Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/gPT7sW4G2ZN9UNmphmg_hk0jbRw.roa
File: gPT7sW4G2ZN9UNmphmg_hk0jbRw.roa (raw, json)
Hash identifier: PHxlHQzqJqhF3hMVVWjePq2Bjc4OfaYNDTan7+Vo8UQ=
Subject key identifier: 80:F4:FB:B1:6E:06:D9:93:7D:50:D9:A9:86:68:3F:86:4D:23:6D:1C
Certificate issuer: /CN=89b332d57ce14fab1ebd746817dd701062c74a88
Certificate serial: 01942067FB5D9B681E120534C3C0FAAA6373
Authority key identifier: 89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/gPT7sW4G2ZN9UNmphmg_hk0jbRw.roa
Signing time: Wed 01 Jan 2025 05:47:52 +0000
ROA not before: Wed 01 Jan 2025 05:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39830
IP address blocks: 83.173.124.0/23 maxlen: 24
83.173.124.0/24 maxlen: 24
83.173.125.0/24 maxlen: 24
83.173.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:fb:5d:9b:68:1e:12:05:34:c3:c0:fa:aa:63:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89b332d57ce14fab1ebd746817dd701062c74a88
Validity
Not Before: Jan 1 05:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80f4fbb16e06d9937d50d9a986683f864d236d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f2:20:8e:68:4a:f2:2e:1b:f9:c1:43:7c:15:
21:0b:db:7e:f8:ab:ae:1f:f7:22:d7:b1:32:23:3d:
aa:41:2b:7e:11:2c:f9:82:43:be:4a:66:ce:73:65:
31:78:84:69:ef:e6:90:d1:d3:fe:fc:6f:32:c0:88:
30:f8:2a:c7:ee:04:69:87:10:9c:fd:f4:19:fe:b2:
2c:d0:e8:92:45:b5:fb:b1:3b:7e:fa:87:90:11:80:
59:cf:02:8b:1e:28:4c:1b:44:33:71:97:ec:28:cf:
c3:9c:dd:73:e8:62:07:27:48:4f:1c:2d:46:b5:74:
be:48:91:97:2b:2c:7d:f0:23:c3:7c:7d:68:ca:10:
b2:56:86:ae:39:44:ab:de:dd:c7:03:6d:27:37:c2:
01:8d:4c:a7:1b:4f:ea:e6:23:ed:57:3f:9f:33:93:
80:b8:6a:0f:18:66:8b:4a:f1:b0:27:06:5d:b7:2e:
35:d6:0b:fa:3a:ae:00:77:d0:72:81:8c:33:3a:af:
d4:56:16:9b:12:f4:f8:95:41:48:db:0d:86:ee:73:
af:e2:96:d9:4a:5f:41:90:6f:c6:6d:23:08:00:06:
44:cb:bb:37:35:8b:2f:18:e9:65:7a:56:90:3a:12:
73:22:5b:c1:cb:e2:f5:10:a8:dc:a1:12:96:83:e7:
9d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F4:FB:B1:6E:06:D9:93:7D:50:D9:A9:86:68:3F:86:4D:23:6D:1C
X509v3 Authority Key Identifier:
keyid:89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/gPT7sW4G2ZN9UNmphmg_hk0jbRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.173.124.0-83.173.126.255
Signature Algorithm: sha256WithRSAEncryption
03:52:e0:03:79:5f:6c:7e:fd:97:f8:22:6b:4f:78:b5:7a:10:
10:d7:e9:e1:44:22:57:55:04:73:03:17:31:da:78:b7:f6:31:
7d:b7:a7:b8:25:1b:44:76:4c:54:ae:f8:40:3f:ef:9e:a3:46:
03:0a:c1:f7:1b:0f:c6:ca:eb:86:8a:d2:73:17:ff:c1:bb:e2:
c3:64:03:74:f9:0f:f8:af:2d:6b:eb:ef:c4:4a:f1:74:73:5d:
08:2b:9a:93:99:29:9b:71:ef:69:ee:3b:12:23:46:14:45:c5:
4c:42:3d:b7:6b:eb:c9:a4:28:d3:e4:96:7a:5a:bd:5f:33:50:
73:28:56:e1:a1:94:33:02:f0:ee:e0:76:ca:44:de:91:28:45:
69:ad:3e:58:8e:e9:98:ad:3f:9f:97:bb:b9:fb:bf:5a:cd:92:
64:97:7e:19:3b:e7:f3:57:b2:41:f5:54:3e:7a:93:1b:6f:15:
3e:40:8c:ce:bf:8a:2c:47:4e:d4:a0:7a:45:2b:7a:42:a7:69:
b1:5c:6d:26:2c:88:d0:4f:f3:28:b7:d8:50:31:85:b3:44:3a:
01:3f:6c:23:de:dc:69:99:c5:9f:bf:67:ad:8a:06:42:8e:23:
15:36:71:f9:af:7a:e9:07:3e:2e:0c:e1:93:93:5e:fb:cd:1f:
3d:1c:61:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:29 2025 by rpki-client on console.sobornost.net