Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/DIIO0O2_krekFeByk2C4S3fffgM.roa
File: DIIO0O2_krekFeByk2C4S3fffgM.roa (raw, json)
Hash identifier: +qf/kZlWbfP+SxxSQ+dhPLLXLqgkkl38iatCL4qyVa0=
Subject key identifier: 0C:82:0E:D0:ED:BF:92:B7:A4:15:E0:72:93:60:B8:4B:77:DF:7E:03
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0193CF5F8055E5C3545610D06E5E7FE2DD8E
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/DIIO0O2_krekFeByk2C4S3fffgM.roa
Signing time: Mon 16 Dec 2024 12:09:22 +0000
ROA not before: Mon 16 Dec 2024 12:09:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 83.147.248.0/22 maxlen: 22
91.186.200.0/23 maxlen: 24
91.186.202.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:cf:5f:80:55:e5:c3:54:56:10:d0:6e:5e:7f:e2:dd:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Dec 16 12:09:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c820ed0edbf92b7a415e0729360b84b77df7e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:0b:79:4b:28:73:d1:ff:5a:46:70:13:e9:e6:
60:8a:a6:13:b1:69:ec:96:58:ff:be:b5:99:ab:bb:
03:d3:58:fc:3b:e9:39:63:65:60:d1:3a:06:04:6b:
fe:fa:3c:da:3a:33:98:b3:2d:1f:d5:d2:e8:34:bb:
60:07:df:e7:73:81:67:e8:61:32:3d:d0:6c:99:3a:
4d:1a:7b:6b:e6:71:14:95:74:17:75:c4:db:83:0e:
61:6d:65:f3:6f:8b:34:ea:b1:30:eb:e4:a8:8f:3e:
59:0d:5c:b1:43:5e:5c:71:83:34:07:70:9a:75:14:
42:e1:bc:8b:f0:3d:b4:ca:4a:fb:14:25:6a:7f:7d:
09:1c:ca:8a:20:5b:3a:6b:2d:0a:59:4b:f0:91:2e:
cc:31:80:ed:5f:2e:a2:15:c0:92:e3:8d:59:a8:c5:
54:b4:94:e3:59:34:93:3a:c7:db:ca:75:2b:4b:ed:
f8:44:04:06:ba:54:5f:7f:71:ad:ca:6d:42:cd:fa:
e1:da:98:7d:0e:d5:1b:82:f7:e4:a4:cb:cd:25:ee:
94:91:cc:7d:47:4b:b7:b8:93:af:29:fa:e0:ae:b9:
a3:72:dc:ff:30:03:db:67:b7:92:87:2f:c3:05:fd:
f2:64:e0:25:d5:18:9f:45:9d:7c:94:13:19:7d:c3:
56:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:82:0E:D0:ED:BF:92:B7:A4:15:E0:72:93:60:B8:4B:77:DF:7E:03
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/DIIO0O2_krekFeByk2C4S3fffgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.248.0/22
91.186.200.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:d5:52:ab:d4:72:56:20:29:1f:bd:e1:9e:b3:83:c6:b7:4a:
cd:31:7a:72:05:24:2e:5e:b0:15:1f:9c:99:3f:93:e3:9d:39:
69:b3:39:6d:70:12:07:bf:78:3f:52:85:c5:61:ea:9d:82:90:
6f:4d:f8:96:0d:7a:c8:19:71:5d:01:c2:7d:f3:48:06:ab:45:
de:fb:1a:01:45:1e:5c:99:16:74:d2:14:d3:43:d4:65:31:57:
7a:7e:05:0c:33:0d:ae:b8:c0:0f:f9:7d:9b:8b:94:ca:fa:d1:
ba:57:44:af:6f:37:f1:67:0e:8e:6f:61:13:00:f9:68:2f:ca:
78:19:4c:17:fa:2e:50:05:ec:80:10:b9:50:2c:5b:99:f6:eb:
5e:8d:0b:7e:27:d7:e8:43:80:8d:62:52:e6:bf:a6:94:c0:12:
ef:67:4f:ae:3f:b6:2d:7d:54:85:bf:89:9b:64:d3:70:ec:87:
d4:89:86:41:e4:a3:8a:92:af:b0:4e:1d:69:bb:61:25:60:11:
76:7e:5d:2a:59:44:e4:e0:21:69:5a:a3:20:08:2c:c8:44:93:
d7:78:52:65:df:15:89:b8:98:e8:c8:5e:c5:98:c9:9e:0f:6b:
e2:e4:1c:32:2d:a6:70:d3:ae:9e:b1:ce:ab:e2:a5:31:6c:8f:
be:3d:a3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:31 2024 by rpki-client on console.sobornost.net