Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/dIKU3ba5If95IkE8HSHFYlnLGEY.roa
File: dIKU3ba5If95IkE8HSHFYlnLGEY.roa (raw, json)
Hash identifier: 13vM/WIKxr+g4ZnA3vaBgOvIg10yFltfVhRyMy+IClk=
Subject key identifier: 74:82:94:DD:B6:B9:21:FF:79:22:41:3C:1D:21:C5:62:59:CB:18:46
Certificate issuer: /CN=52f629f34cd083bc68054069b1cc5ee7971f8bbb
Certificate serial: 018EC82CA387C5DD48FECCD0F3533E6B3FDE
Authority key identifier: 52:F6:29:F3:4C:D0:83:BC:68:05:40:69:B1:CC:5E:E7:97:1F:8B:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UvYp80zQg7xoBUBpscxe55cfi7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/dIKU3ba5If95IkE8HSHFYlnLGEY.roa
Signing time: Wed 10 Apr 2024 13:22:32 +0000
ROA not before: Wed 10 Apr 2024 13:22:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200432
IP address blocks: 185.107.60.0/22 maxlen: 22
185.107.60.0/24 maxlen: 24
185.107.62.0/24 maxlen: 24
185.107.63.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c8:2c:a3:87:c5:dd:48:fe:cc:d0:f3:53:3e:6b:3f:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52f629f34cd083bc68054069b1cc5ee7971f8bbb
Validity
Not Before: Apr 10 13:22:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=748294ddb6b921ff7922413c1d21c56259cb1846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:72:fc:bc:df:6c:c5:af:96:c4:bd:7c:5b:a3:
20:7c:08:6c:04:d1:32:aa:a9:bc:a5:f7:bc:bb:7b:
e7:91:b9:95:55:b9:eb:cc:dc:34:e9:ea:c6:4e:78:
f3:34:c4:82:13:c6:d2:eb:1e:d8:fb:32:bb:92:50:
a7:ed:a2:2c:b0:8d:2b:8f:59:87:02:49:19:b4:52:
5a:96:e0:97:b1:8e:5a:a7:e5:1d:51:df:fb:65:d0:
7c:14:69:18:b3:46:3a:4e:ef:96:2a:ca:63:2b:f6:
1e:e2:53:f6:90:cd:25:14:78:1c:21:53:76:39:de:
1c:c9:e6:f6:a1:44:28:69:5b:93:be:a0:a3:e9:7c:
96:59:46:7d:7b:d3:8b:4e:cc:e5:a3:00:19:06:d6:
bd:08:a1:e3:1d:7f:d4:ab:41:60:01:fc:93:15:f0:
7d:f6:81:db:43:1d:18:ee:f3:bd:af:bf:c0:a6:24:
f9:7f:9f:e4:19:66:28:9b:3c:27:1e:d0:30:24:fe:
82:91:26:22:b4:93:63:60:9b:7a:64:26:7c:5d:e6:
37:b3:cb:ab:20:a1:4b:a5:92:9e:c4:70:c3:90:ab:
4c:f7:8b:52:a2:9c:d5:23:cf:f2:b0:cc:fd:d2:69:
50:11:f5:41:c1:5e:e8:4e:94:24:e9:14:a9:fd:fb:
62:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:82:94:DD:B6:B9:21:FF:79:22:41:3C:1D:21:C5:62:59:CB:18:46
X509v3 Authority Key Identifier:
keyid:52:F6:29:F3:4C:D0:83:BC:68:05:40:69:B1:CC:5E:E7:97:1F:8B:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UvYp80zQg7xoBUBpscxe55cfi7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/dIKU3ba5If95IkE8HSHFYlnLGEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.107.60.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:35:1e:d0:96:d3:70:c3:8d:c1:0a:59:26:ad:b4:02:da:a9:
b9:2e:27:02:38:7c:00:20:e5:66:e8:11:35:22:40:8c:46:4f:
87:0f:c5:17:a7:a0:e0:0d:ea:df:9c:bd:52:1c:a3:14:4e:6d:
9d:96:1d:10:7d:e0:4d:01:e1:3a:7f:ab:9f:d4:ba:04:85:20:
46:e1:bd:50:77:85:0c:e8:0a:df:16:73:01:93:98:ce:6f:37:
f5:79:b0:8d:bd:9b:8b:12:20:1a:45:f4:cb:ce:f7:9e:13:c9:
f5:94:46:90:0c:07:ae:89:32:68:45:c8:73:80:fa:ac:05:55:
39:01:46:c1:25:f4:6c:55:79:15:0a:1b:2a:e3:78:6d:3b:63:
60:63:a3:d9:ad:df:b0:55:69:58:54:45:2a:58:73:bb:d2:7f:
dd:6b:94:3f:49:dd:fb:24:83:41:4a:83:bb:cd:5f:11:2f:2e:
cb:97:a9:a3:5b:d3:31:1c:78:cd:1d:01:9e:11:5e:54:da:10:
24:bc:ea:80:84:51:16:dd:54:45:a5:a5:49:c4:57:1b:14:9c:
fe:b3:00:32:bf:70:c9:68:ff:e1:8e:06:29:52:39:65:0e:7d:
27:bd:f7:c1:83:81:80:0e:29:14:fb:01:b1:70:63:d1:73:bb:
49:75:bf:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:08:57 2024 by rpki-client on console.sobornost.net