Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/t7d8no7QPSTptR3X9rb3YMhBXL4.roa
File: t7d8no7QPSTptR3X9rb3YMhBXL4.roa (raw, json)
Hash identifier: 4xaHRn2PLl4uqwRo2/OAfrz3w2joukt5KmMjhdzfqFU=
Subject key identifier: B7:B7:7C:9E:8E:D0:3D:24:E9:B5:1D:D7:F6:B6:F7:60:C8:41:5C:BE
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0193FA28FCC25E8F2C36760FBBB4690F9B47
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/t7d8no7QPSTptR3X9rb3YMhBXL4.roa
Signing time: Tue 24 Dec 2024 19:33:30 +0000
ROA not before: Tue 24 Dec 2024 19:33:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 83.147.216.0/24 maxlen: 24
83.147.232.0/22 maxlen: 24
83.147.244.0/22 maxlen: 24
83.147.252.0/22 maxlen: 24
91.186.200.0/22 maxlen: 24
91.186.204.0/22 maxlen: 24
94.241.168.0/21 maxlen: 24
178.253.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:fa:28:fc:c2:5e:8f:2c:36:76:0f:bb:b4:69:0f:9b:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Dec 24 19:33:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b7b77c9e8ed03d24e9b51dd7f6b6f760c8415cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:dd:c5:29:10:2f:e8:ba:f6:5b:04:c3:45:f9:
18:b7:04:fd:0e:e1:dd:34:9d:e6:7f:bd:d6:80:95:
66:5e:f6:21:19:ec:19:d6:d2:8e:f6:f6:57:fe:cd:
ba:fa:72:1d:42:a0:be:fb:1e:8d:3c:e1:b0:fb:31:
65:e5:25:4c:a6:a4:d0:a2:fa:ca:94:69:b7:48:e7:
09:ea:96:66:05:2f:e8:c4:da:99:b3:39:5f:da:ac:
06:85:aa:1b:4f:dd:ab:94:39:6a:fc:8d:91:7b:74:
31:91:81:ca:45:aa:03:f5:3e:d3:96:6e:cd:2f:1c:
2b:fd:76:40:44:d8:c0:20:e7:20:63:14:e2:14:87:
f5:d1:ec:46:ec:5a:89:5d:b6:be:9b:68:9b:32:4b:
d6:4d:8b:1b:45:b5:81:02:56:7d:2a:ab:bb:2e:6f:
e6:eb:df:67:7a:24:76:ef:99:a9:2e:17:62:d9:76:
32:cd:4c:97:a7:93:20:c3:33:09:52:b9:60:40:a1:
4d:26:23:f4:13:27:a6:f6:ec:3c:ab:c2:e2:ef:64:
82:1c:55:4b:9d:cb:7d:d1:37:ce:63:2e:c1:d8:91:
0f:21:79:2c:9b:86:0b:60:65:1f:aa:b6:0d:06:0d:
5a:83:92:7a:1e:fc:c1:34:58:f6:d5:2b:5e:d9:68:
16:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B7:7C:9E:8E:D0:3D:24:E9:B5:1D:D7:F6:B6:F7:60:C8:41:5C:BE
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/t7d8no7QPSTptR3X9rb3YMhBXL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.216.0/24
83.147.232.0/22
83.147.244.0/22
83.147.252.0/22
91.186.200.0/21
94.241.168.0/21
178.253.55.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:c2:06:8e:23:cc:9c:1b:c6:1a:bc:3e:01:83:f0:6f:38:c0:
7f:d7:b2:1e:97:97:c5:6d:76:d8:23:a4:13:83:0f:60:66:c1:
c3:d3:3a:9e:95:b3:9c:1d:1f:89:28:26:12:a1:27:9e:ca:f2:
1d:8d:f8:c2:35:4d:db:6f:16:2c:18:e3:00:a3:63:23:84:a0:
af:38:04:b6:a0:bc:83:70:64:bf:ed:87:c0:1c:51:ac:35:7b:
19:ae:6b:ba:a2:17:07:7b:58:f0:32:0d:9b:8a:18:9e:31:8a:
6b:63:76:f6:cd:5f:d4:5d:5a:c9:41:82:cd:e1:23:7c:36:a9:
0d:4c:7c:14:7c:bb:4c:cc:53:8c:b0:38:42:51:c0:c6:8c:98:
20:d4:53:3c:63:94:b6:a2:35:3f:cc:0e:e7:08:42:1a:b8:54:
b6:6c:75:39:60:ee:1b:18:e3:1c:7a:1a:9c:3c:aa:bf:c9:70:
89:aa:81:8b:91:fc:a9:75:e2:58:8e:67:d1:99:9c:2b:f5:8c:
0e:6a:89:6c:a0:7d:95:16:2c:73:8f:1d:3c:62:3d:99:f6:4a:
dd:62:22:4a:98:e0:24:96:ee:43:5a:2a:a1:b5:83:44:44:1f:
6f:92:a9:65:d4:4c:5e:84:4b:d9:7f:b0:d1:9f:31:a6:3e:7c:
fa:1a:eb:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:31 2024 by rpki-client on console.sobornost.net