Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS60781.roa
File: AS60781.roa (raw, json)
Hash identifier: augy8pj2AJUnPg25zMz4GxaQqBScfRATXv6CsdouPj0=
Subject key identifier: 9B:52:CB:8B:DC:BC:0B:23:1A:2F:A2:21:62:A0:51:A9:3C:94:E3:49
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6CA06DA7C6D0FF9976158D016994D6B9A30EDFAC
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS60781.roa
Signing time: Thu 10 Apr 2025 00:01:57 +0000
ROA not before: Wed 09 Apr 2025 23:56:57 +0000
ROA not after: Thu 09 Apr 2026 00:01:57 +0000
asID: 60781
IP address blocks: 140.233.166.0/24 maxlen: 24
145.223.42.0/24 maxlen: 24
145.223.45.0/24 maxlen: 24
145.223.51.0/24 maxlen: 24
145.223.53.0/24 maxlen: 24
145.223.57.0/24 maxlen: 24
145.223.59.0/24 maxlen: 24
145.223.61.0/24 maxlen: 24
146.103.1.0/24 maxlen: 24
146.103.6.0/24 maxlen: 24
148.135.177.0/24 maxlen: 24
148.135.188.0/24 maxlen: 24
148.135.208.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:a0:6d:a7:c6:d0:ff:99:76:15:8d:01:69:94:d6:b9:a3:0e:df:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 9 23:56:57 2025 GMT
Not After : Apr 9 00:01:57 2026 GMT
Subject: CN=9B52CB8BDCBC0B231A2FA22162A051A93C94E349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7d:ba:5b:a7:9d:2f:09:7f:b1:98:c8:d8:1f:
43:69:4c:08:4a:d3:7e:d6:38:5d:21:71:82:87:9e:
58:62:bd:50:48:28:86:c1:91:97:8d:1a:c5:db:0e:
e5:62:ea:f2:9a:73:2a:51:ef:23:26:63:a2:9c:9f:
2a:e3:91:9e:ab:6e:73:e4:df:db:f9:92:24:eb:e9:
bb:bf:f5:f8:dd:34:84:87:7f:ad:ba:43:c8:64:3c:
f8:e2:7e:a5:63:04:5e:69:5e:76:00:15:02:f4:78:
6f:a5:25:5c:ab:2f:51:70:f6:ee:63:49:e7:7a:2d:
d7:30:ee:0d:33:dd:ca:b6:48:53:c5:33:94:9a:e0:
35:5d:0e:31:a1:c4:25:03:c8:82:b7:77:65:5c:9e:
f6:ea:33:8d:f0:99:00:25:8d:22:8f:2f:05:84:e7:
97:c1:86:38:d3:53:f0:68:af:30:51:88:75:5d:80:
a2:ef:50:57:bb:3a:d9:7b:a1:e1:d6:a8:93:59:01:
e1:e6:c9:26:a8:03:b8:e5:25:dd:f7:6e:c9:a2:fd:
db:fd:5c:d2:8c:a8:dd:37:6b:ff:55:de:9f:33:3b:
68:fa:4f:0c:3c:19:8d:09:1e:b6:ab:0a:3a:37:f7:
1c:5f:51:f6:cf:ad:ff:89:52:c9:e9:18:d6:e3:ce:
ef:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:52:CB:8B:DC:BC:0B:23:1A:2F:A2:21:62:A0:51:A9:3C:94:E3:49
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS60781.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.166.0/24
145.223.42.0/24
145.223.45.0/24
145.223.51.0/24
145.223.53.0/24
145.223.57.0/24
145.223.59.0/24
145.223.61.0/24
146.103.1.0/24
146.103.6.0/24
148.135.177.0/24
148.135.188.0/24
148.135.208.0/22
Signature Algorithm: sha256WithRSAEncryption
03:1f:0d:0a:90:f7:81:ff:93:4d:25:1d:b0:69:ec:ca:b8:59:
eb:60:3e:e1:8a:b7:3c:dc:8d:e3:84:11:78:16:94:68:f4:b7:
a4:3b:ab:57:76:95:94:8e:9b:cc:37:e5:b9:b6:d9:1f:4f:f9:
b7:a5:70:7f:2a:57:e3:ae:a2:9e:43:c1:41:e1:2e:c4:24:14:
3b:62:63:0d:c7:c8:08:63:a9:a1:63:b2:9b:dd:76:79:76:2d:
90:f1:6d:0e:0a:94:63:f8:d4:17:1f:c0:0a:a6:af:a8:a9:f3:
cf:45:cc:be:ab:1f:87:5c:fc:70:59:ae:c9:7a:74:eb:a1:da:
3b:d6:af:34:6b:97:60:ac:eb:32:7e:d2:fc:fb:a5:04:78:bf:
43:bd:79:e5:60:cf:83:b2:b3:59:e1:80:4d:f7:20:c0:87:09:
c1:b0:de:0e:5b:9a:37:99:68:1a:f5:c1:fc:0d:0e:dc:03:41:
7f:0d:f0:a6:5c:3a:dc:f1:36:40:91:61:37:26:04:48:c6:71:
50:bc:ae:7d:80:42:e2:b3:98:e0:13:a9:94:bc:69:61:e7:ea:
1c:20:3d:21:d7:9d:2d:74:bc:04:46:f7:b6:86:52:d8:57:a8:
ea:bb:21:81:4c:3f:9c:98:55:fd:b7:a4:50:d3:c7:76:15:7d:
43:9d:76:fb
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUbKBtp8bQ/5l2FY0BaZTWuaMO36wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNTA0MDkyMzU2NTdaFw0yNjA0MDkwMDAxNTdaMDMxMTAvBgNV
BAMTKDlCNTJDQjhCRENCQzBCMjMxQTJGQTIyMTYyQTA1MUE5M0M5NEUzNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3fbpbp50vCX+xmMjYH0NpTAhK
037WOF0hcYKHnlhivVBIKIbBkZeNGsXbDuVi6vKacypR7yMmY6KcnyrjkZ6rbnPk
39v5kiTr6bu/9fjdNISHf626Q8hkPPjifqVjBF5pXnYAFQL0eG+lJVyrL1Fw9u5j
Sed6Ldcw7g0z3cq2SFPFM5Sa4DVdDjGhxCUDyIK3d2VcnvbqM43wmQAljSKPLwWE
55fBhjjTU/BorzBRiHVdgKLvUFe7Otl7oeHWqJNZAeHmySaoA7jlJd33bsmi/dv9
XNKMqN03a/9V3p8zO2j6Tww8GY0JHrarCjo39xxfUfbPrf+JUsnpGNbjzu/9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUm1LLi9y8CyMaL6IhYqBRqTyU40kwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTNjA3ODEucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwZwYIKwYBBQUHAQcBAf8EWDBWMFQEAgABME4DBACM6aYD
BACR3yoDBACR3y0DBACR3zMDBACR3zUDBACR3zkDBACR3zsDBACR3z0DBACSZwED
BACSZwYDBACUh7EDBACUh7wDBAKUh9AwDQYJKoZIhvcNAQELBQADggEBAAMfDQqQ
94H/k00lHbBp7Mq4WetgPuGKtzzcjeOEEXgWlGj0t6Q7q1d2lZSOm8w35bm22R9P
+belcH8qV+Ouop5DwUHhLsQkFDtiYw3HyAhjqaFjspvddnl2LZDxbQ4KlGP41Bcf
wAqmr6ip889FzL6rH4dc/HBZrsl6dOuh2jvWrzRrl2Cs6zJ+0vz7pQR4v0O9eeVg
z4Oys1nhgE33IMCHCcGw3g5bmjeZaBr1wfwNDtwDQX8N8KZcOtzxNkCRYTcmBEjG
cVC8rn2AQuKzmOATqZS8aWHn6hwgPSHXnS10vARG97aGUthXqOq7IYFMP5yYVf23
pFDTx3YVfUOddvs=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:23 2025 by rpki-client on console.sobornost.net