Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/swObGFuLgOeiDUBMaE7S06l-Okk.roa
File: swObGFuLgOeiDUBMaE7S06l-Okk.roa (raw, json)
Hash identifier: OI0+ZGqTWmjdFsIFvwfAkMvvOp7hpbDT158wqKbRrDI=
Subject key identifier: B3:03:9B:18:5B:8B:80:E7:A2:0D:40:4C:68:4E:D2:D3:A9:7E:3A:49
Certificate issuer: /CN=3ef46116a11f11f51fc9a1d225a0bfcefdbed786
Certificate serial: 018CC8DF6C321E0E50E17F08A1BDD828E82E
Authority key identifier: 3E:F4:61:16:A1:1F:11:F5:1F:C9:A1:D2:25:A0:BF:CE:FD:BE:D7:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvRhFqEfEfUfyaHSJaC_zv2-14Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/swObGFuLgOeiDUBMaE7S06l-Okk.roa
Signing time: Tue 02 Jan 2024 06:32:14 +0000
ROA not before: Tue 02 Jan 2024 06:32:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 4755
IP address blocks: 185.132.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:6c:32:1e:0e:50:e1:7f:08:a1:bd:d8:28:e8:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ef46116a11f11f51fc9a1d225a0bfcefdbed786
Validity
Not Before: Jan 2 06:32:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b3039b185b8b80e7a20d404c684ed2d3a97e3a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e3:23:bd:fd:a7:dc:a9:92:1d:48:57:46:87:
47:51:57:b7:56:e4:47:d2:ba:2b:97:3d:fd:05:9d:
42:c0:30:66:3f:2f:8e:60:85:51:c2:23:df:a6:21:
ef:df:b2:ed:d6:91:97:bd:fc:93:7e:bd:99:93:34:
53:ba:f4:7c:6c:91:01:2c:73:ee:b6:62:78:4a:9b:
21:45:fb:ce:52:f7:1a:fd:0f:88:ce:ac:6b:fb:f8:
12:9a:a7:d4:4f:a6:c2:33:c3:92:50:50:a4:12:7d:
32:63:e7:83:a6:41:dc:de:4c:f3:f3:63:70:4e:c4:
92:38:6f:31:ee:c2:19:7c:e3:47:e0:5a:84:54:ac:
c0:0c:c0:4c:32:75:55:4f:84:a2:ff:3c:23:20:8b:
b7:87:d6:0e:8b:94:e2:9d:9b:47:aa:ae:08:f0:24:
6b:84:96:bd:f3:50:3e:b1:31:6f:38:32:3c:28:24:
10:5b:75:70:4b:88:65:ca:3b:4a:0f:7e:b5:60:1c:
e1:d6:2d:7e:3a:52:08:6e:95:62:e7:8f:c1:c9:ee:
de:0f:5a:5c:45:2b:fd:59:d6:4c:b1:41:b7:ac:14:
cd:bb:6b:7b:23:9c:bb:8d:02:f5:20:6a:75:0b:dd:
b0:92:be:8d:73:c2:50:0e:48:86:2b:d7:29:21:32:
2f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:03:9B:18:5B:8B:80:E7:A2:0D:40:4C:68:4E:D2:D3:A9:7E:3A:49
X509v3 Authority Key Identifier:
keyid:3E:F4:61:16:A1:1F:11:F5:1F:C9:A1:D2:25:A0:BF:CE:FD:BE:D7:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvRhFqEfEfUfyaHSJaC_zv2-14Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/swObGFuLgOeiDUBMaE7S06l-Okk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.132.148.0/24
Signature Algorithm: sha256WithRSAEncryption
65:14:66:88:5c:e9:15:99:d9:bf:a9:ec:03:12:5d:91:d9:a5:
3a:80:dd:d6:69:db:8b:f0:2f:8c:ee:f2:16:61:0c:54:c0:8f:
66:17:23:19:ae:cd:fa:11:b1:fc:e3:64:01:f6:13:b3:ee:74:
3c:9a:da:ae:4e:2e:3c:0e:4f:87:18:92:ff:14:2f:87:5d:4f:
7e:32:55:33:7e:df:a4:b8:9f:67:87:cb:7c:e1:c8:f6:e7:78:
ed:44:c7:c9:5c:73:32:e9:7b:6d:28:88:85:3e:59:4b:f9:e5:
72:94:3e:19:f1:c8:31:87:b3:ea:0a:98:4f:2c:6f:09:c1:35:
04:76:19:58:32:c4:74:42:59:e7:22:61:39:eb:03:6c:39:a5:
a4:3f:e4:1a:13:c3:c9:41:9b:af:d6:8b:cf:af:63:a0:87:14:
32:c0:11:28:dc:d3:6f:73:08:67:68:da:ff:00:c7:e7:c0:67:
d5:65:da:64:56:d2:e1:28:98:0b:0e:ed:6a:80:cc:b2:d5:d1:
5f:46:3a:e6:04:2b:1c:90:3e:7f:81:83:65:73:eb:f0:c5:b9:
34:71:33:e7:a3:0a:ea:20:89:9c:bb:84:a4:c4:e8:6d:ae:fa:
17:52:1e:5c:5d:ef:3c:75:1e:43:7c:de:e9:01:eb:ee:af:32:
3d:c5:f9:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:23 2024 by rpki-client on console.sobornost.net