Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/OzBeM1BsCAhOKy9AcEgwozyqKG8.roa
File: OzBeM1BsCAhOKy9AcEgwozyqKG8.roa (raw, json)
Hash identifier: RT+NFo9EqIPyvxYk7kL/89zqFLt9f0rUFGPuOuOZtVw=
Subject key identifier: 3B:30:5E:33:50:6C:08:08:4E:2B:2F:40:70:48:30:A3:3C:AA:28:6F
Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial: 018CC6B892B4FBE6571C62A91E325E5108F3
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/OzBeM1BsCAhOKy9AcEgwozyqKG8.roa
Signing time: Mon 01 Jan 2024 20:30:34 +0000
ROA not before: Mon 01 Jan 2024 20:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208511
IP address blocks: 213.108.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:92:b4:fb:e6:57:1c:62:a9:1e:32:5e:51:08:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
Validity
Not Before: Jan 1 20:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3b305e33506c08084e2b2f40704830a33caa286f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:1f:97:ec:41:b2:08:4e:92:28:54:05:a9:09:
3e:68:4c:24:3c:de:2e:f3:2c:ac:44:2d:a2:9c:d4:
c5:7e:09:84:67:b5:41:3d:14:3b:b9:19:47:35:08:
e3:ff:c2:2b:1f:b2:5f:b7:a0:fb:69:02:92:b5:5d:
b7:9a:e4:bb:ad:89:48:57:6c:79:48:87:7f:2b:51:
5d:5b:34:7d:cc:64:e1:09:bc:36:76:3b:8f:ec:63:
05:8e:55:96:57:4d:bd:d2:f0:f0:ad:a3:4f:e0:c4:
26:11:73:0f:f4:72:01:9f:bb:f5:71:11:6e:41:f5:
42:9f:dd:7d:ad:61:2a:c5:92:2e:88:a0:ff:96:a9:
58:fd:76:cd:13:61:cb:91:9d:cc:61:0c:28:4d:13:
af:48:02:3a:27:c0:a7:c5:9e:66:50:77:c6:2c:04:
fd:57:c9:e5:06:d6:8c:01:d9:77:46:85:c8:23:6d:
f1:cd:ba:3f:c3:c7:86:b3:5f:3c:c7:39:21:d9:d0:
38:31:21:26:48:92:b8:27:7b:0a:57:ee:f8:fe:b9:
e1:eb:3e:f3:b3:cf:da:48:94:49:2f:21:58:ae:cd:
8e:3f:5b:b7:89:ab:03:89:2e:8f:92:f1:fc:93:0e:
cc:d8:1c:4d:c9:b1:0e:1a:ec:d3:78:83:a4:eb:47:
ec:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:30:5E:33:50:6C:08:08:4E:2B:2F:40:70:48:30:A3:3C:AA:28:6F
X509v3 Authority Key Identifier:
keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/OzBeM1BsCAhOKy9AcEgwozyqKG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.108.32.0/24
Signature Algorithm: sha256WithRSAEncryption
44:9e:8a:cc:eb:1c:03:b8:73:20:e8:45:5f:1d:a7:3e:60:0f:
16:f6:8b:37:f9:e6:94:be:f4:f7:f2:02:b9:99:aa:c7:1c:77:
a0:46:22:ae:d6:41:75:1e:8c:45:1b:76:5c:30:e6:46:8e:b3:
bd:b9:c4:97:f2:74:a9:15:52:d6:84:80:6d:54:fa:81:f5:46:
d1:d3:49:d8:f3:81:06:bd:7a:a5:dd:31:bd:ab:88:fa:94:ac:
53:4f:14:fe:c5:6f:63:0c:90:07:e5:be:d2:08:ff:7b:94:6e:
ff:21:81:20:91:51:fd:d9:a3:05:0c:76:b0:ea:ce:15:61:0a:
53:19:30:2e:ae:4b:15:7f:2f:85:82:6a:93:73:ba:bc:7a:62:
67:35:28:be:a1:44:45:89:b1:32:04:fa:c8:65:40:3f:69:89:
97:11:44:14:0d:04:72:df:de:fb:b6:b8:e4:57:da:2e:6e:cb:
e6:67:f6:bc:15:0c:7b:f7:f8:1f:47:eb:5f:d2:8d:c5:0d:a7:
6b:cc:67:46:52:86:a7:87:ab:bd:53:17:9c:56:03:c7:06:08:
bb:33:bc:d4:d8:51:cd:6d:0d:2d:a6:f4:7c:15:13:4c:c7:cf:
77:1c:d1:3f:99:36:ea:f3:ae:8f:d0:a5:15:81:b2:33:8f:e1:
f0:fb:6d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:00 2024 by rpki-client on console.sobornost.net