Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS60458.roa
File: AS60458.roa (raw, json)
Hash identifier: h5haCplG4C1MHVZEnj6V4CwHIW744jaMMc3VOQvutEE=
Subject key identifier: 0F:B8:93:91:BB:E0:CE:BC:9C:AD:F3:ED:EA:E4:A3:E7:6B:FB:15:1D
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 441FDB27DBED1555C5A9B90E7F2FCBDF41531CCD
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS60458.roa
Signing time: Mon 31 Mar 2025 11:05:33 +0000
ROA not before: Mon 31 Mar 2025 11:00:33 +0000
ROA not after: Mon 30 Mar 2026 11:05:33 +0000
asID: 60458
IP address blocks: 194.60.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:1f:db:27:db:ed:15:55:c5:a9:b9:0e:7f:2f:cb:df:41:53:1c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Mar 31 11:00:33 2025 GMT
Not After : Mar 30 11:05:33 2026 GMT
Subject: CN=0FB89391BBE0CEBC9CADF3EDEAE4A3E76BFB151D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:03:94:0e:9d:29:1f:45:45:03:2d:d8:05:1a:
22:a0:f8:71:6d:a5:3c:08:c8:d8:0b:44:91:04:4e:
cc:64:3a:96:7b:06:e3:c4:57:3c:ff:c6:2c:1d:dc:
c0:ee:fa:8a:59:32:8e:28:c3:98:ff:06:15:c2:91:
e6:65:f8:fb:1e:1e:02:60:d2:a9:e0:63:e8:e2:21:
47:d5:fb:aa:60:79:2b:42:81:0d:36:12:ee:f5:e9:
24:f3:e0:32:cd:e4:33:00:bf:9b:9e:54:f2:62:01:
32:9d:20:84:7d:70:93:d8:ed:e6:bd:9b:11:fe:7f:
64:6a:b8:6a:77:52:d4:69:ac:cf:5d:1e:6d:ce:e0:
4e:b6:53:7a:00:48:fb:8d:ea:00:93:67:0f:84:65:
eb:9d:3b:3f:9b:43:d5:8d:68:4b:1f:24:5a:b3:f3:
ae:78:4c:a0:01:5d:bf:fe:87:72:42:5b:fb:0b:e4:
5a:e7:8d:cf:94:59:c2:c7:1c:aa:2d:07:93:84:ef:
26:62:42:b5:e6:c5:eb:9a:df:8c:d3:13:fd:11:6a:
c5:46:7c:09:71:65:e2:2c:d6:d6:10:7d:cd:a8:e5:
a6:40:e8:72:c2:38:54:3d:b0:fb:67:8d:4c:67:2f:
4b:80:d1:5e:d8:9d:a9:8d:1c:27:ee:a4:0b:c8:8f:
7c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B8:93:91:BB:E0:CE:BC:9C:AD:F3:ED:EA:E4:A3:E7:6B:FB:15:1D
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS60458.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.60.88.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:5d:e9:e4:0c:8a:ef:b8:81:3e:d7:af:37:4c:48:87:01:81:
a0:c8:bd:e0:29:63:23:a5:d4:9a:81:8c:94:f6:6d:c7:84:de:
1d:ee:2b:7b:d6:ea:c1:d4:1d:d4:67:db:c6:0d:c7:5d:52:99:
37:b4:09:f0:c8:6e:19:f4:57:f9:20:d3:cc:64:61:f3:ce:f3:
cc:ce:79:c9:76:a6:e8:86:28:bb:f7:64:13:2c:4d:85:be:42:
27:e6:a1:7d:49:11:b0:9b:c0:03:cc:de:a9:e1:61:35:69:5e:
75:dc:d7:82:1f:78:13:6b:4c:af:4c:d2:52:cb:82:4a:34:48:
38:ce:39:e3:f6:31:75:80:dc:c3:79:20:40:d6:91:59:62:a6:
68:09:17:5a:fc:ec:e1:00:5d:99:86:ff:44:79:5c:34:12:b1:
bb:f9:43:c9:f4:aa:6c:65:ef:bc:60:c4:46:7e:e4:94:cc:c5:
1a:f0:d7:07:f5:e6:25:b1:7a:69:00:55:9d:b5:19:99:3f:e0:
6c:a3:0b:e7:fb:3e:c5:7b:3b:98:a2:6d:d7:0e:c5:88:d2:33:
35:ef:d1:36:08:76:37:df:b2:84:08:c9:ea:19:7f:1d:cc:69:
e8:3b:b1:21:db:00:16:84:91:6c:1b:4f:df:66:1d:9c:9e:a4:
5d:64:7a:7d
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIURB/bJ9vtFVXFqbkOfy/L30FTHM0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yNTAzMzExMTAwMzNaFw0yNjAzMzAxMTA1MzNaMDMxMTAvBgNV
BAMTKDBGQjg5MzkxQkJFMENFQkM5Q0FERjNFREVBRTRBM0U3NkJGQjE1MUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoA5QOnSkfRUUDLdgFGiKg+HFt
pTwIyNgLRJEETsxkOpZ7BuPEVzz/xiwd3MDu+opZMo4ow5j/BhXCkeZl+PseHgJg
0qngY+jiIUfV+6pgeStCgQ02Eu716STz4DLN5DMAv5ueVPJiATKdIIR9cJPY7ea9
mxH+f2RquGp3UtRprM9dHm3O4E62U3oASPuN6gCTZw+EZeudOz+bQ9WNaEsfJFqz
8654TKABXb/+h3JCW/sL5Frnjc+UWcLHHKotB5OE7yZiQrXmxeua34zTE/0RasVG
fAlxZeIs1tYQfc2o5aZA6HLCOFQ9sPtnjUxnL0uA0V7YnamNHCfupAvIj3ytAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUD7iTkbvgzrycrfPt6uSj52v7FR0wHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTNjA0NTgucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADCPFgw
DQYJKoZIhvcNAQELBQADggEBAF9d6eQMiu+4gT7XrzdMSIcBgaDIveApYyOl1JqB
jJT2bceE3h3uK3vW6sHUHdRn28YNx11SmTe0CfDIbhn0V/kg08xkYfPO88zOecl2
puiGKLv3ZBMsTYW+QifmoX1JEbCbwAPM3qnhYTVpXnXc14IfeBNrTK9M0lLLgko0
SDjOOeP2MXWA3MN5IEDWkVlipmgJF1r87OEAXZmG/0R5XDQSsbv5Q8n0qmxl77xg
xEZ+5JTMxRrw1wf15iWxemkAVZ21GZk/4GyjC+f7PsV7O5iibdcOxYjSMzXv0TYI
djffsoQIyeoZfx3Maeg7sSHbABaEkWwbT99mHZyepF1ken0=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:29 2025 by rpki-client on console.sobornost.net