Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/h-jm1BLS9IvvXFUt65doG6SmjKs.roa
File: h-jm1BLS9IvvXFUt65doG6SmjKs.roa (raw, json)
Hash identifier: SPX4w9cc6FxiyrggBKn+FUAfxJuZhXsTTQy+RHHDQmQ=
Subject key identifier: 87:E8:E6:D4:12:D2:F4:8B:EF:5C:55:2D:EB:97:68:1B:A4:A6:8C:AB
Certificate issuer: /CN=25d80fe6b97f522867c37a8c53f0a58e7709fbc3
Certificate serial: 01942521E72D3A2F528E45DD7ABB10C4D2E8
Authority key identifier: 25:D8:0F:E6:B9:7F:52:28:67:C3:7A:8C:53:F0:A5:8E:77:09:FB:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/h-jm1BLS9IvvXFUt65doG6SmjKs.roa
Signing time: Thu 02 Jan 2025 03:49:26 +0000
ROA not before: Thu 02 Jan 2025 03:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62250
IP address blocks: 185.166.60.0/22 maxlen: 22
185.166.60.0/24 maxlen: 24
185.166.61.0/24 maxlen: 24
185.166.62.0/24 maxlen: 24
185.166.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:e7:2d:3a:2f:52:8e:45:dd:7a:bb:10:c4:d2:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25d80fe6b97f522867c37a8c53f0a58e7709fbc3
Validity
Not Before: Jan 2 03:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87e8e6d412d2f48bef5c552deb97681ba4a68cab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:87:9c:53:00:f6:b1:71:1f:0e:59:53:86:dd:
9e:c0:27:62:33:4d:0c:4f:c5:14:87:51:e7:11:48:
6c:d6:7d:44:01:5b:c4:48:7b:16:f7:f0:5a:32:4e:
b1:ef:9f:3a:b4:78:0c:8e:88:2c:f3:00:47:65:4c:
d2:38:af:b3:93:eb:c0:c8:ca:90:fa:fa:dc:4d:fe:
e0:61:99:9e:77:bc:77:a2:95:88:ed:1b:86:0b:3e:
c6:3c:82:ac:ce:cc:19:d8:f5:96:90:41:27:50:53:
7d:55:30:64:5a:87:8d:a9:56:36:75:30:04:34:42:
df:20:63:d2:a3:23:ef:57:cc:72:ce:c6:99:52:5a:
73:1e:93:1b:31:51:c2:f4:22:65:ee:d8:69:38:d2:
62:80:37:0d:f3:86:02:d8:ac:2c:f1:de:80:a6:0f:
7a:13:4a:0b:61:10:39:4e:d3:56:9b:e5:ed:82:ab:
ba:65:eb:fc:60:ea:34:84:5f:d0:76:73:1b:ce:eb:
0b:6a:a3:bd:cf:27:1c:71:41:8a:8c:93:7d:f8:8c:
9d:45:2d:b5:19:ed:43:4f:96:19:fd:b7:24:f6:f3:
0e:b9:d3:4e:f9:22:41:be:07:55:60:a3:54:79:26:
cc:8b:61:c4:30:d1:24:d4:4f:b9:46:cb:bc:44:3b:
73:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E8:E6:D4:12:D2:F4:8B:EF:5C:55:2D:EB:97:68:1B:A4:A6:8C:AB
X509v3 Authority Key Identifier:
keyid:25:D8:0F:E6:B9:7F:52:28:67:C3:7A:8C:53:F0:A5:8E:77:09:FB:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/h-jm1BLS9IvvXFUt65doG6SmjKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.166.60.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:6e:90:4b:3b:18:66:85:af:ee:dd:16:67:f0:1c:ae:d9:69:
12:f5:87:88:b9:9d:bc:4b:7a:64:ea:ec:6e:1e:20:e8:ab:04:
59:3a:09:a4:f2:85:1e:36:34:1e:83:a7:39:04:11:b5:ea:a3:
cc:59:c0:e2:e3:d0:6c:e5:94:dd:5e:64:59:f2:69:c7:f1:9a:
76:88:03:b0:7c:c5:95:30:f2:b1:8d:02:af:4d:37:98:2c:85:
d0:cb:3f:14:65:90:23:b5:87:6b:9e:5c:4d:33:eb:a9:cc:be:
e7:16:1b:c8:d1:0b:1a:e7:a4:13:32:81:2d:fd:dc:ae:b5:79:
8b:04:e7:ad:03:8a:02:4f:04:e9:f2:a8:a4:9b:7d:04:52:e8:
75:8e:4d:f0:db:c0:5c:b5:d1:5b:0f:04:77:eb:23:b6:e6:f8:
fc:68:3b:ed:43:1e:b7:e5:fa:4e:bd:87:ff:5c:81:4e:b4:e4:
92:77:5a:6d:42:e6:20:60:9a:79:50:e9:a0:ae:53:e0:ca:4e:
54:2e:4e:7d:df:b2:ca:5b:3b:45:8b:f5:32:67:08:25:56:56:
59:48:46:76:3e:50:aa:2d:6b:35:25:87:d2:ff:d5:89:c5:79:
66:fe:a7:10:2f:0e:df:6a:01:70:6d:e0:a8:82:ee:63:ec:fd:
0a:63:38:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:30 2025 by rpki-client on console.sobornost.net