Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/_bjBL5LK2WVAfL5nxIuCTdAEYdU.roa
File: _bjBL5LK2WVAfL5nxIuCTdAEYdU.roa (raw, json)
Hash identifier: hu7dwrJP9WhWK3glmNV0xBWx3TcYlk14ctZGu4bZyLs=
Subject key identifier: FD:B8:C1:2F:92:CA:D9:65:40:7C:BE:67:C4:8B:82:4D:D0:04:61:D5
Certificate issuer: /CN=8eacc7f3b218c492d88dbebc9cdcb9a2d2d30ed1
Certificate serial: 019425217CEAD791DD03FD12526A6868D6A2
Authority key identifier: 8E:AC:C7:F3:B2:18:C4:92:D8:8D:BE:BC:9C:DC:B9:A2:D2:D3:0E:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqzH87IYxJLYjb68nNy5otLTDtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/_bjBL5LK2WVAfL5nxIuCTdAEYdU.roa
Signing time: Thu 02 Jan 2025 03:48:59 +0000
ROA not before: Thu 02 Jan 2025 03:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60039
IP address blocks: 185.60.236.0/24 maxlen: 24
185.98.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:7c:ea:d7:91:dd:03:fd:12:52:6a:68:68:d6:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eacc7f3b218c492d88dbebc9cdcb9a2d2d30ed1
Validity
Not Before: Jan 2 03:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fdb8c12f92cad965407cbe67c48b824dd00461d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fd:44:15:7d:ad:a3:02:d8:48:e2:b3:26:7d:
f1:2f:0c:dd:7c:74:b3:d5:23:4c:7b:fa:57:cd:26:
ca:d0:02:ef:ba:b5:d4:a5:c6:1c:aa:ad:f7:27:64:
35:72:db:43:a0:bd:0a:ef:ec:01:bf:f3:f3:64:cd:
ba:13:56:bf:1c:89:09:c7:52:15:6c:02:eb:f8:01:
29:92:f4:f9:66:46:37:88:20:4a:1d:62:93:e3:8c:
59:9f:47:65:5c:50:e7:24:79:aa:92:c6:6c:b0:b2:
2b:60:59:68:7c:aa:ec:b1:e5:e3:5e:96:99:b8:5f:
3b:ae:e4:b1:3f:ae:4e:74:fa:df:48:9b:8a:07:b9:
fc:85:ab:86:f9:23:ec:7f:e7:ca:16:5a:e3:a8:a2:
a4:ba:ed:fa:77:c3:b8:9c:51:09:ad:84:56:ef:38:
8c:d0:61:15:dd:e8:b6:a7:1f:be:d9:9a:15:0e:d8:
b6:11:1c:c0:85:3f:97:cd:cd:92:1d:11:a9:9b:7d:
7a:2f:bd:2f:2f:2f:9a:0a:76:19:61:2a:54:18:9d:
93:cd:7a:8d:b3:4f:24:ab:d5:bf:cd:2c:11:02:a1:
8c:8e:24:0c:76:3e:f6:53:a6:8b:7e:96:45:34:b4:
93:4c:38:65:98:eb:38:29:59:43:a0:95:6f:d2:d2:
ae:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B8:C1:2F:92:CA:D9:65:40:7C:BE:67:C4:8B:82:4D:D0:04:61:D5
X509v3 Authority Key Identifier:
keyid:8E:AC:C7:F3:B2:18:C4:92:D8:8D:BE:BC:9C:DC:B9:A2:D2:D3:0E:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqzH87IYxJLYjb68nNy5otLTDtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/_bjBL5LK2WVAfL5nxIuCTdAEYdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.236.0/24
185.98.104.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:dc:02:7e:83:2a:9a:c5:6e:b4:14:7d:7c:32:13:bc:ed:13:
9b:0c:d0:be:c6:72:7c:41:2b:ff:ca:59:e8:e3:4d:6f:ae:94:
cd:27:9c:e1:28:68:93:0c:fb:59:dc:94:69:fa:ef:c9:ce:ae:
b6:9f:ba:d6:05:79:82:b6:8a:77:83:8d:2f:2a:7d:78:a7:e0:
24:ce:86:62:a4:fa:fd:1d:5f:c8:e2:17:95:e1:10:9c:5e:6c:
60:d9:f6:59:0c:1d:fc:a4:2c:8c:e3:7b:99:b7:40:10:5a:c9:
d2:99:4a:46:8b:a1:22:6c:2e:63:f4:74:1c:90:6f:41:d1:47:
d6:80:48:58:e9:85:20:62:65:97:08:ad:db:d9:9c:fe:d5:6b:
fd:11:b2:70:f2:f8:07:8c:1f:4c:7c:b2:e5:fe:39:67:66:0c:
89:29:af:c4:f4:2c:61:f3:f9:82:49:7e:9f:31:19:69:ea:95:
20:f1:78:23:12:12:76:ff:0a:2d:72:ae:91:61:ab:d7:25:7b:
2a:1c:8e:d7:d6:ec:a3:0a:1c:9f:a8:e6:bf:7a:d4:0f:10:39:
65:9e:af:5b:b3:90:fb:1b:ed:90:b4:7b:ab:37:4b:f6:bc:dd:
d1:b9:22:8c:9c:d5:bd:dc:35:70:fb:ca:04:0e:20:60:0e:09:
d9:bb:69:3b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQlIXzq15HdA/0SUmpoaNaiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYWNjN2YzYjIxOGM0OTJkODhkYmViYzljZGNiOWEyZDJk
MzBlZDEwHhcNMjUwMTAyMDM0ODU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZGI4YzEyZjkyY2FkOTY1NDA3Y2JlNjdjNDhiODI0ZGQwMDQ2MWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2v1EFX2towLYSOKzJn3xLwzdfHSz
1SNMe/pXzSbK0ALvurXUpcYcqq33J2Q1cttDoL0K7+wBv/PzZM26E1a/HIkJx1IV
bALr+AEpkvT5ZkY3iCBKHWKT44xZn0dlXFDnJHmqksZssLIrYFlofKrsseXjXpaZ
uF87ruSxP65OdPrfSJuKB7n8hauG+SPsf+fKFlrjqKKkuu36d8O4nFEJrYRW7ziM
0GEV3ei2px++2ZoVDti2ERzAhT+Xzc2SHRGpm316L70vLy+aCnYZYSpUGJ2TzXqN
s08kq9W/zSwRAqGMjiQMdj72U6aLfpZFNLSTTDhlmOs4KVlDoJVv0tKuEQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFP24wS+SytllQHy+Z8SLgk3QBGHVMB8GA1UdIwQY
MBaAFI6sx/OyGMSS2I2+vJzcuaLS0w7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanF6SDg3SVl4SkxZamI2OG5OeTVvdExURHRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9iZDQyZWEtZWJiNi00NDQ1LWJkMjAt
Nzc1ZGE2YWEzMTIzLzEvX2JqQkw1TEsyV1ZBZkw1bnhJdUNUZEFFWWRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9iZDQyZWEtZWJiNi00NDQ1LWJkMjAtNzc1ZGE2YWEzMTIz
LzEvanF6SDg3SVl4SkxZamI2OG5OeTVvdExURHRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuTzsAwQA
uWJoMA0GCSqGSIb3DQEBCwUAA4IBAQCc3AJ+gyqaxW60FH18MhO87RObDNC+xnJ8
QSv/ylno401vrpTNJ5zhKGiTDPtZ3JRp+u/Jzq62n7rWBXmCtop3g40vKn14p+Ak
zoZipPr9HV/I4heV4RCcXmxg2fZZDB38pCyM43uZt0AQWsnSmUpGi6EibC5j9HQc
kG9B0UfWgEhY6YUgYmWXCK3b2Zz+1Wv9EbJw8vgHjB9MfLLl/jlnZgyJKa/E9Cxh
8/mCSX6fMRlp6pUg8XgjEhJ2/wotcq6RYavXJXsqHI7X1uyjChyfqOa/etQPEDll
nq9bs5D7G+2QtHurN0v2vN3RuSKMnNW93DVw+8oEDiBgDgnZu2k7
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:30 2025 by rpki-client on console.sobornost.net