Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/0a911a-0f34-4173-ade8-f9e471a0fa37/1/Fj3rshY8ZLrzY9OW6iyyVxz7kac.roa
File: Fj3rshY8ZLrzY9OW6iyyVxz7kac.roa (raw, json)
Hash identifier: rmT/uSK+yDY1FSUF8MGhl61aZ9+rOWvrvfa2UCbUHbI=
Subject key identifier: 16:3D:EB:B2:16:3C:64:BA:F3:63:D3:96:EA:2C:B2:57:1C:FB:91:A7
Certificate issuer: /CN=adbeebf03a93f28fde987822c04a904e7e367959
Certificate serial: 018CC349027F46E9A9441195FFC220B1149E
Authority key identifier: AD:BE:EB:F0:3A:93:F2:8F:DE:98:78:22:C0:4A:90:4E:7E:36:79:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rb7r8DqT8o_emHgiwEqQTn42eVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/0a911a-0f34-4173-ade8-f9e471a0fa37/1/Fj3rshY8ZLrzY9OW6iyyVxz7kac.roa
Signing time: Mon 01 Jan 2024 04:29:51 +0000
ROA not before: Mon 01 Jan 2024 04:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209581
IP address blocks: 83.136.178.0/24 maxlen: 24
83.136.177.0/24 maxlen: 24
83.136.179.0/24 maxlen: 24
83.136.176.0/24 maxlen: 24
83.229.38.0/24 maxlen: 24
83.229.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:02:7f:46:e9:a9:44:11:95:ff:c2:20:b1:14:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adbeebf03a93f28fde987822c04a904e7e367959
Validity
Not Before: Jan 1 04:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=163debb2163c64baf363d396ea2cb2571cfb91a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bb:18:19:fb:5d:b8:75:ae:06:33:57:38:c2:
99:ae:d1:11:56:6a:d8:cc:22:8d:1d:a9:55:83:94:
5d:a1:b6:22:12:15:36:af:85:e0:06:c3:d7:bb:56:
5f:c3:e7:1e:3e:2a:23:8e:37:1a:a7:40:f6:1a:4d:
73:15:2a:16:02:cf:fc:28:ff:f0:81:11:85:81:e9:
fd:dd:7d:fd:9e:c5:4c:a6:f8:ba:33:b9:a8:7a:ab:
2e:e1:7f:ab:eb:7c:39:0c:bd:2b:f1:93:56:ef:bf:
ac:09:d4:d8:57:47:6e:9b:e9:cd:ba:e8:92:0f:fc:
26:0f:c1:db:34:d4:09:02:59:30:0c:58:1a:b6:b3:
4b:4e:f7:45:5e:40:95:a1:39:57:94:21:d4:c2:b5:
4d:26:3a:64:0c:89:fc:ba:83:3a:c0:60:bf:1a:de:
6b:5b:e8:b0:42:16:6a:8b:c4:51:1a:1b:8d:ca:74:
f5:97:35:89:90:3e:1c:6c:f3:21:a2:17:04:5d:8a:
5a:90:04:e4:71:6d:62:02:dd:46:ce:44:e8:cf:84:
08:69:4b:a4:19:d1:79:4e:ff:b0:27:53:86:bf:57:
e4:0d:31:ef:9a:17:96:2d:7f:26:85:2c:50:4e:02:
1a:83:da:d8:81:63:15:af:02:ed:b7:b3:1b:a7:de:
13:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:3D:EB:B2:16:3C:64:BA:F3:63:D3:96:EA:2C:B2:57:1C:FB:91:A7
X509v3 Authority Key Identifier:
keyid:AD:BE:EB:F0:3A:93:F2:8F:DE:98:78:22:C0:4A:90:4E:7E:36:79:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rb7r8DqT8o_emHgiwEqQTn42eVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0a911a-0f34-4173-ade8-f9e471a0fa37/1/Fj3rshY8ZLrzY9OW6iyyVxz7kac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0a911a-0f34-4173-ade8-f9e471a0fa37/1/rb7r8DqT8o_emHgiwEqQTn42eVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.176.0/22
83.229.33.0/24
83.229.38.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:b2:cd:eb:a8:86:7c:c6:06:d2:d7:84:48:5d:98:ca:32:0b:
88:cb:cd:3a:16:34:b0:14:09:3d:34:20:b8:15:02:da:26:2a:
0e:1b:92:22:24:6f:e3:28:d3:c9:f2:b0:d3:f6:56:8f:d3:9b:
1b:cd:6b:51:a4:24:a2:57:46:a8:09:d5:8b:6a:5a:f8:a0:61:
82:12:6c:60:f0:b6:c6:4a:74:60:53:a7:f6:87:cf:52:2c:12:
4a:ee:6c:32:e3:2e:34:ad:99:fb:1d:67:d0:aa:94:8c:34:5b:
a6:4c:e8:ad:3d:50:58:5d:80:83:f9:54:63:eb:40:ba:82:9f:
90:37:a7:94:38:7f:08:55:4b:cc:f5:78:c1:0a:53:d2:35:1f:
3d:ec:8a:b4:b4:10:1b:b3:c1:77:e7:7d:e9:67:06:9d:20:ff:
83:8c:8b:2b:33:d6:1f:8c:ab:31:0e:a7:37:84:8a:c9:74:3c:
2d:13:4b:c7:78:84:65:06:05:ae:8a:1e:1c:b4:9d:df:1a:8e:
db:e6:59:94:19:d2:c3:a5:78:f1:c2:85:8f:a1:f8:69:93:9b:
89:1c:b1:56:80:cf:d0:a7:51:be:7a:71:03:71:7d:7f:9d:c2:
04:68:20:2b:89:3a:2d:e8:4a:05:1b:cf:3d:9f:b9:72:b7:08:
c9:8b:c2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:01 2024 by rpki-client on console-ams.rpki-client.org