Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/q8F75oGxXhRuX9F9D_Sk23ThsxI.roa
File: q8F75oGxXhRuX9F9D_Sk23ThsxI.roa (raw, json)
Hash identifier: JfwUWVmsAN44Y6vqm+dTGweP9zvNzkUsLP+/cqvQUaA=
Subject key identifier: AB:C1:7B:E6:81:B1:5E:14:6E:5F:D1:7D:0F:F4:A4:DB:74:E1:B3:12
Certificate issuer: /CN=66feef09c450990af34779ce701be6cd54b3d924
Certificate serial: 019425222D2A9B234145272A073F579C8C09
Authority key identifier: 66:FE:EF:09:C4:50:99:0A:F3:47:79:CE:70:1B:E6:CD:54:B3:D9:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/q8F75oGxXhRuX9F9D_Sk23ThsxI.roa
Signing time: Thu 02 Jan 2025 03:49:44 +0000
ROA not before: Thu 02 Jan 2025 03:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31304
IP address blocks: 83.168.64.0/22 maxlen: 24
83.168.96.0/23 maxlen: 24
83.168.104.0/24 maxlen: 24
83.168.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:2d:2a:9b:23:41:45:27:2a:07:3f:57:9c:8c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66feef09c450990af34779ce701be6cd54b3d924
Validity
Not Before: Jan 2 03:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=abc17be681b15e146e5fd17d0ff4a4db74e1b312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:22:7a:5d:42:c4:32:ba:a3:16:7e:fc:b8:a5:
57:1d:29:b0:20:49:ba:31:56:15:84:c4:ff:62:68:
52:5c:89:8c:b7:ee:33:02:c2:cc:c3:6a:bb:db:b3:
97:fb:99:77:31:ae:4e:bf:b1:80:5e:67:18:af:28:
84:d0:ca:46:db:c7:61:fd:01:fd:4e:49:4a:b0:ee:
88:26:bc:2a:ae:bd:9b:84:cb:af:41:36:06:61:bb:
bd:3f:80:2d:f6:a9:b4:07:e6:44:46:c3:fd:64:93:
70:27:80:3c:d3:bc:ea:28:7a:0c:5c:8c:19:32:ff:
84:2c:e2:b5:b7:22:08:cc:2a:5c:87:74:c0:16:b3:
35:17:30:72:c3:36:0a:5a:63:07:df:3b:92:47:58:
e1:f1:bd:e7:d1:5a:03:33:0c:d0:a3:6f:9c:d9:4a:
de:30:f9:41:ef:1b:f4:08:01:d0:4d:f1:58:9e:9b:
8c:bd:e8:67:57:78:2c:76:c0:55:a2:f9:e6:3d:39:
a7:62:fa:ab:94:f5:b9:9f:4f:57:ba:d0:8c:29:ec:
b6:a3:34:9f:6a:52:63:0c:a5:e8:5c:5f:f4:fb:3d:
98:fe:ab:22:40:74:7e:7e:af:1f:32:4a:11:9b:91:
de:88:eb:18:dd:d0:44:2b:7c:4b:32:14:cc:53:0a:
6e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C1:7B:E6:81:B1:5E:14:6E:5F:D1:7D:0F:F4:A4:DB:74:E1:B3:12
X509v3 Authority Key Identifier:
keyid:66:FE:EF:09:C4:50:99:0A:F3:47:79:CE:70:1B:E6:CD:54:B3:D9:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/q8F75oGxXhRuX9F9D_Sk23ThsxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.168.64.0/22
83.168.96.0/23
83.168.104.0/24
83.168.111.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:c6:76:ab:70:10:8b:e3:08:12:26:a6:cd:a2:f3:d5:b3:4e:
99:1e:cb:b3:43:7f:8a:47:04:95:ab:e2:f2:81:80:e8:5e:95:
99:e5:96:8e:29:20:98:c3:c1:60:86:29:24:af:a2:29:1a:d8:
06:df:6a:74:04:a8:85:d7:f2:de:15:02:06:d9:36:81:36:5b:
a1:16:f1:cb:fc:25:74:f4:ed:8d:08:55:2a:01:04:87:78:ec:
4d:e8:33:8c:b0:fe:a2:0b:eb:cb:0f:f2:96:92:eb:e3:7b:76:
9c:64:63:d7:fd:b3:28:a5:91:bc:4e:26:81:c8:d5:0b:ca:e9:
56:29:87:cd:58:54:7e:f3:27:da:50:a1:4a:22:bf:dd:fd:62:
a2:77:d0:1a:5b:9d:01:ed:03:09:ff:7f:ff:6d:f1:12:8a:7b:
14:87:29:ad:e9:18:33:10:59:56:79:64:da:13:88:52:ae:4b:
7a:53:95:be:09:c3:04:a1:81:b6:f9:d3:74:89:be:75:63:a8:
0e:39:80:13:7f:07:37:58:78:79:3a:74:58:c2:23:4a:9c:78:
3f:86:6e:5e:61:c6:da:c8:10:8d:30:0d:0b:6b:6a:23:e9:05:
ee:a0:66:bf:f7:a1:e5:ed:85:14:c9:2a:5a:ac:5a:e2:49:1b:
fd:e7:29:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:18 2025 by rpki-client on console.sobornost.net