Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2A7dI7DBKReSKdqbsygd05zQtMA.roa
File: 2A7dI7DBKReSKdqbsygd05zQtMA.roa (raw, json)
Hash identifier: EmKgw8HfitfAFGFZdjhoQZn7NADPhKJeEvcHw9ZtsFY=
Subject key identifier: D8:0E:DD:23:B0:C1:29:17:92:29:DA:9B:B3:28:1D:D3:9C:D0:B4:C0
Certificate issuer: /CN=dbbf37909ce17ba53ad90a8632377a5d938743e5
Certificate serial: 0193DE4722007063BAC7B89BFEE7837A82A8
Authority key identifier: DB:BF:37:90:9C:E1:7B:A5:3A:D9:0A:86:32:37:7A:5D:93:87:43:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2A7dI7DBKReSKdqbsygd05zQtMA.roa
Signing time: Thu 19 Dec 2024 09:37:03 +0000
ROA not before: Thu 19 Dec 2024 09:37:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 271791
IP address blocks: 82.86.104.0/21 maxlen: 21
82.86.104.0/24 maxlen: 24
82.86.105.0/24 maxlen: 24
82.86.106.0/24 maxlen: 24
82.86.107.0/24 maxlen: 24
82.86.108.0/24 maxlen: 24
82.86.109.0/24 maxlen: 24
82.86.110.0/24 maxlen: 24
82.86.111.0/24 maxlen: 24
82.86.168.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:de:47:22:00:70:63:ba:c7:b8:9b:fe:e7:83:7a:82:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbbf37909ce17ba53ad90a8632377a5d938743e5
Validity
Not Before: Dec 19 09:37:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d80edd23b0c129179229da9bb3281dd39cd0b4c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e0:33:0c:30:ed:7b:45:ca:6c:e0:44:02:c2:
d1:06:10:fa:a5:31:b2:4a:a9:63:26:92:4a:fd:45:
d5:39:98:61:d4:83:a9:c3:82:bd:9f:23:ca:a3:b7:
40:b6:67:bc:0f:d7:b4:dc:88:b3:ce:5d:c8:47:e1:
01:f7:02:97:59:34:53:24:d3:47:7b:ab:c6:47:1b:
e6:7c:2d:fc:1d:15:17:ef:38:f2:7a:91:90:86:f1:
15:c9:92:bc:60:fc:46:a2:ba:01:94:1d:62:be:7d:
fd:65:ff:64:86:e1:a4:60:1e:cb:55:17:61:cc:cf:
d6:24:3c:7e:dc:ca:66:88:1b:6f:99:35:bf:54:e3:
f3:e1:5b:e5:eb:c3:90:bc:8b:90:57:ab:c1:c5:af:
48:52:2d:11:dd:ea:63:b1:dc:29:a8:34:81:1c:06:
19:c5:fd:e5:e6:12:7c:91:91:ff:94:1e:07:a1:71:
c6:90:08:a9:7d:d2:6a:a4:a2:f0:a5:80:24:39:55:
4a:28:50:51:8e:57:3d:cf:c1:85:96:2b:a2:1e:df:
98:96:02:50:78:98:6a:51:13:1b:ae:7b:62:c6:98:
18:b7:16:1c:c0:4d:09:b5:61:f7:d3:0b:59:c2:06:
71:5c:05:81:13:ac:43:9d:1a:7a:fa:59:b1:8c:05:
45:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:0E:DD:23:B0:C1:29:17:92:29:DA:9B:B3:28:1D:D3:9C:D0:B4:C0
X509v3 Authority Key Identifier:
keyid:DB:BF:37:90:9C:E1:7B:A5:3A:D9:0A:86:32:37:7A:5D:93:87:43:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2A7dI7DBKReSKdqbsygd05zQtMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.86.104.0/21
82.86.168.0/21
Signature Algorithm: sha256WithRSAEncryption
7c:73:e5:dc:85:b0:09:09:1e:d3:9c:f4:bc:85:2b:e4:59:bf:
05:b4:db:b9:eb:b9:50:c8:73:6c:8a:91:88:c1:aa:bb:3c:17:
f9:05:d1:59:4c:8c:bb:e5:5e:e7:89:99:21:6c:4a:a0:73:6f:
0d:ee:d9:50:eb:51:f5:46:37:cc:65:0f:03:ce:d5:03:73:89:
79:d3:0a:f8:68:20:91:48:04:4e:87:92:e5:f1:26:fb:ba:0d:
46:02:cd:b6:93:55:70:3e:c7:7a:ce:23:83:6a:32:bf:f7:84:
ff:75:7d:ac:64:8f:9b:0f:c3:19:5a:16:cd:43:59:9f:7a:f2:
bf:15:8f:7c:87:9a:2b:8f:b6:95:a6:5d:2e:85:d1:88:09:ce:
66:95:51:6b:3f:94:d8:7f:bd:8e:47:16:c3:4c:c4:cf:48:3a:
e3:20:f0:ce:c4:b4:29:28:f3:e1:45:24:c1:db:52:94:1b:f0:
66:2e:b8:81:21:ed:40:91:33:c2:83:96:d8:03:6a:87:55:0a:
fa:f1:36:60:f4:64:2f:04:52:66:cd:72:3c:ca:2a:81:6f:3f:
02:63:db:88:cf:6f:df:01:43:e4:ab:74:5f:30:2f:7c:bf:12:
91:48:01:d1:ab:5a:64:29:88:da:c5:40:8d:14:ca:59:dc:d6:
d5:3a:92:33
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZPeRyIAcGO6x7ib/ueDeoKoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYmYzNzkwOWNlMTdiYTUzYWQ5MGE4NjMyMzc3YTVkOTM4
NzQzZTUwHhcNMjQxMjE5MDkzNzAzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODBlZGQyM2IwYzEyOTE3OTIyOWRhOWJiMzI4MWRkMzljZDBiNGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+AzDDDte0XKbOBEAsLRBhD6pTGy
SqljJpJK/UXVOZhh1IOpw4K9nyPKo7dAtme8D9e03Iizzl3IR+EB9wKXWTRTJNNH
e6vGRxvmfC38HRUX7zjyepGQhvEVyZK8YPxGoroBlB1ivn39Zf9khuGkYB7LVRdh
zM/WJDx+3MpmiBtvmTW/VOPz4Vvl68OQvIuQV6vBxa9IUi0R3epjsdwpqDSBHAYZ
xf3l5hJ8kZH/lB4HoXHGkAipfdJqpKLwpYAkOVVKKFBRjlc9z8GFliuiHt+YlgJQ
eJhqURMbrntixpgYtxYcwE0JtWH30wtZwgZxXAWBE6xDnRp6+lmxjAVF/wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNgO3SOwwSkXkinam7MoHdOc0LTAMB8GA1UdIwQY
MBaAFNu/N5Cc4XulOtkKhjI3el2Th0PlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjc4M2tKemhlNlU2MlFxR01qZDZYWk9IUS1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8xMzczYTAtOGMzZC00MjgzLWE1Y2Ut
ODIyZWE0M2RjMThkLzEvMkE3ZEk3REJLUmVTS2RxYnN5Z2QwNXpRdE1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8xMzczYTAtOGMzZC00MjgzLWE1Y2UtODIyZWE0M2RjMThk
LzEvMjc4M2tKemhlNlU2MlFxR01qZDZYWk9IUS1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDUlZoAwQD
UlaoMA0GCSqGSIb3DQEBCwUAA4IBAQB8c+XchbAJCR7TnPS8hSvkWb8FtNu567lQ
yHNsipGIwaq7PBf5BdFZTIy75V7niZkhbEqgc28N7tlQ61H1RjfMZQ8DztUDc4l5
0wr4aCCRSAROh5Ll8Sb7ug1GAs22k1VwPsd6ziODajK/94T/dX2sZI+bD8MZWhbN
Q1mfevK/FY98h5orj7aVpl0uhdGICc5mlVFrP5TYf72ORxbDTMTPSDrjIPDOxLQp
KPPhRSTB21KUG/BmLriBIe1AkTPCg5bYA2qHVQr68TZg9GQvBFJmzXI8yiqBbz8C
Y9uIz2/fAUPkq3RfMC98vxKRSAHRq1pkKYjaxUCNFMpZ3NbVOpIz
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:24 2024 by rpki-client on console.sobornost.net