Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/pmr0oeoxTie2nirqR7V3MQtVfPM.roa
File: pmr0oeoxTie2nirqR7V3MQtVfPM.roa (raw, json)
Hash identifier: uCpamLlEEDUklMoNjmunm6RZIjxtuoipAzERlbvxqhI=
Subject key identifier: A6:6A:F4:A1:EA:31:4E:27:B6:9E:2A:EA:47:B5:77:31:0B:55:7C:F3
Certificate issuer: /CN=25d80fe6b97f522867c37a8c53f0a58e7709fbc3
Certificate serial: 018CC94E1F8579213D4BAF082179A3C3D67A
Authority key identifier: 25:D8:0F:E6:B9:7F:52:28:67:C3:7A:8C:53:F0:A5:8E:77:09:FB:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/pmr0oeoxTie2nirqR7V3MQtVfPM.roa
Signing time: Tue 02 Jan 2024 08:33:09 +0000
ROA not before: Tue 02 Jan 2024 08:33:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62250
IP address blocks: 185.166.63.0/24 maxlen: 24
185.166.60.0/24 maxlen: 24
185.166.61.0/24 maxlen: 24
185.166.60.0/22 maxlen: 22
185.166.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:1f:85:79:21:3d:4b:af:08:21:79:a3:c3:d6:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25d80fe6b97f522867c37a8c53f0a58e7709fbc3
Validity
Not Before: Jan 2 08:33:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a66af4a1ea314e27b69e2aea47b577310b557cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:77:de:fe:43:ce:ce:93:16:1d:b2:de:1e:38:
8c:1f:2e:41:ee:58:7d:a7:3d:fb:70:7e:94:80:82:
8c:49:cb:4a:92:7d:37:c1:12:a3:ae:69:2a:c4:a0:
f7:a5:12:78:9e:04:48:40:5d:fe:95:80:dc:3b:c6:
8b:67:17:17:c8:db:94:24:13:ec:a2:ac:77:9f:e7:
b3:e9:b3:dd:ea:82:eb:c4:00:0d:9c:3b:ff:a3:e6:
b8:4d:58:ed:91:fc:b8:58:94:76:9f:e5:95:21:c7:
3d:96:55:51:e3:c0:8d:63:31:9c:9a:c6:32:ca:cc:
fb:9a:0c:6a:3f:16:10:ce:db:10:13:42:7e:86:14:
59:fe:81:32:6e:b8:06:0f:d7:27:d8:02:15:12:be:
9b:c2:d9:aa:ee:7e:d8:5a:c1:7e:7e:b0:e2:2c:9a:
8f:bf:45:d5:95:89:38:7e:7b:f9:a4:ee:b3:32:5f:
69:4a:a8:1b:a6:96:e8:f8:5f:37:68:09:1e:c4:33:
22:cc:a6:89:5c:35:9c:b3:03:79:9a:1d:8f:bc:6d:
b8:c7:d6:5d:1a:4b:be:a6:1b:66:d6:3b:d8:4e:af:
8c:55:43:c6:70:01:da:7e:de:54:48:df:b8:6d:16:
36:f4:b3:e9:dd:ef:56:c0:3d:e0:d7:e3:28:32:3e:
3b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:6A:F4:A1:EA:31:4E:27:B6:9E:2A:EA:47:B5:77:31:0B:55:7C:F3
X509v3 Authority Key Identifier:
keyid:25:D8:0F:E6:B9:7F:52:28:67:C3:7A:8C:53:F0:A5:8E:77:09:FB:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/pmr0oeoxTie2nirqR7V3MQtVfPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.166.60.0/22
Signature Algorithm: sha256WithRSAEncryption
71:e4:6f:27:92:ee:10:1f:04:b5:a6:69:15:e0:05:6f:41:66:
be:7b:58:f3:39:fd:09:5d:d3:8f:d1:ec:02:23:c6:89:e2:66:
7f:e6:e1:ca:ad:3a:64:47:34:37:0d:ba:e0:91:d7:d1:ba:64:
3c:4a:7f:32:8a:a9:6b:01:43:a0:c1:cc:8e:18:83:7a:90:9f:
f8:17:50:31:0d:38:a0:14:ac:43:74:6f:e7:4e:5c:5b:fa:dc:
27:50:67:47:f5:24:5d:09:48:6f:50:b6:4c:9e:9b:21:7e:9e:
d7:2b:65:ca:36:64:24:eb:10:c7:08:26:e4:7a:be:06:3b:75:
b8:ed:8f:00:05:49:6f:c0:da:c3:d5:32:13:dd:5d:2a:f5:cd:
9f:8b:15:48:1c:5c:1d:ab:d2:7b:08:8f:c3:25:66:d8:16:88:
9f:de:62:9f:77:0e:e2:02:48:5f:8a:b4:98:66:c1:11:8a:58:
71:d7:bd:55:bf:94:97:42:c9:fb:97:45:cf:8d:9a:73:ef:b0:
1c:d1:b5:ac:53:c9:74:dc:27:b0:02:80:4b:30:b5:60:68:d4:
d0:32:94:31:7f:b0:0f:b4:b2:73:9f:80:ef:04:c5:a5:9d:00:
71:82:17:9f:b5:f4:78:1a:c6:42:42:d4:8f:60:1d:5e:33:92:
d3:1b:b3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:47 2024 by rpki-client on console.sobornost.net