Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/y9BtkNecDFhYqT0OrapbL2kCuL8.roa
File: y9BtkNecDFhYqT0OrapbL2kCuL8.roa (raw, json)
Hash identifier: duHjgLc9Dr+URapXA31JnbKfchIKNJhzO/pPOEG4qY0=
Subject key identifier: CB:D0:6D:90:D7:9C:0C:58:58:A9:3D:0E:AD:AA:5B:2F:69:02:B8:BF
Certificate issuer: /CN=8b82433ffe94bf3536fec327543d396158202072
Certificate serial: 0193F80AEA6CE3C6007571669D0FA97C7B23
Authority key identifier: 8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/y9BtkNecDFhYqT0OrapbL2kCuL8.roa
Signing time: Tue 24 Dec 2024 09:41:25 +0000
ROA not before: Tue 24 Dec 2024 09:41:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31514
IP address blocks: 83.217.192.0/20 maxlen: 24
83.217.192.0/21 maxlen: 21
83.217.198.0/24 maxlen: 24
83.217.199.0/24 maxlen: 24
83.217.200.0/21 maxlen: 21
83.217.200.0/24 maxlen: 24
83.217.201.0/24 maxlen: 24
83.217.202.0/24 maxlen: 24
83.217.203.0/24 maxlen: 24
83.217.204.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f8:0a:ea:6c:e3:c6:00:75:71:66:9d:0f:a9:7c:7b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b82433ffe94bf3536fec327543d396158202072
Validity
Not Before: Dec 24 09:41:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cbd06d90d79c0c5858a93d0eadaa5b2f6902b8bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7b:6a:29:b7:03:7d:b7:08:88:c0:03:d1:3b:
55:ea:d5:3c:45:31:98:3c:ce:fb:36:0e:70:31:61:
48:83:d0:ee:95:04:35:24:b1:e9:7c:01:74:cd:9b:
ea:84:5a:5e:a5:87:a3:51:c9:fa:01:cb:65:b9:44:
c8:d4:c2:cc:23:b2:08:67:79:7b:94:65:19:fb:df:
3e:d6:e5:aa:72:0b:c5:e1:3b:f9:ff:fa:f8:14:d7:
84:90:3c:10:0d:e2:e4:ff:d7:d4:66:bc:62:7c:83:
65:cb:18:23:a9:95:35:b6:a2:dc:89:d7:82:3e:e6:
1e:9d:9e:eb:54:0e:6a:71:e6:0f:7d:98:b4:3f:35:
30:b2:ad:5d:e2:c7:c8:ba:07:e9:35:f9:50:2c:2e:
03:03:2e:e2:76:3b:be:42:97:71:0b:6a:cf:45:86:
58:87:4b:e8:ea:63:10:85:66:b4:35:e2:cc:21:9e:
c2:2f:14:eb:24:bc:1c:46:1b:06:d0:7a:c7:d0:ac:
9b:46:11:55:28:eb:6e:e6:ac:4c:44:79:ac:f4:b8:
c0:84:27:65:2e:44:28:59:c6:75:a4:24:51:ee:47:
53:b2:a7:55:42:a7:6d:06:ee:1b:94:ba:bd:5c:93:
10:63:99:63:e5:76:0c:2d:f7:c3:63:89:45:dc:5b:
5b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D0:6D:90:D7:9C:0C:58:58:A9:3D:0E:AD:AA:5B:2F:69:02:B8:BF
X509v3 Authority Key Identifier:
keyid:8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/y9BtkNecDFhYqT0OrapbL2kCuL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.217.192.0/20
Signature Algorithm: sha256WithRSAEncryption
a1:32:20:2a:f4:63:93:f7:3f:7b:7c:2d:ec:1c:14:0d:a2:55:
8f:35:45:ce:6d:3a:d9:ea:48:bc:9b:66:86:49:3b:29:59:57:
3e:9a:5a:02:27:80:e3:da:13:09:01:8f:ad:fe:16:ea:92:79:
cf:a2:97:66:c4:cc:99:85:4b:0b:cd:d4:79:5e:00:4d:f9:3c:
73:a9:d2:b3:86:a0:2a:15:5d:5c:45:9a:4a:7c:ec:2e:93:f3:
7a:00:08:65:a5:50:35:78:5d:f6:bd:b4:85:16:b0:83:79:15:
c6:f2:fe:40:00:6d:4e:99:57:28:f7:04:86:e3:6a:a3:d5:5f:
1b:ea:3a:41:13:41:21:2b:6a:9b:3d:c5:6d:52:36:1a:93:0c:
ac:1e:02:c4:5f:c3:11:08:eb:c8:da:d4:3a:71:01:2b:da:a0:
44:3e:f7:6f:ae:6a:d2:b3:55:ed:d7:2d:c1:1e:18:98:48:74:
07:b6:3a:53:ed:7f:6a:48:2e:1c:3d:65:36:cf:55:40:10:4e:
7e:4d:23:e8:33:a2:4f:93:9f:f3:d0:85:20:ed:03:19:37:34:
b4:eb:23:54:75:8c:70:9b:49:27:c3:2c:a7:3a:cb:6e:1c:cd:
b4:c2:a5:e5:ee:25:1d:27:1a:d4:9d:70:ce:98:5d:7b:06:d2:
fd:e0:73:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:11 2024 by rpki-client on console.sobornost.net