Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/loeG0A7B5pm9tZpPzSr7eUFiNh0.roa
File: loeG0A7B5pm9tZpPzSr7eUFiNh0.roa (raw, json)
Hash identifier: GinS4WDpw/xi0yTLnwz78knWosKiyyq16OZVyWAvW5M=
Subject key identifier: 96:87:86:D0:0E:C1:E6:99:BD:B5:9A:4F:CD:2A:FB:79:41:62:36:1D
Certificate issuer: /CN=788f5b210f3c3eb42065960e85d061e9d9d63ab8
Certificate serial: 0194258EF078BB92D0980EA2CDF58ACD8DDD
Authority key identifier: 78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/loeG0A7B5pm9tZpPzSr7eUFiNh0.roa
Signing time: Thu 02 Jan 2025 05:48:32 +0000
ROA not before: Thu 02 Jan 2025 05:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60195
IP address blocks: 185.238.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:f0:78:bb:92:d0:98:0e:a2:cd:f5:8a:cd:8d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=788f5b210f3c3eb42065960e85d061e9d9d63ab8
Validity
Not Before: Jan 2 05:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=968786d00ec1e699bdb59a4fcd2afb794162361d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fa:b9:8c:50:1a:22:68:c7:78:95:1a:0d:ef:
eb:08:84:9e:61:da:5c:80:3b:ee:b9:ee:27:19:1e:
46:27:72:f3:dc:f8:24:57:70:b1:ca:6d:05:48:c5:
89:ce:fd:7c:a6:c7:c8:c3:b7:24:8f:64:7d:3f:47:
bf:ab:23:b2:3e:7d:c3:40:fe:c6:e2:40:83:7a:5b:
d4:1f:27:3d:19:ee:04:dc:da:c6:52:9c:f5:80:14:
47:4d:db:56:99:25:44:d4:a3:67:f3:d6:c8:14:ae:
59:95:d9:7c:f2:d6:aa:91:99:f0:e7:75:06:c8:c8:
49:8f:7c:7a:66:24:3b:ea:4f:d6:e7:f5:c7:c4:c1:
c1:6a:2e:d5:d7:da:4b:c1:32:29:62:2b:ca:63:2e:
35:4c:0c:70:ce:9f:97:e6:c0:fa:42:7a:f6:5d:f8:
13:4a:0f:2e:b5:dc:19:5e:2b:88:d6:60:86:a2:cf:
e2:6e:2d:b9:2a:a8:a3:08:2e:fa:37:70:25:e4:2f:
b3:9e:04:df:69:3c:57:78:37:a5:e1:cf:22:e7:b0:
2f:75:a6:6b:da:12:85:ce:b8:16:76:8b:39:83:9d:
14:2b:8f:5f:93:88:be:29:31:aa:cf:5b:6d:db:aa:
61:64:fd:e6:bb:fa:f7:86:88:20:49:08:02:99:d3:
00:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:87:86:D0:0E:C1:E6:99:BD:B5:9A:4F:CD:2A:FB:79:41:62:36:1D
X509v3 Authority Key Identifier:
keyid:78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/loeG0A7B5pm9tZpPzSr7eUFiNh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.61.0/24
Signature Algorithm: sha256WithRSAEncryption
70:41:ce:04:24:27:c9:a4:db:8f:df:53:2d:b4:b5:c8:7d:68:
f2:b4:b7:fc:85:f5:cf:f3:8d:af:f3:3c:b0:13:25:b0:87:f9:
fb:83:6d:d9:8c:0e:dc:5d:1f:01:20:a6:fb:ad:6b:57:95:f6:
c5:2d:b1:aa:94:ed:91:89:f6:7f:1b:b1:04:1d:46:96:df:b6:
60:42:b8:a5:c1:af:58:41:58:d9:a3:99:05:47:55:2b:ad:31:
8d:dc:25:72:1e:9c:a8:e9:1f:a1:aa:8a:79:78:02:b4:f8:85:
e9:7a:a3:2c:c3:1e:fd:83:20:8c:4a:4f:7c:bc:25:c8:23:c1:
41:93:0c:07:5c:9d:87:66:76:8e:46:2f:ab:43:9c:4b:e7:00:
20:90:e2:3b:28:86:07:65:d9:70:4a:c9:ff:cd:33:22:b2:0c:
3b:ef:a6:17:f8:8d:f8:9f:1e:06:bb:2c:5d:ec:3b:43:02:65:
29:b5:89:fe:08:19:51:c0:cf:37:eb:81:dd:10:6a:3d:2c:ea:
2f:17:19:0a:e8:d7:f8:ff:96:70:93:56:f3:2a:da:f9:e0:8f:
5a:f7:c1:6d:52:31:84:33:8b:64:95:27:8b:88:1a:02:12:89:
8a:b0:ec:0e:c7:6b:ce:75:1a:e5:be:c0:ff:be:dc:bf:c2:0f:
a5:a8:4a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:28 2025 by rpki-client on console.sobornost.net