Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/EOZUjXctaYMkRcyyMQLguIWxilg.roa
File: EOZUjXctaYMkRcyyMQLguIWxilg.roa (raw, json)
Hash identifier: jYlCwqtOgmrWCQocWJbTWD5UljGXFXvAjEpukVvKrrM=
Subject key identifier: 10:E6:54:8D:77:2D:69:83:24:45:CC:B2:31:02:E0:B8:85:B1:8A:58
Certificate issuer: /CN=27c5f36413e7af472813fe3a714e2ecdaa21f2e8
Certificate serial: 019428252037EED47A79D5F5ACEEA46DD40E
Authority key identifier: 27:C5:F3:64:13:E7:AF:47:28:13:FE:3A:71:4E:2E:CD:AA:21:F2:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8XzZBPnr0coE_46cU4uzaoh8ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/EOZUjXctaYMkRcyyMQLguIWxilg.roa
Signing time: Thu 02 Jan 2025 17:51:49 +0000
ROA not before: Thu 02 Jan 2025 17:51:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60497
IP address blocks: 185.30.172.0/24 maxlen: 24
185.30.173.0/24 maxlen: 24
185.30.174.0/24 maxlen: 24
185.30.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:20:37:ee:d4:7a:79:d5:f5:ac:ee:a4:6d:d4:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c5f36413e7af472813fe3a714e2ecdaa21f2e8
Validity
Not Before: Jan 2 17:51:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10e6548d772d69832445ccb23102e0b885b18a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:da:58:a0:be:ce:93:6e:10:5c:32:65:7e:c4:
93:b7:ec:2c:fc:ab:9b:db:7d:1b:53:f3:47:e6:27:
3b:74:a4:cd:37:57:2a:4f:54:46:a9:ca:8f:9d:48:
c8:04:ff:5d:e6:aa:69:28:47:e2:19:6f:76:2b:c0:
d2:aa:07:99:9e:e8:52:96:ff:7b:e7:a0:16:a7:45:
f6:d8:b1:0c:4d:89:40:90:84:3b:89:3c:89:d9:dd:
9d:f8:fd:d5:bd:0d:bd:92:37:d6:fe:0a:f4:e7:47:
23:98:46:2c:15:b0:a9:eb:4f:c1:15:c6:7b:b4:62:
9b:6c:9f:9f:73:51:0e:65:15:0c:a4:a2:1d:4b:ee:
88:65:4a:9d:ec:9a:7a:58:fa:28:6a:1d:a2:70:09:
a0:d3:50:4d:55:b4:62:3f:19:9a:fc:80:70:a2:78:
d9:c7:53:47:a5:4c:fd:2a:b0:bd:9d:44:20:55:42:
b1:7f:e8:36:cc:50:94:a3:ee:5f:33:4f:e5:7d:f5:
29:cd:96:fa:e5:bd:49:81:7f:39:bb:e5:bb:85:31:
ea:8b:ef:6a:0b:52:4c:1a:7c:b9:3b:ce:dc:a3:71:
4b:79:1b:88:4b:89:8f:40:d0:c0:4c:69:0c:ce:c6:
3b:41:89:48:a0:79:3c:9c:5b:be:d9:7d:35:c2:ad:
0c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E6:54:8D:77:2D:69:83:24:45:CC:B2:31:02:E0:B8:85:B1:8A:58
X509v3 Authority Key Identifier:
keyid:27:C5:F3:64:13:E7:AF:47:28:13:FE:3A:71:4E:2E:CD:AA:21:F2:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8XzZBPnr0coE_46cU4uzaoh8ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/EOZUjXctaYMkRcyyMQLguIWxilg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/J8XzZBPnr0coE_46cU4uzaoh8ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.172.0/22
Signature Algorithm: sha256WithRSAEncryption
60:ca:1e:bf:cd:8b:c2:90:7f:45:9c:9a:33:21:94:d1:39:35:
da:1c:94:07:fe:0c:36:5c:1e:52:05:bd:f6:5d:e9:08:b4:7d:
d8:fc:61:ea:be:d4:ff:0f:5b:bd:2f:69:dd:dc:53:c8:a8:30:
06:12:f4:ed:f8:c6:f6:ee:5e:51:f0:f4:51:5d:4f:15:84:e7:
8e:90:b2:e7:90:6d:bc:ac:22:0d:5d:0b:79:37:5f:62:e1:db:
cb:b7:a2:02:14:46:fe:5b:d7:46:f2:b4:96:38:c5:fe:c3:01:
1b:ba:e7:76:2b:e4:e9:d7:c2:d6:f5:8c:bd:74:7a:59:bd:1e:
f0:88:f6:d5:de:99:f1:df:f6:da:33:65:76:1d:9e:23:e0:25:
10:fe:34:a6:4c:61:98:2a:11:29:d7:00:f6:f2:4e:1d:7b:7a:
d9:f0:e4:0c:e4:c5:8c:98:87:8d:1a:b2:7f:7f:07:f8:69:90:
97:4e:41:48:e3:1d:cf:d2:74:5a:52:de:ca:d2:89:61:80:dd:
a7:73:1d:2b:4c:ed:e8:57:69:60:42:9e:d2:f0:ff:25:8a:90:
81:4f:eb:63:62:9e:c9:68:47:c1:18:2f:57:5d:2c:3e:c6:60:
e4:bd:85:b5:bf:d8:da:2c:bc:29:90:81:c1:8c:d6:ed:bb:d7:
75:9b:5e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:40 2025 by rpki-client on console.sobornost.net