Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/M60aH6ZmYDVwlHRFmj0bLwl4Mk8.roa
File: M60aH6ZmYDVwlHRFmj0bLwl4Mk8.roa (raw, json)
Hash identifier: bKtHkMAIhL+WE1R8SfyDK2iICNQ8FX6qCdgDD2Zy2n0=
Subject key identifier: 33:AD:1A:1F:A6:66:60:35:70:94:74:45:9A:3D:1B:2F:09:78:32:4F
Certificate issuer: /CN=28208ba4e75e27b046f9e5278221b44778b6ae8d
Certificate serial: 0194228E3759FC6FF63E4428D4571490E232
Authority key identifier: 28:20:8B:A4:E7:5E:27:B0:46:F9:E5:27:82:21:B4:47:78:B6:AE:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCCLpOdeJ7BG-eUngiG0R3i2ro0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/M60aH6ZmYDVwlHRFmj0bLwl4Mk8.roa
Signing time: Wed 01 Jan 2025 15:48:53 +0000
ROA not before: Wed 01 Jan 2025 15:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207578
IP address blocks: 185.187.44.0/23 maxlen: 23
193.25.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:37:59:fc:6f:f6:3e:44:28:d4:57:14:90:e2:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28208ba4e75e27b046f9e5278221b44778b6ae8d
Validity
Not Before: Jan 1 15:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33ad1a1fa6666035709474459a3d1b2f0978324f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f3:1c:d1:0e:ce:b0:30:ba:96:89:60:fc:b8:
2f:1d:89:e3:36:6e:e4:c5:0c:51:2c:c2:f1:45:60:
f5:1e:ba:cd:34:0f:11:8d:bd:cc:b8:2b:26:8a:5e:
d6:b5:ce:52:02:55:e0:00:7b:40:7a:78:66:8b:99:
2a:26:a8:bf:be:b1:6b:e6:23:e3:e9:98:82:c6:a7:
96:47:f8:ba:a0:57:bb:6d:6b:f2:73:38:f6:65:80:
e7:b7:d5:32:30:fc:58:74:a7:4e:b3:0a:92:b7:e4:
98:92:65:05:3c:bd:6c:83:6c:c5:0f:b8:93:79:1f:
41:7c:aa:50:50:70:a0:1c:2e:ea:b7:84:c8:62:6c:
83:65:66:06:fd:06:aa:d5:d8:c7:f9:0b:fb:b2:df:
60:dc:92:4b:29:9a:cc:b7:5d:14:e2:fa:88:83:13:
3c:94:ac:17:a3:97:e3:08:44:43:71:d4:ce:ef:83:
6d:d6:d8:cf:82:c2:61:aa:8e:15:d7:42:23:5f:98:
c8:b4:00:a6:15:ce:7d:ea:19:44:48:e3:91:ad:57:
c5:c6:9d:1c:3d:f6:a3:42:70:2e:9c:43:6f:1d:60:
0a:43:d0:b8:fa:50:b0:2f:09:3e:23:ea:22:e7:37:
f9:3b:5e:8f:9d:7b:c1:e8:4b:0f:d6:26:e6:aa:6a:
b5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AD:1A:1F:A6:66:60:35:70:94:74:45:9A:3D:1B:2F:09:78:32:4F
X509v3 Authority Key Identifier:
keyid:28:20:8B:A4:E7:5E:27:B0:46:F9:E5:27:82:21:B4:47:78:B6:AE:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCCLpOdeJ7BG-eUngiG0R3i2ro0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/M60aH6ZmYDVwlHRFmj0bLwl4Mk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.44.0/23
193.25.203.0/24
Signature Algorithm: sha256WithRSAEncryption
77:a4:2c:96:2f:a1:96:c8:56:df:08:a9:72:fb:86:5f:01:a3:
ba:26:66:c9:c9:3f:6b:21:23:00:f3:eb:ca:ce:b5:58:a1:59:
88:3a:c9:86:bc:20:c7:97:c3:d9:9b:60:0a:dc:f2:2f:10:1f:
ae:36:67:7c:0c:d5:2b:91:b5:db:fa:cb:9f:10:a2:b9:c7:ab:
ee:5b:ef:50:ef:91:b1:f4:d6:8a:63:dd:f9:82:9b:ac:21:a8:
61:e7:f2:0f:e7:37:81:65:06:67:69:07:fd:0d:aa:0b:fd:a2:
09:55:d5:e7:35:7d:db:89:7a:38:e9:bd:8a:98:c6:30:3d:06:
64:fc:0d:cb:75:94:6f:03:f9:57:a6:7d:51:04:2d:ae:6f:b6:
77:ed:aa:09:6a:82:6c:56:ba:f2:d7:34:90:17:fb:fb:b4:77:
3f:48:68:a2:d1:1f:19:d2:e5:ab:09:81:9b:4e:42:e5:53:4f:
76:9e:d4:07:42:27:6d:09:70:75:e7:09:b3:50:76:32:33:54:
6d:e1:51:da:3a:f8:cc:7b:b5:e7:57:08:5d:99:80:86:7a:f0:
43:5c:14:25:c2:9f:6f:f9:b4:68:7c:ef:78:7a:ce:66:f8:c0:
58:61:19:09:1e:53:d7:50:94:80:83:8f:90:8b:50:3d:a8:71:
32:88:15:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:13:23 2025 by rpki-client on console.sobornost.net