Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/26_CA1BOYTud7p-WwXGihsDm_eA.roa
File: 26_CA1BOYTud7p-WwXGihsDm_eA.roa (raw, json)
Hash identifier: oGDI4tz7yiSJmjSuRVbiVYnxN5GP7KxEXg8JBa7Uv+U=
Subject key identifier: DB:AF:C2:03:50:4E:61:3B:9D:EE:9F:96:C1:71:A2:86:C0:E6:FD:E0
Certificate issuer: /CN=0af1238100370a2c05fb06800afde6906daaf2d8
Certificate serial: 018CC42515127979D5A1882125137BF1B215
Authority key identifier: 0A:F1:23:81:00:37:0A:2C:05:FB:06:80:0A:FD:E6:90:6D:AA:F2:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/26_CA1BOYTud7p-WwXGihsDm_eA.roa
Signing time: Mon 01 Jan 2024 08:30:13 +0000
ROA not before: Mon 01 Jan 2024 08:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51682
IP address blocks: 213.232.96.0/24 maxlen: 24
213.232.96.0/23 maxlen: 23
213.232.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:15:12:79:79:d5:a1:88:21:25:13:7b:f1:b2:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af1238100370a2c05fb06800afde6906daaf2d8
Validity
Not Before: Jan 1 08:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dbafc203504e613b9dee9f96c171a286c0e6fde0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:06:23:05:04:f7:b6:6a:c6:7a:d9:d1:18:c7:
89:e3:05:91:49:ea:b6:f4:dc:70:ce:ba:38:06:62:
56:59:36:eb:e0:cb:6a:f8:57:45:ca:50:af:d1:f7:
0a:d9:c4:5b:fa:c4:9f:a8:92:30:83:ce:51:9e:a2:
c8:79:9e:b0:a8:46:7b:51:15:c2:d2:96:2f:47:bb:
42:a3:df:5e:92:32:79:be:9e:73:d2:87:42:46:0e:
ce:06:e7:2f:b5:a6:41:93:9f:14:0b:ed:13:ed:a0:
94:f3:2b:df:8c:db:56:34:9c:53:aa:52:b0:ef:90:
84:09:5b:11:01:f0:d9:aa:a7:be:cb:6b:e6:c4:ae:
88:39:13:e4:2f:47:7f:24:f6:6b:a2:ec:59:d3:b4:
27:ec:b2:6c:f8:95:2b:23:d0:e2:b1:c1:22:83:f3:
53:26:2e:0f:57:24:a4:3d:3d:98:26:60:4e:6a:1f:
9f:c4:e5:88:c4:b1:66:d4:36:c7:8e:54:71:70:b1:
bc:7e:18:f2:9e:87:67:e9:08:c4:f2:3f:d4:9b:d0:
fe:03:af:76:db:42:30:0d:1f:f6:1a:bc:d0:d4:42:
15:fc:21:a2:77:66:e5:cd:85:4d:8a:3e:cf:1d:74:
b0:6b:1b:e4:1c:86:8e:a8:42:88:29:36:c7:b8:14:
ee:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:AF:C2:03:50:4E:61:3B:9D:EE:9F:96:C1:71:A2:86:C0:E6:FD:E0
X509v3 Authority Key Identifier:
keyid:0A:F1:23:81:00:37:0A:2C:05:FB:06:80:0A:FD:E6:90:6D:AA:F2:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/26_CA1BOYTud7p-WwXGihsDm_eA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.232.96.0/23
Signature Algorithm: sha256WithRSAEncryption
02:fb:bd:af:eb:83:1e:d8:a7:8b:4d:9f:ea:31:c3:66:f6:3a:
ce:9f:ae:01:81:19:9c:43:6d:ec:b9:87:75:36:b7:75:3a:97:
11:57:1c:74:69:bb:28:0e:be:c1:8a:eb:f1:2d:ec:33:ff:9b:
68:aa:97:1a:b5:e8:8e:e7:2c:02:5a:d7:15:de:3e:28:3c:16:
cb:ea:83:4a:6a:67:8a:67:b6:93:72:d4:c0:64:cb:31:0f:82:
33:6b:76:9e:f1:30:c5:4e:c0:f8:3d:49:8e:5d:2b:34:9b:f4:
63:4e:73:21:59:9f:f1:d8:3d:63:69:99:d0:0b:e5:35:54:be:
2e:a5:9c:7e:eb:e6:5c:63:da:61:c5:1d:1d:a6:b3:d3:8a:d7:
dc:1c:57:98:14:80:08:e5:1a:ca:38:eb:09:7c:e4:14:8f:fd:
ce:01:b6:9b:13:45:21:a9:d6:92:34:6e:04:9c:47:11:ca:78:
14:3d:88:0a:b4:fc:6d:7e:73:fe:53:62:05:2c:d7:12:30:f3:
ef:e9:e9:c0:1a:67:db:cd:99:57:10:e0:ba:3a:ad:02:c8:a2:
26:0d:3a:31:9a:80:b3:01:c8:1e:dd:4a:bd:64:b7:17:a6:69:
02:4d:40:67:4f:62:f7:d2:6b:74:5a:e5:ee:be:27:43:ca:8d:
28:18:85:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:28 2024 by rpki-client on console.sobornost.net