Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/1FtGROThOgx9Jg-7_kfv7PdZI8o.roa
File: 1FtGROThOgx9Jg-7_kfv7PdZI8o.roa (raw, json)
Hash identifier: tBSnAd28gpk2QACEDHJrBkQJTAgSnZ2a2G8QiJtxYlc=
Subject key identifier: D4:5B:46:44:E4:E1:3A:0C:7D:26:0F:BB:FE:47:EF:EC:F7:59:23:CA
Certificate issuer: /CN=8978ff5dab33c42da65fe4e1abfbca4eafbdd2aa
Certificate serial: 018DE5DF39CE897D52FE355432EA51B3F4BB
Authority key identifier: 89:78:FF:5D:AB:33:C4:2D:A6:5F:E4:E1:AB:FB:CA:4E:AF:BD:D2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/1FtGROThOgx9Jg-7_kfv7PdZI8o.roa
Signing time: Mon 26 Feb 2024 14:43:48 +0000
ROA not before: Mon 26 Feb 2024 14:43:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207147
IP address blocks: 84.247.4.0/22 maxlen: 24
85.204.148.0/22 maxlen: 24
89.37.228.0/22 maxlen: 24
130.0.88.0/22 maxlen: 24
176.223.176.0/22 maxlen: 24
185.164.212.0/22 maxlen: 24
185.178.88.0/22 maxlen: 24
185.194.120.0/22 maxlen: 24
185.237.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e5:df:39:ce:89:7d:52:fe:35:54:32:ea:51:b3:f4:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8978ff5dab33c42da65fe4e1abfbca4eafbdd2aa
Validity
Not Before: Feb 26 14:43:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d45b4644e4e13a0c7d260fbbfe47efecf75923ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2f:09:fb:39:e1:e9:cb:0b:f7:db:ae:e4:cc:
54:b7:46:38:7f:ec:ca:52:9d:18:1a:d8:c7:9f:4b:
f2:93:2d:2c:7a:91:f0:2e:2d:fb:8e:f1:e0:7c:bb:
d2:ad:a4:d4:e4:83:a7:75:5e:e0:66:55:44:90:52:
5b:70:94:dd:71:35:14:18:22:5f:75:32:9f:83:43:
92:da:a9:e8:07:39:bf:67:54:89:ca:6b:8a:c9:d5:
07:14:b9:01:bf:bb:fd:59:05:e2:9c:89:23:56:07:
87:a7:8c:7e:6e:a6:d7:db:a7:a3:da:f2:60:0f:4d:
aa:17:9f:b8:74:e6:be:9b:13:45:31:a5:d3:14:ea:
4b:f3:2a:1c:5a:e3:b5:cf:f1:bf:30:9f:b6:f5:ef:
11:05:9a:6c:e9:47:e4:ed:89:3a:b3:b2:e7:f1:a3:
ac:38:dd:66:e3:fb:ba:eb:15:d5:b0:5a:d7:50:b3:
f4:ed:fa:67:a9:a9:93:af:3b:5a:8d:15:9c:a8:b2:
36:c0:8a:f8:85:6c:ef:89:0e:52:63:a3:ef:60:f6:
78:be:13:ba:54:14:d2:f5:43:00:97:74:70:96:9c:
9f:6d:bc:e8:59:d8:46:e8:5e:30:47:15:92:c4:0a:
e2:f3:1b:20:90:a9:cc:9b:b2:24:57:a2:80:10:ae:
b0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:5B:46:44:E4:E1:3A:0C:7D:26:0F:BB:FE:47:EF:EC:F7:59:23:CA
X509v3 Authority Key Identifier:
keyid:89:78:FF:5D:AB:33:C4:2D:A6:5F:E4:E1:AB:FB:CA:4E:AF:BD:D2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/1FtGROThOgx9Jg-7_kfv7PdZI8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.4.0/22
85.204.148.0/22
89.37.228.0/22
130.0.88.0/22
176.223.176.0/22
185.164.212.0/22
185.178.88.0/22
185.194.120.0/22
185.237.40.0/22
Signature Algorithm: sha256WithRSAEncryption
23:4a:42:88:34:33:6d:4a:e8:4a:a1:63:b6:aa:23:dd:a9:6d:
05:ad:6e:78:26:d2:85:57:0b:f6:cf:91:e5:70:77:3f:a9:13:
dc:48:07:26:67:fd:c1:b8:8e:b1:8a:a0:b8:7b:75:da:d6:77:
7a:a3:de:9d:50:1f:0a:6c:31:38:b2:5c:8a:b6:e1:89:8b:cf:
b1:71:e2:54:91:83:c6:74:1c:31:76:61:fa:4a:a5:60:dd:82:
3f:72:b2:29:8b:51:a7:8d:3e:8a:85:81:be:08:40:42:b8:f2:
21:43:63:91:81:8e:51:4d:e9:af:26:8b:f4:25:c7:7b:ec:74:
6e:b3:69:bd:14:a7:84:e1:66:b3:b4:43:0d:38:91:03:1c:98:
17:02:1b:21:bb:0f:d7:90:19:83:63:a2:e7:04:64:1f:c0:a5:
dd:d1:d8:b4:2c:ba:ff:13:64:9f:c5:cb:b4:8b:a3:23:75:0d:
db:7d:62:31:3c:79:51:2a:54:42:78:4b:bd:40:a9:6c:dd:f1:
1f:f8:05:47:c3:aa:00:fe:a3:82:f4:b3:1f:3b:02:1c:13:42:
4a:c3:1e:78:f6:53:d3:e6:98:6f:72:04:fc:84:8c:b2:6e:19:
9b:36:03:eb:6f:95:05:a4:12:ea:1e:8f:6e:81:a6:b4:2c:63:
28:49:d1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 20:11:21 2024 by rpki-client on console.sobornost.net