Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/t769s4Yhlny52vckB2nx8Gay37A.roa
File: t769s4Yhlny52vckB2nx8Gay37A.roa (raw, json)
Hash identifier: DNCh3TKtNqBfhuQqNgeLyRpYgfJI/PvkRUd+YQhM7XE=
Subject key identifier: B7:BE:BD:B3:86:21:96:7C:B9:DA:F7:24:07:69:F1:F0:66:B2:DF:B0
Certificate issuer: /CN=acbe212a2f1a119ef64ab62e1a96d711524c8bc7
Certificate serial: 018CC5000BB4C8BD8A67620A0013305C117A
Authority key identifier: AC:BE:21:2A:2F:1A:11:9E:F6:4A:B6:2E:1A:96:D7:11:52:4C:8B:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rL4hKi8aEZ72SrYuGpbXEVJMi8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/t769s4Yhlny52vckB2nx8Gay37A.roa
Signing time: Mon 01 Jan 2024 12:29:23 +0000
ROA not before: Mon 01 Jan 2024 12:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60848
IP address blocks: 185.247.96.0/24 maxlen: 24
185.247.99.0/24 maxlen: 24
94.127.60.0/22 maxlen: 22
2a02:2188:2000::/36 maxlen: 36
2a02:2188:f000::/36 maxlen: 36
2a02:2188::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:0b:b4:c8:bd:8a:67:62:0a:00:13:30:5c:11:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acbe212a2f1a119ef64ab62e1a96d711524c8bc7
Validity
Not Before: Jan 1 12:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b7bebdb38621967cb9daf7240769f1f066b2dfb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:78:6d:f2:37:eb:8a:fe:36:36:09:22:3b:90:
f4:7f:e4:79:88:dc:7a:6b:b4:1a:84:e0:ce:59:aa:
6d:da:e5:a0:d0:0d:00:0a:96:c8:55:2b:ed:55:f7:
bd:54:79:ba:e1:67:be:9a:2b:e6:b9:88:66:05:9f:
56:0b:58:37:d5:d7:6a:98:c7:40:3b:42:2e:29:62:
d4:fd:8c:40:c9:50:ca:5a:8a:be:62:af:72:65:fd:
d2:80:c3:d9:5c:6f:52:48:0b:01:90:69:19:be:96:
ef:66:f2:91:9f:4e:64:6a:14:72:9d:a9:45:f6:29:
10:87:4c:22:6f:41:bb:11:13:1d:2f:03:ed:58:b1:
9d:8b:2e:1c:7f:3b:31:ba:31:87:ad:6a:a8:f2:d1:
71:fc:1b:6b:26:12:65:8e:08:94:27:61:94:cb:33:
58:16:80:24:89:9d:08:1f:57:07:83:c3:66:86:3e:
eb:e3:11:64:de:c7:68:81:d5:22:c3:e3:bf:bb:cc:
97:bb:23:43:73:30:49:ef:41:ba:50:73:1a:b5:45:
3c:d0:50:86:63:7a:9b:fb:97:ce:01:7f:78:99:4d:
bc:4f:7d:da:07:15:f3:41:76:ad:9b:96:d2:34:67:
c9:ae:15:a0:86:1b:13:cf:b6:99:5e:0a:5b:5f:dd:
ad:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:BE:BD:B3:86:21:96:7C:B9:DA:F7:24:07:69:F1:F0:66:B2:DF:B0
X509v3 Authority Key Identifier:
keyid:AC:BE:21:2A:2F:1A:11:9E:F6:4A:B6:2E:1A:96:D7:11:52:4C:8B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rL4hKi8aEZ72SrYuGpbXEVJMi8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/t769s4Yhlny52vckB2nx8Gay37A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.127.60.0/22
185.247.96.0/24
185.247.99.0/24
IPv6:
2a02:2188::/48
2a02:2188:2000::/36
2a02:2188:f000::/36
Signature Algorithm: sha256WithRSAEncryption
65:0a:15:03:43:2f:e2:f1:03:3e:4a:b1:d4:05:a5:cb:dc:04:
f8:1e:ed:16:ad:ff:d6:3f:4e:20:c0:a5:b1:42:b3:cd:4f:e2:
6b:99:77:ba:fd:17:cb:6d:88:40:ae:ce:56:32:30:97:80:0a:
1d:00:fb:f1:19:0c:19:fb:de:ba:68:7a:0a:a3:87:fa:8a:f7:
70:9c:de:26:e4:da:f4:80:97:32:7f:55:11:9c:1e:e6:4a:57:
e4:cb:e6:d4:7a:74:c1:dd:8d:dd:93:c4:22:7b:aa:51:8c:d7:
3c:55:64:ea:29:8e:88:a8:a1:06:d0:05:6f:4d:e8:82:33:cb:
cf:c5:19:df:fb:03:65:38:a9:0f:63:b4:f6:58:9a:4d:96:98:
27:5e:73:25:a7:72:04:60:a8:1c:fe:4c:d5:ef:17:a7:e1:7e:
a6:fe:44:24:ac:e1:31:a8:c5:c6:a9:f2:a7:1f:8e:6b:54:3f:
95:77:3f:27:0f:48:7e:0a:6b:e7:14:20:f6:1b:64:2c:23:31:
89:cf:e7:93:1b:76:fb:df:06:a1:fd:91:66:32:1f:08:b8:2d:
46:d8:31:fa:b8:d4:59:5f:fb:b4:a0:4d:4a:40:01:74:71:71:
e3:e3:1d:4a:83:92:8b:75:45:db:79:fe:21:53:f5:eb:5a:03:
b4:89:9b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:25 2024 by rpki-client on console.sobornost.net