Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/565065-da4d-4cbe-9061-8781c4fe011f/1/OBia8BKfMEH0B9oSUmChPS3PgpQ.roa
File: OBia8BKfMEH0B9oSUmChPS3PgpQ.roa (raw, json)
Hash identifier: UTkjHvPycm6nBW6LEIJ9dSoi8CNmT/j7vDbPNXBzdvA=
Subject key identifier: 38:18:9A:F0:12:9F:30:41:F4:07:DA:12:52:60:A1:3D:2D:CF:82:94
Certificate issuer: /CN=85bcb81dcd3f29318f403b8481be44ec1ff5502e
Certificate serial: 018CC493737174C6DC40FFA3D8CB49FBA43B
Authority key identifier: 85:BC:B8:1D:CD:3F:29:31:8F:40:3B:84:81:BE:44:EC:1F:F5:50:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hby4Hc0_KTGPQDuEgb5E7B_1UC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/565065-da4d-4cbe-9061-8781c4fe011f/1/OBia8BKfMEH0B9oSUmChPS3PgpQ.roa
Signing time: Mon 01 Jan 2024 10:30:46 +0000
ROA not before: Mon 01 Jan 2024 10:30:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3190
IP address blocks: 185.90.40.0/22 maxlen: 22
5.11.0.0/21 maxlen: 21
2a00:ebc0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:73:71:74:c6:dc:40:ff:a3:d8:cb:49:fb:a4:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85bcb81dcd3f29318f403b8481be44ec1ff5502e
Validity
Not Before: Jan 1 10:30:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=38189af0129f3041f407da125260a13d2dcf8294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f3:33:2d:1f:30:cb:08:31:b0:7e:92:8d:17:
b2:c7:cc:61:8d:ff:04:19:5d:d2:17:21:9f:dc:1d:
c8:a0:fd:2e:a9:9c:10:2c:e1:f7:47:1d:28:ee:07:
5c:e2:7f:ae:8b:85:c1:05:3e:85:e0:7c:1e:4b:1f:
b8:a5:b3:d9:27:6b:15:ec:58:fc:70:a8:39:02:34:
f9:33:17:46:fe:cd:45:39:42:e6:b6:cb:74:1a:fc:
dc:4c:0a:12:58:eb:f8:5d:42:6a:5f:32:51:eb:bb:
61:36:8c:55:b7:6e:a0:40:e8:84:9e:d6:e6:2f:ab:
b6:4c:7a:48:5b:8c:16:8a:13:48:d7:9f:fe:eb:cb:
f1:8f:10:49:49:84:cb:e0:db:a4:34:d2:49:34:d7:
a9:b6:f3:3f:d9:98:bb:72:bb:37:69:0e:ec:c2:dd:
c0:e2:f1:f6:08:b6:6f:f8:ec:3c:43:0e:ea:f6:3a:
ed:a9:6d:19:8d:a2:24:31:a5:f8:81:9f:9e:d5:50:
e8:ca:5a:43:34:39:fa:5b:a5:78:7e:0b:52:f3:81:
d5:b9:7a:9f:ae:11:ce:26:7c:35:b1:7a:7c:1b:4f:
11:2e:1f:ba:92:fd:67:77:f9:b8:8e:a6:f1:5c:de:
f5:d6:04:ff:11:9d:d3:94:0e:b4:60:5a:5f:15:1b:
7e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:18:9A:F0:12:9F:30:41:F4:07:DA:12:52:60:A1:3D:2D:CF:82:94
X509v3 Authority Key Identifier:
keyid:85:BC:B8:1D:CD:3F:29:31:8F:40:3B:84:81:BE:44:EC:1F:F5:50:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hby4Hc0_KTGPQDuEgb5E7B_1UC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/565065-da4d-4cbe-9061-8781c4fe011f/1/OBia8BKfMEH0B9oSUmChPS3PgpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/565065-da4d-4cbe-9061-8781c4fe011f/1/hby4Hc0_KTGPQDuEgb5E7B_1UC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.11.0.0/21
185.90.40.0/22
IPv6:
2a00:ebc0::/32
Signature Algorithm: sha256WithRSAEncryption
8a:f4:b6:27:41:64:5e:53:37:c0:f4:6c:aa:dc:5a:6e:f3:b6:
d4:a2:d4:3f:c0:67:22:c3:1a:83:04:5d:53:2c:78:e2:a1:36:
4f:7b:ec:8c:65:83:19:3c:e5:b4:76:63:1c:a2:98:34:17:c7:
49:69:50:ae:7f:09:a8:1d:8e:4c:c4:e6:53:5d:41:f1:0a:35:
d4:27:3f:97:94:77:bc:7a:38:89:c6:3a:83:64:3a:4d:d1:6a:
e7:7a:e3:8b:9a:cf:f7:dc:e2:34:dc:a3:04:df:8a:69:34:c4:
a6:a7:89:a1:cd:1f:ae:a5:d7:14:26:c0:58:52:ef:b4:4c:22:
d5:33:45:07:0b:8d:40:12:cc:2d:91:18:6c:ca:4a:7d:75:89:
bf:12:ef:6f:3d:05:60:d3:ad:d6:93:fa:36:c7:1c:7c:f6:38:
68:5f:9a:55:89:67:7a:02:18:4d:59:c6:ee:f8:6c:fc:66:6c:
01:63:ef:4b:5a:71:d6:5f:32:f8:63:08:1e:2b:27:88:50:e4:
dc:99:91:2b:b3:ef:67:37:7d:48:da:3f:9e:9b:df:9a:3f:e0:
e8:31:2c:aa:86:8d:15:70:5c:96:11:e7:78:e3:d4:cf:8c:b6:
c8:8c:85:41:97:7a:57:fb:b4:88:8f:ed:0b:a3:16:dd:8a:62:
01:d8:f0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:25 2024 by rpki-client on console.sobornost.net