Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/oeb-db2SZVgYrdq_K_CSPbLK7EY.roa
File: oeb-db2SZVgYrdq_K_CSPbLK7EY.roa (raw, json)
Hash identifier: lUFvk3KZEZSjZg+LmuVQ/8DnhdStd9ShFIrnOTVEt50=
Subject key identifier: A1:E6:FE:75:BD:92:65:58:18:AD:DA:BF:2B:F0:92:3D:B2:CA:EC:46
Certificate issuer: /CN=397d9f3dbfc365332e282bd176a68075446d1d1b
Certificate serial: 0191BD19AECCDDF1B2BCAAD8C351602DC487
Authority key identifier: 39:7D:9F:3D:BF:C3:65:33:2E:28:2B:D1:76:A6:80:75:44:6D:1D:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OX2fPb_DZTMuKCvRdqaAdURtHRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/oeb-db2SZVgYrdq_K_CSPbLK7EY.roa
Signing time: Wed 04 Sep 2024 12:54:22 +0000
ROA not before: Wed 04 Sep 2024 12:54:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210172
IP address blocks: 185.218.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:bd:19:ae:cc:dd:f1:b2:bc:aa:d8:c3:51:60:2d:c4:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397d9f3dbfc365332e282bd176a68075446d1d1b
Validity
Not Before: Sep 4 12:54:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a1e6fe75bd92655818addabf2bf0923db2caec46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4b:36:b2:d1:0a:fd:52:65:66:60:ef:ae:0c:
7a:21:38:d5:d6:19:c7:81:86:90:d1:f1:4f:e9:62:
86:c0:6e:74:43:6d:7c:49:57:af:1c:fb:6c:04:4d:
9e:e3:60:35:38:78:da:1a:de:b9:84:8a:66:d2:42:
01:0a:c6:5c:2e:0d:ff:fb:bd:c5:dc:e9:f8:33:c4:
9e:a7:89:3d:4e:0f:6f:da:1f:20:e6:5c:6e:96:23:
08:12:26:f1:c2:ed:2d:a6:c8:ba:64:9e:91:76:10:
9f:c2:b2:f3:e3:1a:d6:66:35:5c:cc:8d:a9:a3:c3:
8d:99:04:65:ed:e7:fc:5b:57:65:73:f4:c1:b7:a2:
eb:46:a9:76:8c:9e:8c:68:17:67:c9:35:ed:a6:35:
80:94:08:55:ac:f1:0f:27:15:90:71:4a:a6:60:c6:
7b:a6:5d:ea:81:71:38:17:15:99:ae:d5:df:12:07:
ae:61:7a:5c:52:6e:08:9d:d8:4f:fd:9e:05:2d:ac:
c1:35:17:0d:04:79:55:57:23:fa:38:5c:70:08:80:
b7:44:45:84:52:36:cb:96:cb:f4:e8:e0:21:64:4a:
4c:40:46:ed:e4:8b:e1:28:7f:52:c9:1f:e3:a3:00:
b1:08:c9:e5:98:24:29:e4:4a:d2:82:24:36:32:78:
25:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E6:FE:75:BD:92:65:58:18:AD:DA:BF:2B:F0:92:3D:B2:CA:EC:46
X509v3 Authority Key Identifier:
keyid:39:7D:9F:3D:BF:C3:65:33:2E:28:2B:D1:76:A6:80:75:44:6D:1D:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OX2fPb_DZTMuKCvRdqaAdURtHRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/oeb-db2SZVgYrdq_K_CSPbLK7EY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/af2f8f-1212-4943-bd0c-d86ab2fe7648/1/OX2fPb_DZTMuKCvRdqaAdURtHRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.104.0/24
Signature Algorithm: sha256WithRSAEncryption
39:cf:63:e2:93:68:16:89:5a:9b:8d:3a:7e:a1:f3:88:10:0c:
11:05:3d:74:f6:96:5e:fa:2b:68:b7:de:de:91:29:d9:83:72:
7c:38:37:90:fe:c2:bd:5c:a7:20:8b:40:c5:13:8f:99:f3:2c:
2f:8d:3e:19:6b:4c:a6:6c:1d:cc:b4:14:d6:d2:91:1d:62:6e:
bb:cc:10:76:e1:28:77:35:7a:f7:7e:75:a1:22:43:db:62:16:
12:68:c1:aa:f5:58:8f:af:b7:41:12:ea:33:41:fe:ce:aa:ed:
38:c8:52:8b:29:8b:dd:8f:db:16:34:a1:1f:ca:0f:99:fa:58:
00:d1:38:b7:bd:c6:7b:1f:72:af:c7:91:90:44:16:aa:34:c4:
4f:49:5c:d0:d3:49:23:d5:2c:4f:31:86:22:94:2e:d6:fb:be:
63:5a:6d:b6:99:55:68:4f:50:c6:6b:d6:60:e8:11:5f:b4:58:
3e:8d:a9:f1:59:ea:c3:62:37:bb:0f:d0:b6:6e:13:30:2f:5f:
a6:2a:a2:20:86:38:a3:ec:d6:6b:73:cc:18:3b:7a:37:f0:cc:
c7:2f:e8:a8:07:ee:15:83:2f:d4:f2:a3:aa:84:54:08:7d:18:
14:8a:c5:54:6f:8b:55:ca:e7:85:fa:0e:1c:c0:ab:65:77:42:
9f:a2:5e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:25 2024 by rpki-client on console.sobornost.net