Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/aHlfuIHUUJQcmwzDL21gmtdC8sA.roa
File: aHlfuIHUUJQcmwzDL21gmtdC8sA.roa (raw, json)
Hash identifier: u7mqSTA1TxUCC6edmuBvm0I57irB51HjAMmfjM64bUM=
Subject key identifier: 68:79:5F:B8:81:D4:50:94:1C:9B:0C:C3:2F:6D:60:9A:D7:42:F2:C0
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01942747FC049808CA0AF7CB82332BBE0332
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/aHlfuIHUUJQcmwzDL21gmtdC8sA.roa
Signing time: Thu 02 Jan 2025 13:50:16 +0000
ROA not before: Thu 02 Jan 2025 13:50:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62816
IP address blocks: 83.147.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:fc:04:98:08:ca:0a:f7:cb:82:33:2b:be:03:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jan 2 13:50:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68795fb881d450941c9b0cc32f6d609ad742f2c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:75:da:a7:dc:bc:cb:9a:ce:e7:0a:a6:00:23:
fa:3b:9d:87:d7:c7:8d:b9:cf:85:c9:91:c0:99:da:
30:d4:31:90:bc:7f:25:87:8d:fb:37:4d:c8:a8:44:
31:21:b6:f9:3d:e6:c1:08:c3:19:ea:86:9c:a8:3e:
7b:de:2c:d6:8a:9b:45:0a:ca:9c:34:94:7d:29:08:
f6:4a:03:4a:0d:0c:02:c3:c5:0d:73:90:7e:d9:1d:
65:a1:bc:35:96:ec:fa:32:d2:ed:75:8c:d2:89:33:
f0:51:5b:df:5a:39:ea:46:a8:0b:18:a4:83:99:36:
6e:2a:16:e0:83:60:8f:71:d6:1a:ec:0d:82:9a:6c:
92:e0:d1:38:00:79:67:e0:c8:1a:90:af:c7:28:2f:
89:ee:91:fe:72:6b:d0:43:ab:2b:a1:64:f7:d4:e8:
2c:bf:20:74:bf:36:01:4f:10:89:c3:d1:5c:b4:04:
d6:90:86:fc:a8:4c:61:33:4e:47:32:01:9c:07:67:
13:d6:c1:be:dc:28:06:9c:0b:05:95:df:cd:e2:30:
3a:3b:78:6f:1a:9a:78:5f:70:0a:24:d2:58:43:15:
c1:e5:6e:64:91:4a:68:d4:f0:a1:03:9a:78:a1:7d:
46:79:9b:45:c1:02:10:b9:01:41:14:7f:16:03:8b:
98:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:79:5F:B8:81:D4:50:94:1C:9B:0C:C3:2F:6D:60:9A:D7:42:F2:C0
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/aHlfuIHUUJQcmwzDL21gmtdC8sA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.23.0/24
Signature Algorithm: sha256WithRSAEncryption
55:95:4f:19:9f:21:88:21:a1:a7:6a:ef:81:2c:f2:12:cf:c6:
0a:f2:28:4e:d5:3c:31:14:e0:4b:82:64:93:cf:04:84:e6:91:
30:fc:66:d4:0e:6d:d5:84:34:36:7a:aa:1e:da:9c:47:3c:3a:
a1:8e:66:ec:f9:b7:10:61:17:d2:9c:6c:2b:dc:68:40:5b:7b:
8c:97:a4:62:f0:0e:97:89:fc:fc:ec:ec:54:92:51:78:7e:03:
e3:a0:f8:69:c6:f7:82:48:c9:bb:4d:d8:f2:17:5c:2b:dc:9e:
de:ee:24:10:b8:93:a7:94:74:3a:1e:5c:45:80:54:bf:8e:6e:
7d:c5:4d:0a:9e:fa:d3:5e:41:4a:fc:f0:7b:b5:d0:7c:16:89:
de:ef:49:14:57:11:e1:d7:a0:18:0f:c5:fd:a9:8f:56:5a:a9:
d3:ae:99:6c:b2:2e:36:fa:9f:2d:54:af:59:23:63:0a:56:66:
38:b9:ad:79:52:f3:d4:16:c7:3a:90:1e:3c:06:3d:1e:11:c5:
30:66:c3:c0:8e:9f:df:d2:75:a1:94:e1:c0:3d:a1:ad:57:36:
1a:91:26:ce:fd:59:67:30:1e:1d:d2:ce:85:e5:a7:e3:74:d2:
55:72:89:e4:0a:e0:2a:8a:d0:66:74:96:13:e3:3f:cc:ee:56:
0b:e2:82:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:33 2025 by rpki-client on console.sobornost.net