Subject key identifier: 1B:8C:46:8D:E8:8A:F4:D6:D7:D2:35:C9:63:CB:83:91:19:89:B8:37
Certificate issuer: /CN=8eacc7f3b218c492d88dbebc9cdcb9a2d2d30ed1
Certificate serial: 019425217DCAA6ACC5FDFC2BB0C78C67E30C
Authority key identifier: 8E:AC:C7:F3:B2:18:C4:92:D8:8D:BE:BC:9C:DC:B9:A2:D2:D3:0E:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqzH87IYxJLYjb68nNy5otLTDtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/G4xGjeiK9NbX0jXJY8uDkRmJuDc.roa
Signing time: Thu 02 Jan 2025 03:48:59 +0000
ROA not before: Thu 02 Jan 2025 03:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201860
IP address blocks: 185.60.237.0/24 maxlen: 24
185.60.238.0/24 maxlen: 24
185.60.239.0/24 maxlen: 24
185.98.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:7d:ca:a6:ac:c5:fd:fc:2b:b0:c7:8c:67:e3:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eacc7f3b218c492d88dbebc9cdcb9a2d2d30ed1
Validity
Not Before: Jan 2 03:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b8c468de88af4d6d7d235c963cb83911989b837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:23:85:d9:eb:8d:91:1f:cb:db:e4:49:ce:2e:
d8:7b:2d:f6:97:c0:e2:51:76:28:d7:8f:48:32:b4:
b3:a1:35:b8:26:3c:fd:21:85:b6:f9:da:dd:8a:a3:
10:87:01:c8:3c:f9:6d:53:f1:6b:c9:86:19:72:66:
19:55:e7:28:cc:f2:dd:b2:eb:96:2c:1d:c1:65:54:
a3:bf:c7:b5:77:25:ac:4c:4a:75:cd:4a:0f:67:73:
cf:cf:d8:db:e0:35:b8:4a:eb:98:b4:3e:4f:87:56:
06:6e:2c:61:3a:0b:ba:12:b1:e4:31:9e:2d:7e:f4:
b9:0a:3a:08:53:0e:d5:7a:4c:b8:d0:50:84:b4:6e:
f7:31:61:5e:ce:a6:cc:6d:c1:67:8c:81:28:5b:82:
1b:ac:0f:3d:5d:6c:3e:ed:25:12:18:73:7d:86:ed:
b7:16:6e:db:6a:a4:9f:03:61:7b:43:5c:de:87:04:
9c:bd:c2:1e:b3:09:a1:94:b1:7a:9b:d1:7d:87:39:
c4:76:7b:25:64:98:41:de:ec:83:50:fa:6a:3e:a6:
0e:39:f7:8c:39:f3:75:48:ca:0f:40:99:19:e0:32:
13:76:a5:23:49:d2:12:f9:a5:05:bc:6d:01:75:3f:
1f:af:46:16:16:a8:f4:18:8f:9f:a1:81:c7:6c:06:
cb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:8C:46:8D:E8:8A:F4:D6:D7:D2:35:C9:63:CB:83:91:19:89:B8:37
X509v3 Authority Key Identifier:
keyid:8E:AC:C7:F3:B2:18:C4:92:D8:8D:BE:BC:9C:DC:B9:A2:D2:D3:0E:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqzH87IYxJLYjb68nNy5otLTDtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/G4xGjeiK9NbX0jXJY8uDkRmJuDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.237.0-185.60.239.255
185.98.107.0/24
Signature Algorithm: sha256WithRSAEncryption
20:80:de:6f:18:6e:55:fb:c8:3e:66:24:ad:a0:60:a1:1b:52:
6e:d6:15:e6:35:89:d9:74:62:f0:1f:a3:2e:62:1e:87:31:83:
92:8b:e1:6b:42:05:32:60:85:b8:6b:cc:88:d5:c1:5d:60:9d:
64:e0:4a:6c:ec:4e:a9:bf:dc:00:92:61:ec:9a:1d:a6:7b:2a:
25:68:ed:31:68:72:fe:94:46:e8:e4:11:d1:f8:ec:7e:29:cd:
e0:c7:97:bb:9c:6c:23:e1:6e:76:a8:33:14:56:30:70:42:2c:
da:d5:a2:9f:07:fa:d0:8f:6e:ae:cb:90:85:03:03:71:d5:aa:
c9:13:c6:67:30:e3:b9:1c:38:73:b8:b5:1a:93:45:d4:dd:96:
d7:86:a8:c6:81:f3:00:9a:ed:e3:59:e6:b3:1f:b3:8c:71:82:
e5:5d:fa:af:68:42:1f:18:b0:fe:69:e2:49:ad:da:1f:7c:03:
ce:77:e3:09:fa:05:b0:81:68:cb:91:32:54:e6:56:5e:d8:86:
4f:59:9d:d7:bf:45:e8:ce:1e:2d:b6:76:bb:68:d4:39:95:c6:
31:27:0c:3c:11:aa:98:20:b3:e0:4d:1a:d9:65:22:85:42:26:
d4:32:f8:d2:40:6b:2e:e3:35:43:c8:87:86:46:fa:29:bc:c8:
d0:dd:aa:13
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:30 2025 by rpki-client on console.sobornost.net