Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/FZl8BNBe06lHZfZwLNZ5KTPd1N0.roa
File: FZl8BNBe06lHZfZwLNZ5KTPd1N0.roa (raw, json)
Hash identifier: SZAcu0fttl9WgokfXRL5ZcH3dWl9LHy7so9QwGSTHp8=
Subject key identifier: 15:99:7C:04:D0:5E:D3:A9:47:65:F6:70:2C:D6:79:29:33:DD:D4:DD
Certificate issuer: /CN=3eb903284a1d15dc158ad7182ea0bce786ceb2ad
Certificate serial: 0193D3A3BA81CCB53891B8C7A743F02F412D
Authority key identifier: 3E:B9:03:28:4A:1D:15:DC:15:8A:D7:18:2E:A0:BC:E7:86:CE:B2:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrkDKEodFdwVitcYLqC854bOsq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/FZl8BNBe06lHZfZwLNZ5KTPd1N0.roa
Signing time: Tue 17 Dec 2024 08:02:22 +0000
ROA not before: Tue 17 Dec 2024 08:02:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29414
IP address blocks: 82.139.146.0/23 maxlen: 23
82.139.160.0/21 maxlen: 21
82.139.166.0/24 maxlen: 24
82.139.184.0/21 maxlen: 21
130.180.192.0/21 maxlen: 21
185.61.4.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d3:a3:ba:81:cc:b5:38:91:b8:c7:a7:43:f0:2f:41:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb903284a1d15dc158ad7182ea0bce786ceb2ad
Validity
Not Before: Dec 17 08:02:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15997c04d05ed3a94765f6702cd6792933ddd4dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:54:5f:ee:7e:6d:35:2e:90:2a:35:d8:9b:ed:
d8:54:49:e7:2e:23:13:5e:34:43:40:48:2f:36:3d:
c5:c9:e6:6f:1c:81:68:5d:c7:43:ce:72:a1:e2:55:
b1:89:a3:8d:b6:cf:8d:28:72:48:8a:eb:0f:a0:77:
d4:31:61:c9:aa:27:99:cf:4d:47:2a:f7:77:5a:2a:
e1:ed:3a:99:65:50:32:f3:55:fb:85:0a:41:d4:bf:
b0:50:6e:f5:59:f4:7d:b5:5c:3e:14:e8:62:49:eb:
93:4b:bb:37:45:a2:96:d8:08:0f:12:cc:bb:48:c1:
13:37:3e:f9:77:a7:34:75:7a:33:cc:64:28:c9:25:
15:09:25:68:ac:f4:10:01:b4:7c:1b:4f:be:4e:26:
fe:2a:88:87:b3:f3:b7:9a:e8:0e:e0:8b:49:6d:ac:
eb:26:05:73:66:7c:e4:71:5f:df:4b:7d:7e:ac:9d:
49:e9:7f:cb:6d:c6:51:ce:96:1e:d5:ea:4e:7c:1d:
3e:20:2f:ba:fc:42:f4:e5:c9:db:cf:34:3e:df:7d:
04:f5:f2:8f:8d:ce:00:d2:2f:fc:78:06:f0:d1:34:
41:37:da:c2:57:d2:88:e2:67:32:ef:d5:2f:4a:3b:
d7:9a:5f:53:22:7d:22:cc:80:46:dc:36:1e:13:97:
53:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:99:7C:04:D0:5E:D3:A9:47:65:F6:70:2C:D6:79:29:33:DD:D4:DD
X509v3 Authority Key Identifier:
keyid:3E:B9:03:28:4A:1D:15:DC:15:8A:D7:18:2E:A0:BC:E7:86:CE:B2:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrkDKEodFdwVitcYLqC854bOsq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/FZl8BNBe06lHZfZwLNZ5KTPd1N0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.139.146.0/23
82.139.160.0/21
82.139.184.0/21
130.180.192.0/21
185.61.4.0/23
Signature Algorithm: sha256WithRSAEncryption
52:a3:b2:35:db:c8:a1:d5:a1:da:df:bb:ef:26:f2:45:1a:9b:
6e:be:6e:94:48:b1:ae:88:d1:89:1c:3a:37:cc:c3:f4:18:3c:
51:20:f9:9a:65:89:75:5e:68:79:64:18:5d:61:66:6d:91:a8:
c7:7b:10:42:f7:4b:f3:5e:ac:55:8a:47:4b:94:42:41:ec:e4:
09:be:fc:fe:04:8d:bf:f2:00:29:00:1b:f2:89:09:6e:4b:38:
4c:e5:94:1c:ed:b4:4f:34:97:ee:64:09:46:59:d4:7c:f6:01:
9b:4a:f7:23:c9:e7:51:c0:f2:d0:73:a2:08:8e:83:31:cd:3f:
9e:7d:1a:0d:09:9d:21:35:48:21:6b:65:7a:9c:85:2c:41:fb:
22:5d:48:87:43:e5:0e:26:76:c6:5c:28:1a:65:12:db:3a:df:
5b:10:6d:ca:21:72:f2:e6:fe:d0:97:91:e7:74:15:2f:80:89:
3c:6a:eb:72:b6:24:9a:f4:af:26:f2:55:c1:91:51:ae:95:82:
82:a9:6a:5f:bf:b1:f9:69:52:82:3c:82:69:7e:fb:ef:dd:2f:
98:09:e4:8a:f1:ef:0a:d6:cd:a0:03:d7:c9:4f:e5:77:74:25:
09:0a:c8:4d:7b:d8:13:69:74:f1:42:b4:0c:a8:1a:25:3c:47:
da:64:b8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:09 2024 by rpki-client on console.sobornost.net