Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/v4YzcqX1MuIdXLsm1F2dS6aMzHw.roa
File: v4YzcqX1MuIdXLsm1F2dS6aMzHw.roa (raw, json)
Hash identifier: UMWs0+Hz/XoP9EtdjqOLzRDl/5MG3GLKCb9E2DcKvhs=
Subject key identifier: BF:86:33:72:A5:F5:32:E2:1D:5C:BB:26:D4:5D:9D:4B:A6:8C:CC:7C
Certificate issuer: /CN=4fd207fc5ad0773c3d8e93e4b30619c13ba81cb4
Certificate serial: 019325CE7E99071BB1E0443632DE55DC5F03
Authority key identifier: 4F:D2:07:FC:5A:D0:77:3C:3D:8E:93:E4:B3:06:19:C1:3B:A8:1C:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9IH_FrQdzw9jpPkswYZwTuoHLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/v4YzcqX1MuIdXLsm1F2dS6aMzHw.roa
Signing time: Wed 13 Nov 2024 13:55:10 +0000
ROA not before: Wed 13 Nov 2024 13:55:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205790
IP address blocks: 185.183.126.0/24 maxlen: 24
185.183.127.0/24 maxlen: 24
2a0a:1ec0::/32 maxlen: 32
2a0a:1ec1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:25:ce:7e:99:07:1b:b1:e0:44:36:32:de:55:dc:5f:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd207fc5ad0773c3d8e93e4b30619c13ba81cb4
Validity
Not Before: Nov 13 13:55:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf863372a5f532e21d5cbb26d45d9d4ba68ccc7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:38:69:3a:9f:1d:06:fe:c7:25:75:5f:27:b1:
16:54:8d:32:fd:b7:34:4f:b6:7f:74:46:1c:5d:e0:
aa:c2:8b:90:3e:84:c0:a7:c1:d8:0c:d6:3f:8e:01:
cf:28:ee:85:08:fe:54:e7:dc:0c:e7:d4:37:44:59:
77:f9:f3:50:10:be:fc:99:34:f9:c8:f8:94:f2:0f:
ac:23:2d:89:46:d4:50:fa:bd:f4:f9:a6:60:8f:ac:
e8:78:13:14:01:3e:22:ee:13:d9:c5:ce:68:37:b3:
29:c6:32:91:48:47:20:ff:f0:d4:2a:97:88:b2:2a:
f7:59:cd:ef:2c:2e:f1:29:25:4a:5b:fd:b3:52:08:
fa:2c:09:28:a0:db:8d:be:97:c8:d9:3a:c6:54:bd:
e8:7a:a7:02:c7:65:dc:bd:14:04:df:f3:69:d3:fc:
06:08:44:39:77:8a:fa:82:b6:22:63:6c:e3:af:7c:
5f:4a:ad:16:d5:2e:32:a1:36:5e:22:58:ea:78:70:
c4:96:e7:d1:3f:07:c4:03:92:16:1a:b6:fb:39:dd:
de:d2:c9:9c:01:64:36:c8:3f:c8:ae:ff:67:87:32:
8b:1f:c8:b9:47:9f:55:a5:7a:07:f4:5c:a7:80:5d:
2c:31:60:ca:1b:8e:7f:7e:47:60:dd:73:a3:68:2b:
62:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:86:33:72:A5:F5:32:E2:1D:5C:BB:26:D4:5D:9D:4B:A6:8C:CC:7C
X509v3 Authority Key Identifier:
keyid:4F:D2:07:FC:5A:D0:77:3C:3D:8E:93:E4:B3:06:19:C1:3B:A8:1C:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9IH_FrQdzw9jpPkswYZwTuoHLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/v4YzcqX1MuIdXLsm1F2dS6aMzHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.183.126.0/23
IPv6:
2a0a:1ec0::-2a0a:1ec1:0:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
4e:5d:4f:ae:ef:05:6d:fb:4e:d5:fc:2b:e1:e6:1a:f7:fc:16:
fd:3a:13:c8:aa:58:f8:16:fc:83:ad:0f:a3:92:d6:8c:0a:38:
1b:06:cd:d4:9f:4d:11:a7:83:12:85:be:1d:dd:cd:8c:37:c8:
ec:0f:7a:ef:cc:2a:02:eb:8c:f4:0f:39:37:7c:d3:b8:c0:80:
ea:45:ee:9b:c7:c2:db:4e:2f:3f:e0:2a:5e:0a:d6:93:01:9f:
d1:ba:3c:79:7f:e2:53:13:1b:fe:ef:31:06:df:18:e3:91:43:
f2:55:88:1f:fe:29:f5:30:66:35:6c:17:28:72:e5:bb:f9:9b:
2c:f9:eb:3c:b7:7c:37:74:67:4e:b9:a5:9f:28:0a:f7:6a:c9:
7e:03:62:18:92:ee:7c:2a:c6:c9:83:37:43:bd:59:8f:5c:d9:
43:5c:6f:7b:58:6f:b4:0e:13:02:23:6b:52:1b:eb:9f:36:5d:
f4:92:bc:6d:ef:68:41:0c:2b:11:82:f7:e2:40:77:c1:54:84:
9c:9a:73:1b:6c:fa:f9:34:ea:81:58:75:44:32:38:3c:82:d1:
6e:c7:a6:e0:43:7b:d8:0d:43:6c:1d:43:f8:b4:b0:0b:fa:19:
52:bf:97:10:9a:8c:4b:2d:7c:92:21:63:ac:af:5c:af:27:26:
86:8e:e3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:29 2024 by rpki-client on console.sobornost.net