Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/9Ljs6ePMXf76Xf3jjnZS1_jYods.roa
File: 9Ljs6ePMXf76Xf3jjnZS1_jYods.roa (raw, json)
Hash identifier: Vw9UmLxmNUyNOAabfPVlvcJQ3CkdXDMT04j3t1Hv0OU=
Subject key identifier: F4:B8:EC:E9:E3:CC:5D:FE:FA:5D:FD:E3:8E:76:52:D7:F8:D8:A1:DB
Certificate issuer: /CN=52f629f34cd083bc68054069b1cc5ee7971f8bbb
Certificate serial: 019420D5C054CE140DA35039987B273D75A6
Authority key identifier: 52:F6:29:F3:4C:D0:83:BC:68:05:40:69:B1:CC:5E:E7:97:1F:8B:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UvYp80zQg7xoBUBpscxe55cfi7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/9Ljs6ePMXf76Xf3jjnZS1_jYods.roa
Signing time: Wed 01 Jan 2025 07:47:46 +0000
ROA not before: Wed 01 Jan 2025 07:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200432
IP address blocks: 185.107.60.0/22 maxlen: 22
185.107.60.0/24 maxlen: 24
185.107.61.0/24 maxlen: 24
185.107.62.0/24 maxlen: 24
185.107.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:c0:54:ce:14:0d:a3:50:39:98:7b:27:3d:75:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52f629f34cd083bc68054069b1cc5ee7971f8bbb
Validity
Not Before: Jan 1 07:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4b8ece9e3cc5dfefa5dfde38e7652d7f8d8a1db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:57:f7:f2:82:ba:75:15:fe:d7:80:d3:ce:2c:
e6:02:21:cd:87:9f:9f:33:c8:5e:a2:76:58:37:c8:
1a:5d:5b:b9:32:29:99:4c:be:e5:3f:f5:c1:65:bc:
1a:85:68:fb:1c:d3:7e:1c:98:d1:08:77:7f:27:0b:
5b:f2:11:21:5b:57:3a:bd:3b:4f:7b:14:42:a6:d2:
d7:ca:94:7e:66:24:a0:41:89:74:f4:50:03:87:b6:
90:e2:47:97:78:26:74:4b:9e:a8:29:c9:b4:e9:fb:
34:8f:55:0a:6c:2a:1e:97:9c:05:37:30:c9:2e:87:
1f:79:1d:57:9e:22:bc:fc:ee:15:3e:ff:39:0a:64:
dd:34:68:27:8e:75:6b:67:94:fb:0d:0f:c2:82:e9:
d9:d0:ea:57:d7:b5:f0:b3:1f:9b:0b:f0:bb:9f:a9:
83:5f:da:b0:cc:1c:f2:66:1a:fd:f7:9d:d4:58:ca:
29:11:bb:1d:d2:d2:21:e4:3d:24:f9:18:b0:dd:43:
f6:b0:9a:a6:d4:ee:94:29:ba:69:e3:99:24:4e:1d:
f7:6d:e9:fa:6d:ca:17:8a:06:a1:5c:f2:20:dc:63:
ed:73:9c:b3:76:46:14:ff:53:d2:b4:e0:a4:d1:4a:
f8:86:05:ce:0d:d4:87:dc:ce:e1:ed:4b:86:b5:ce:
a7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B8:EC:E9:E3:CC:5D:FE:FA:5D:FD:E3:8E:76:52:D7:F8:D8:A1:DB
X509v3 Authority Key Identifier:
keyid:52:F6:29:F3:4C:D0:83:BC:68:05:40:69:B1:CC:5E:E7:97:1F:8B:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UvYp80zQg7xoBUBpscxe55cfi7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/9Ljs6ePMXf76Xf3jjnZS1_jYods.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.107.60.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:80:a7:c3:1c:71:45:df:17:0a:d9:a3:93:42:ab:5a:94:47:
92:30:f0:d2:14:db:7b:76:01:5a:a9:96:2f:13:be:51:25:7b:
8a:25:0e:57:7f:49:a9:8f:66:19:80:1c:b0:4c:04:2d:23:32:
fb:d3:e4:bb:e2:72:f1:a1:27:b7:82:ff:bf:a3:64:75:41:05:
a4:da:23:2b:d8:84:ed:48:9e:50:49:19:3c:85:2b:85:97:12:
2e:cc:39:49:9f:d4:72:cc:47:db:08:7e:36:68:f4:f5:12:fd:
bc:da:db:80:54:de:e3:aa:b4:5f:bc:52:15:e5:52:6b:0a:9d:
8d:3a:20:04:f6:9e:2a:e4:f0:d3:3d:36:b8:5b:4d:43:7d:3f:
23:71:43:61:b2:0b:0d:2d:c9:09:b7:cd:f7:71:c7:a6:26:67:
af:cd:87:75:dc:d5:05:94:6a:81:9b:d3:7e:6d:b4:a4:d4:6d:
be:12:54:12:1c:f3:ee:e8:d5:de:c7:70:36:25:13:52:71:40:
e4:93:9e:dc:10:09:2c:0c:14:02:90:5f:6e:56:b9:a2:cb:cb:
dd:56:12:7a:23:9e:36:51:3d:cf:33:1e:1b:c3:35:1a:1e:4d:
83:c9:e7:92:dd:9f:14:f3:93:88:aa:3f:c6:10:17:9c:f7:4d:
d9:7d:cc:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:56 2025 by rpki-client on console.sobornost.net