Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/299984-6d7d-45e3-b6fd-bc917c9235d2/1/1ThCZ3JRvcsFfNAsy_0tFNDqaRk.roa
File: 1ThCZ3JRvcsFfNAsy_0tFNDqaRk.roa (raw, json)
Hash identifier: zH56thS5/4v0NvcmSgpbtf1DpzkfsGxYW5XSngO5wYg=
Subject key identifier: D5:38:42:67:72:51:BD:CB:05:7C:D0:2C:CB:FD:2D:14:D0:EA:69:19
Certificate issuer: /CN=4bf203d6ae6698e09f255780b88accdcd94675a1
Certificate serial: 0186D508DC7A46ECC8DED9B8CD0EFFCA3467
Authority key identifier: 4B:F2:03:D6:AE:66:98:E0:9F:25:57:80:B8:8A:CC:DC:D9:46:75:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_ID1q5mmOCfJVeAuIrM3NlGdaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/299984-6d7d-45e3-b6fd-bc917c9235d2/1/1ThCZ3JRvcsFfNAsy_0tFNDqaRk.roa
Signing time: Sun 12 Mar 2023 08:56:13 +0000
ROA not before: Sun 12 Mar 2023 08:56:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60068
IP address blocks: 151.248.104.96/27 maxlen: 27
151.248.104.128/27 maxlen: 27
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d5:08:dc:7a:46:ec:c8:de:d9:b8:cd:0e:ff:ca:34:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bf203d6ae6698e09f255780b88accdcd94675a1
Validity
Not Before: Mar 12 08:56:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d53842677251bdcb057cd02ccbfd2d14d0ea6919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:da:fd:d8:e0:6f:ef:f8:8f:34:fa:20:bb:e1:
50:86:62:61:a0:4c:6d:e1:c8:76:45:58:3a:6b:cd:
52:63:52:95:cf:46:7f:d7:a8:97:90:a5:e4:86:29:
8a:ea:ed:3b:98:2d:6d:03:00:82:8d:43:9e:6b:84:
12:c6:b8:9a:c0:1c:75:7f:26:e1:b9:51:96:e1:3b:
42:c3:ed:bb:b6:55:da:c1:4a:a8:cf:ab:47:c4:7a:
7f:13:85:5c:21:45:a4:d0:4a:1c:27:0c:5f:12:5b:
e2:75:b0:08:12:1a:f0:97:77:d8:91:5b:ce:ce:04:
3f:f6:7d:bb:2b:44:11:dc:9f:da:16:5f:0a:de:2f:
22:30:ae:51:63:b3:2b:88:f7:04:7d:b0:20:56:6e:
28:7d:23:bc:db:62:c6:f2:1f:5a:3a:cc:af:c6:cf:
e6:00:52:17:d8:6a:9a:26:16:1e:f3:4b:c3:ca:11:
8c:dc:19:99:f4:45:4d:45:2c:01:80:50:7a:c4:a4:
69:8b:3a:32:b4:b3:b8:d8:46:6e:ff:60:e5:63:f2:
7b:fc:05:e8:4b:fb:0f:43:c1:51:bb:17:a2:5f:a1:
32:62:fd:4e:50:9b:f6:28:2e:ff:5c:72:eb:36:e4:
d5:b5:92:a8:ab:dc:38:cc:0f:42:7e:d5:41:56:e9:
57:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:38:42:67:72:51:BD:CB:05:7C:D0:2C:CB:FD:2D:14:D0:EA:69:19
X509v3 Authority Key Identifier:
keyid:4B:F2:03:D6:AE:66:98:E0:9F:25:57:80:B8:8A:CC:DC:D9:46:75:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_ID1q5mmOCfJVeAuIrM3NlGdaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/299984-6d7d-45e3-b6fd-bc917c9235d2/1/1ThCZ3JRvcsFfNAsy_0tFNDqaRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/299984-6d7d-45e3-b6fd-bc917c9235d2/1/S_ID1q5mmOCfJVeAuIrM3NlGdaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.248.104.96-151.248.104.159
Signature Algorithm: sha256WithRSAEncryption
38:78:d2:28:9c:d1:61:7d:8d:42:4d:c5:ca:a8:83:91:41:b6:
70:2d:52:d6:2b:0b:a2:b0:d6:23:61:55:d0:53:38:93:0a:51:
9a:2e:c9:1c:af:3b:50:2a:97:8d:e8:9e:7b:1f:dc:11:af:12:
de:b6:9b:e4:2d:06:27:7e:dd:99:31:3b:32:a5:25:17:17:a5:
f1:39:64:6f:73:b8:30:e4:f9:9e:d4:39:e0:e0:84:3b:93:21:
3c:26:22:37:28:17:56:4c:f3:05:4a:27:76:0a:2c:08:67:b4:
a5:73:3a:dd:1a:94:c7:b3:55:34:e9:2e:01:5b:94:bd:9d:47:
bd:40:e3:1a:2e:cd:f3:ac:c2:06:ab:58:36:87:f8:35:90:77:
f5:25:28:6d:76:01:19:fe:57:5a:ca:99:da:41:85:40:ec:b5:
2d:c1:45:0b:13:30:c6:0a:56:e3:15:4d:de:4e:67:d6:76:69:
4a:58:99:83:a9:fe:c7:b8:25:64:9d:d8:fb:ae:29:2f:1a:53:
3e:c5:86:d1:e8:db:ca:8c:5e:c9:9f:48:b2:51:39:62:e1:c8:
b3:7d:74:95:75:2b:c3:52:d0:6f:d3:70:0e:cf:8d:a6:64:a8:
37:e0:dc:be:32:0d:4e:7a:6b:00:8b:69:dc:d2:0a:a2:99:69:
f4:9f:83:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:48 2024 by rpki-client on console-fra.rpki-client.org