Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/AdJIzACgyohcN6sAIIkSyy-DUEU.roa
File: AdJIzACgyohcN6sAIIkSyy-DUEU.roa (raw, json)
Hash identifier: zV5EJkVqjaLCll4cBzBCD6JCWfe42subaMsL7NQ2df0=
Subject key identifier: 01:D2:48:CC:00:A0:CA:88:5C:37:AB:00:20:89:12:CB:2F:83:50:45
Certificate issuer: /CN=8cfff21538e225618314615e4f0d0688b7b0dd5a
Certificate serial: 018E147D878FCE0C75529413CC2994C379B8
Authority key identifier: 8C:FF:F2:15:38:E2:25:61:83:14:61:5E:4F:0D:06:88:B7:B0:DD:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/AdJIzACgyohcN6sAIIkSyy-DUEU.roa
Signing time: Wed 06 Mar 2024 15:59:14 +0000
ROA not before: Wed 06 Mar 2024 15:59:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31477
IP address blocks: 83.137.144.0/21 maxlen: 24
87.238.168.0/21 maxlen: 24
89.188.0.0/19 maxlen: 24
2a01:1b0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:14:7d:87:8f:ce:0c:75:52:94:13:cc:29:94:c3:79:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cfff21538e225618314615e4f0d0688b7b0dd5a
Validity
Not Before: Mar 6 15:59:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=01d248cc00a0ca885c37ab00208912cb2f835045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9c:24:c5:55:52:55:80:2c:8d:2e:b4:df:a3:
aa:1d:76:d0:9c:ef:c9:2d:b9:ab:19:71:f6:ef:44:
ea:35:f9:e6:6c:12:60:ec:a5:c6:6e:bf:5f:9e:38:
5b:8b:4d:e7:ca:c8:9e:8b:e5:6e:8f:9e:ae:5f:80:
a6:44:fb:f5:20:2e:ec:da:0e:f7:75:51:4c:5a:7e:
a7:22:46:40:1b:7d:42:0d:d9:64:8b:01:7b:24:0c:
34:18:ae:d5:56:90:cc:3e:04:c6:2b:d1:79:a3:a4:
a9:fe:68:78:c0:e2:b3:65:80:5a:ab:6d:9f:c8:f4:
c2:74:62:e1:1b:d2:42:af:d5:53:74:bb:23:4c:f4:
15:1a:e7:08:0c:86:04:94:9f:fc:81:dd:8a:e9:80:
51:96:86:a7:7a:90:0e:ae:8a:96:94:4a:85:56:eb:
63:5a:9f:1f:48:6d:24:96:7d:32:8d:d4:d0:42:a1:
5a:2b:08:f6:57:a3:53:b0:ff:4e:dc:ec:9a:7c:3b:
03:b7:4f:cb:93:64:62:9d:df:66:ba:41:4c:42:d5:
94:6d:fe:d0:0a:84:a4:e5:18:6f:b4:65:5f:9d:ba:
76:9b:54:77:80:06:b5:0c:5e:59:21:a8:78:97:31:
9e:3d:9d:33:18:4f:de:23:8a:3b:94:95:21:48:39:
02:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D2:48:CC:00:A0:CA:88:5C:37:AB:00:20:89:12:CB:2F:83:50:45
X509v3 Authority Key Identifier:
keyid:8C:FF:F2:15:38:E2:25:61:83:14:61:5E:4F:0D:06:88:B7:B0:DD:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/AdJIzACgyohcN6sAIIkSyy-DUEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.144.0/21
87.238.168.0/21
89.188.0.0/19
IPv6:
2a01:1b0::/32
Signature Algorithm: sha256WithRSAEncryption
3b:b5:17:ca:43:ff:39:fd:99:7b:9e:ad:9b:84:ca:b1:67:bb:
52:12:b4:8b:90:94:44:96:9c:32:d2:79:5b:f6:38:7e:68:3a:
9b:1f:b8:69:6e:97:cc:04:a4:ee:b8:14:48:83:85:d9:2a:4b:
7e:0f:c6:a2:c2:29:91:a0:77:14:0f:7e:38:a7:1b:9d:50:45:
77:4a:bf:f8:47:7c:0d:3b:82:ef:fb:bf:94:a3:3e:06:eb:98:
df:f2:54:df:31:bc:c4:af:71:3e:0c:cc:40:2a:0c:31:32:b7:
b3:b8:3b:ed:4f:32:b5:3a:97:25:30:ea:ac:93:5d:c7:30:c6:
5d:75:49:d8:53:c5:b5:79:85:76:f5:65:7d:e7:d8:aa:94:6d:
0d:8d:2a:15:1b:85:9b:18:ad:60:00:d2:51:64:79:ca:a4:d3:
14:ba:af:be:a5:1c:e4:a5:eb:fb:a1:b0:7f:9c:f6:e4:f0:68:
e4:e5:0b:14:1f:55:03:92:53:78:89:44:d2:82:8f:a6:bb:84:
64:bc:81:e0:b1:44:a2:13:d8:50:1c:4c:39:c3:18:86:23:7a:
64:7a:0e:e7:e8:38:45:06:e8:cc:11:f4:9f:bb:64:eb:38:1b:
8a:8d:b1:34:37:b4:28:68:c4:92:e0:93:1d:73:9a:1a:46:4c:
7d:ad:8c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 05:44:13 2024 by rpki-client on console.sobornost.net