Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/Ob67TIZQPHFi-hvwCsv8L8WmKQo.roa
File: Ob67TIZQPHFi-hvwCsv8L8WmKQo.roa (raw, json)
Hash identifier: /N0O7mr1pSTXE+oYIWJaZ6I3KtrWl/C3ej+oIy8HiJQ=
Subject key identifier: 39:BE:BB:4C:86:50:3C:71:62:FA:1B:F0:0A:CB:FC:2F:C5:A6:29:0A
Certificate issuer: /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial: 01936CBFCEEC168E3174465DC957EBC65A4C
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/Ob67TIZQPHFi-hvwCsv8L8WmKQo.roa
Signing time: Wed 27 Nov 2024 08:32:09 +0000
ROA not before: Wed 27 Nov 2024 08:32:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9304
IP address blocks: 64.190.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6c:bf:ce:ec:16:8e:31:74:46:5d:c9:57:eb:c6:5a:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Validity
Not Before: Nov 27 08:32:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=39bebb4c86503c7162fa1bf00acbfc2fc5a6290a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:51:4b:4f:91:85:4c:97:d6:2d:e2:b3:b2:d8:
6e:c8:ec:6b:b8:ed:08:a7:92:10:66:a1:d9:83:39:
86:40:1e:d6:de:13:68:02:87:7b:46:e9:25:8a:65:
1e:8b:3a:fc:b9:e9:03:9e:81:1a:c7:c6:3a:b2:5c:
34:ba:f6:24:83:8a:50:09:05:bf:f6:77:05:1e:ec:
65:99:ee:31:8f:95:1b:dc:07:14:e3:66:14:08:24:
ee:57:37:60:d7:a2:88:fb:1f:4a:9e:af:32:20:a5:
36:fa:9d:76:e2:45:c1:9a:f3:c3:01:ee:44:a0:a5:
e0:cb:a2:71:f8:37:8b:c0:b4:9e:7a:15:84:6e:8b:
35:e1:a7:08:f1:43:a4:21:f0:cb:41:ef:5b:5a:85:
0b:b9:d2:b2:a7:e5:68:de:29:d5:6c:14:cd:d6:b0:
57:b9:90:c6:0b:36:51:64:96:33:54:8d:58:60:b3:
6e:c8:81:e5:fd:31:fc:b3:3b:f7:d9:f4:a7:a0:b4:
39:52:c3:50:60:cc:80:3b:b9:c5:fa:7c:f6:f9:ab:
7f:44:92:c1:9c:be:77:84:4b:00:64:20:9d:5a:8d:
ee:44:10:e5:32:47:8a:52:3c:55:b3:6a:6f:4d:b5:
04:9e:5e:6e:e1:10:91:25:98:3d:11:87:8c:4c:79:
42:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:BE:BB:4C:86:50:3C:71:62:FA:1B:F0:0A:CB:FC:2F:C5:A6:29:0A
X509v3 Authority Key Identifier:
keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/Ob67TIZQPHFi-hvwCsv8L8WmKQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.190.139.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:87:91:ee:06:c9:8a:a0:43:59:e7:1b:ea:a2:2d:90:7e:19:
3d:23:b3:fc:34:40:83:46:96:dd:7e:9f:e1:d2:dc:73:22:73:
f1:e4:4b:3f:7a:54:59:66:ee:cd:18:50:6a:5c:d2:9c:d1:54:
4d:af:17:91:53:67:04:b5:be:6b:43:82:c3:32:c4:c2:7c:94:
0c:b5:22:01:03:54:54:85:73:54:16:1c:f1:83:82:eb:cd:fa:
1a:9c:ba:72:9b:9b:0c:d1:71:59:57:09:6a:6e:aa:ec:d9:25:
c3:0f:d8:5b:39:1f:32:58:23:c1:04:02:c5:4f:21:6e:a2:07:
8d:65:91:49:04:7d:6f:62:8c:75:16:96:66:a3:ae:9c:51:80:
cf:84:61:0c:d1:81:53:bd:ae:db:6c:18:69:6a:5b:9a:8e:cf:
9d:62:36:01:62:56:e2:e8:c3:55:dc:50:d5:ca:93:33:3b:39:
85:3c:75:76:8a:61:17:6c:26:a8:52:67:a0:71:04:de:58:96:
74:c8:12:22:7a:8d:c2:b4:5e:42:b7:30:ae:d5:69:68:e6:9d:
c2:01:ee:1c:76:50:98:94:87:2b:69:ae:82:a0:52:4a:f5:ba:
f3:00:d6:8d:09:17:38:fd:68:d0:8b:83:cb:77:11:89:c7:4f:
7c:ee:41:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:30 2024 by rpki-client on console.sobornost.net