Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/819089-473b-463f-b87b-4253950f1155/1/99kZ91L5k4nve2PYsWtipJThPHU.roa
File: 99kZ91L5k4nve2PYsWtipJThPHU.roa (raw, json)
Hash identifier: bVtLb94sDBWJmE1C3lJHiBUqgO9xT7zdCZpTZaX8mXc=
Subject key identifier: F7:D9:19:F7:52:F9:93:89:EF:7B:63:D8:B1:6B:62:A4:94:E1:3C:75
Certificate issuer: /CN=da96b5bdafb28332dafe847ced14f7a5fad45e69
Certificate serial: 01941F8BFDE079CB46EDF73ACB328B173554
Authority key identifier: DA:96:B5:BD:AF:B2:83:32:DA:FE:84:7C:ED:14:F7:A5:FA:D4:5E:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pa1va-ygzLa_oR87RT3pfrUXmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/819089-473b-463f-b87b-4253950f1155/1/99kZ91L5k4nve2PYsWtipJThPHU.roa
Signing time: Wed 01 Jan 2025 01:47:35 +0000
ROA not before: Wed 01 Jan 2025 01:47:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204296
IP address blocks: 185.254.60.0/23 maxlen: 23
185.254.62.0/24 maxlen: 24
185.254.63.0/24 maxlen: 24
2a0c:4840::/29 maxlen: 29
2a0c:4847:ffff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8b:fd:e0:79:cb:46:ed:f7:3a:cb:32:8b:17:35:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da96b5bdafb28332dafe847ced14f7a5fad45e69
Validity
Not Before: Jan 1 01:47:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7d919f752f99389ef7b63d8b16b62a494e13c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:21:60:b9:83:60:53:50:33:f6:3a:75:5f:22:
7a:86:d4:31:1d:67:4e:43:94:df:08:31:b7:ae:dc:
20:b8:b4:b6:a5:1f:eb:f8:23:f1:c9:d7:af:24:ba:
5c:4e:42:e1:9a:d1:d0:05:aa:03:79:63:31:eb:70:
33:fc:5e:eb:ff:94:89:3f:30:08:ee:56:c1:19:4a:
f1:2e:64:55:17:00:28:38:2c:1d:11:3f:7f:c7:36:
8a:22:59:b7:bf:f0:41:66:73:3a:e9:af:26:1f:8d:
96:d0:26:ae:6a:d7:c9:05:e4:00:84:9d:3c:5e:3f:
49:e9:bc:97:c6:ce:05:b3:5c:94:7c:0e:47:14:46:
c1:83:64:b6:f6:6e:cb:8a:48:84:a8:04:31:f4:2b:
e4:8d:28:2a:a7:bd:24:a0:67:a8:56:d9:30:a3:0c:
4e:cb:e3:29:83:a9:24:f3:b2:e8:26:4b:63:5f:82:
ba:0e:a6:55:4d:59:73:55:7c:6d:e1:06:eb:ab:80:
48:c3:f1:81:72:af:0a:e0:3f:70:55:4e:5e:1c:b6:
de:fa:71:47:15:e1:ac:c2:93:45:07:65:1b:ae:66:
f5:cc:30:dc:06:07:50:91:f1:ad:7f:89:5b:b8:08:
91:29:7d:5b:65:eb:cc:8c:24:38:9c:8f:7d:af:14:
1b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D9:19:F7:52:F9:93:89:EF:7B:63:D8:B1:6B:62:A4:94:E1:3C:75
X509v3 Authority Key Identifier:
keyid:DA:96:B5:BD:AF:B2:83:32:DA:FE:84:7C:ED:14:F7:A5:FA:D4:5E:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pa1va-ygzLa_oR87RT3pfrUXmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/819089-473b-463f-b87b-4253950f1155/1/99kZ91L5k4nve2PYsWtipJThPHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/819089-473b-463f-b87b-4253950f1155/1/2pa1va-ygzLa_oR87RT3pfrUXmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.60.0/22
IPv6:
2a0c:4840::/29
Signature Algorithm: sha256WithRSAEncryption
51:3a:42:f4:99:8d:8a:76:d0:2e:e2:91:07:57:da:22:8d:86:
80:df:af:18:c5:d9:50:22:09:1b:f7:66:58:27:08:2c:9e:95:
f3:11:ef:d4:ca:04:ec:d5:44:48:cf:ba:a2:0b:04:48:64:4d:
72:c6:02:d3:23:53:8d:bd:b1:ca:67:c5:bc:ca:e4:82:bd:8b:
45:a2:1f:0f:da:ea:f9:6f:5a:c7:2f:1e:61:f7:15:88:2f:58:
e3:3d:86:63:d9:c4:41:88:d8:7e:09:59:82:50:90:4c:67:03:
15:41:bb:f1:8f:db:94:7a:6e:90:56:ff:b4:29:22:5e:64:11:
de:52:93:d9:1f:36:19:a1:d2:bd:c6:c7:3a:20:ba:e6:61:3f:
58:be:20:d2:2c:9a:d4:55:08:5b:62:fc:84:f2:9a:08:2f:b4:
50:87:0d:5e:52:95:3f:64:36:76:16:8f:77:65:f8:03:a1:da:
be:90:2c:85:97:72:46:92:51:37:34:73:fb:fd:06:cc:d1:be:
c6:68:5c:05:1c:b4:8e:e4:03:db:33:4e:4c:b1:b0:40:5d:32:
c8:ad:30:9a:b5:37:5b:9d:e6:96:33:93:d1:00:09:0a:ff:27:
0c:4a:32:cb:34:75:42:99:fd:0f:ac:dc:8c:a0:40:b5:09:15:
0c:78:93:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:31 2025 by rpki-client on console.sobornost.net