Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/7PVJcetkQMY-4FJIu3rLbYBSSVE.roa
File: 7PVJcetkQMY-4FJIu3rLbYBSSVE.roa (raw, json)
Hash identifier: P6f2B4lBczTM3iqbiD9wZ7ATgvs5fvogBfFsKAFbQdI=
Subject key identifier: EC:F5:49:71:EB:64:40:C6:3E:E0:52:48:BB:7A:CB:6D:80:52:49:51
Certificate issuer: /CN=acf7ab3f1a93e714f3074a05d86fcce2206305a8
Certificate serial: 0193A596C7AB45806C9720B354D8F686F104
Authority key identifier: AC:F7:AB:3F:1A:93:E7:14:F3:07:4A:05:D8:6F:CC:E2:20:63:05:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPerPxqT5xTzB0oF2G_M4iBjBag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/7PVJcetkQMY-4FJIu3rLbYBSSVE.roa
Signing time: Sun 08 Dec 2024 09:25:42 +0000
ROA not before: Sun 08 Dec 2024 09:25:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199471
IP address blocks: 185.83.87.0/24 maxlen: 24
2001:67c:c48::/48 maxlen: 48
2a13:fc80::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:a5:96:c7:ab:45:80:6c:97:20:b3:54:d8:f6:86:f1:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acf7ab3f1a93e714f3074a05d86fcce2206305a8
Validity
Not Before: Dec 8 09:25:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ecf54971eb6440c63ee05248bb7acb6d80524951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:cb:45:af:b5:bb:4f:b4:2d:37:2b:48:33:22:
31:24:71:b4:45:e2:e7:6e:71:ae:49:83:eb:43:10:
05:6e:99:b9:88:7b:98:cb:7a:2b:12:b3:01:43:f8:
3d:74:47:34:7f:8d:fa:b7:b3:47:27:d9:2a:6b:0b:
1a:63:27:36:a9:20:99:7c:c8:cf:c7:9b:19:c2:ff:
7e:b2:8e:79:26:ee:e9:8e:1d:1f:b1:24:5f:ab:47:
64:94:93:4b:ce:f3:4f:38:e8:99:6d:f9:1c:d9:cf:
a2:85:47:11:ca:45:7e:bb:c0:71:9a:ae:8c:c3:0e:
d9:8c:ee:b4:7b:7d:5c:ba:5b:db:3b:ae:6e:53:eb:
e1:2e:a1:7e:0e:83:cf:3f:61:f8:97:b5:40:be:b7:
ff:b2:d4:ff:39:1f:5c:32:e4:b1:fd:a5:8f:07:f1:
7d:c7:55:d9:b8:19:59:5c:d8:77:08:fd:dd:87:5f:
9d:6e:a2:aa:df:f7:77:65:26:f3:3c:68:6e:a4:1a:
0a:c0:e6:18:58:0a:d4:2e:85:86:3b:76:68:b8:fe:
63:a3:f8:7f:2e:b5:75:80:b2:3f:c9:02:2a:c9:d6:
dd:53:49:d3:98:e0:1f:d7:03:29:f9:43:98:41:d6:
3a:cf:ab:7b:a7:22:e3:60:f0:a9:d9:e8:13:56:77:
88:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F5:49:71:EB:64:40:C6:3E:E0:52:48:BB:7A:CB:6D:80:52:49:51
X509v3 Authority Key Identifier:
keyid:AC:F7:AB:3F:1A:93:E7:14:F3:07:4A:05:D8:6F:CC:E2:20:63:05:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPerPxqT5xTzB0oF2G_M4iBjBag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/7PVJcetkQMY-4FJIu3rLbYBSSVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.87.0/24
IPv6:
2001:67c:c48::/48
2a13:fc80::/32
Signature Algorithm: sha256WithRSAEncryption
90:66:bf:f6:ea:a1:cc:9d:5c:81:77:d4:a2:c6:91:92:41:c4:
26:e6:f7:b8:42:49:cc:a1:c3:c7:5a:22:f9:18:34:4b:73:0e:
23:a1:0a:57:c7:b7:07:fe:47:92:05:7b:0b:d8:05:cf:1b:79:
5c:c6:8a:bf:f1:09:08:15:0b:a4:95:de:f8:88:24:6d:6d:ee:
c8:dd:35:7b:11:e4:a7:9e:1c:22:bb:77:f3:e4:c6:6f:a7:01:
34:97:d8:cd:4d:a3:4e:3d:f8:8f:a6:13:11:56:24:ec:03:3e:
3c:5a:b0:86:7b:97:ed:4c:bb:75:c6:01:14:6b:ad:2d:10:fa:
79:2d:bb:cc:de:7c:23:4b:3f:cd:f6:7d:82:ce:10:f7:cd:76:
51:e7:f1:26:de:76:12:51:a9:6d:62:8a:99:05:2d:e4:de:78:
e0:be:03:c2:df:5e:f7:e0:d0:20:a5:a9:db:2f:c9:cb:90:f0:
85:c7:3b:af:c2:d3:55:58:f9:1d:32:3c:45:c5:0e:5b:84:9d:
ab:5d:d2:72:77:73:9e:62:09:52:a6:87:2c:ab:9a:16:f1:b3:
f7:9b:93:f1:49:c9:3b:9c:0f:ae:5e:09:cf:f7:40:8c:56:14:
03:d0:c5:d2:fc:c9:9c:d0:9f:d9:11:9e:c6:4c:ee:44:b1:a0:
98:5f:79:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:36 2024 by rpki-client on console.sobornost.net