Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/299984-6d7d-45e3-b6fd-bc917c9235d2/1/IF_i2bQlsSwZrR5Qa3uRlugNCqg.roa
File: IF_i2bQlsSwZrR5Qa3uRlugNCqg.roa (raw, json)
Hash identifier: e75TknHAR5WWJIycul4Qy7WNtLQ2HIXactu/x87aUuc=
Subject key identifier: 20:5F:E2:D9:B4:25:B1:2C:19:AD:1E:50:6B:7B:91:96:E8:0D:0A:A8
Certificate issuer: /CN=4bf203d6ae6698e09f255780b88accdcd94675a1
Certificate serial: 0186C0281BC4F7526B7A055C2975E1EC14BF
Authority key identifier: 4B:F2:03:D6:AE:66:98:E0:9F:25:57:80:B8:8A:CC:DC:D9:46:75:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_ID1q5mmOCfJVeAuIrM3NlGdaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/299984-6d7d-45e3-b6fd-bc917c9235d2/1/IF_i2bQlsSwZrR5Qa3uRlugNCqg.roa
Signing time: Wed 08 Mar 2023 07:38:19 +0000
ROA not before: Wed 08 Mar 2023 07:38:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60068
IP address blocks: 151.248.104.128/27 maxlen: 27
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c0:28:1b:c4:f7:52:6b:7a:05:5c:29:75:e1:ec:14:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bf203d6ae6698e09f255780b88accdcd94675a1
Validity
Not Before: Mar 8 07:38:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=205fe2d9b425b12c19ad1e506b7b9196e80d0aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ff:09:c5:26:f8:fc:36:0d:a0:7b:88:d5:f9:
eb:93:b9:28:fa:14:ea:a7:4c:d1:f4:d4:2a:83:68:
37:9d:69:88:23:7d:4a:39:b4:21:c2:a9:8a:03:37:
bf:14:2b:e3:04:c2:07:3b:88:66:e5:b9:be:2e:d5:
f9:09:56:a8:39:17:b0:89:9a:84:cd:e8:b3:b4:27:
79:f1:f5:46:65:65:be:a9:21:1c:e0:0a:9f:44:8f:
bb:39:ff:6f:50:14:eb:7d:ea:76:e3:60:9f:a1:b7:
18:8a:b3:18:8e:23:62:be:8c:c8:82:51:70:5e:69:
26:87:cf:a9:24:db:38:d1:36:d0:23:31:93:ea:8f:
82:8e:aa:e4:92:a4:ac:21:54:b1:df:c1:de:2c:67:
2b:15:5e:7f:6d:7c:20:ea:48:83:bd:f5:af:02:4d:
e2:3d:6e:03:7b:5a:5e:2a:dd:47:e7:e6:fc:ac:b8:
29:44:da:fe:63:46:08:98:41:65:c3:f5:67:cc:a7:
dd:50:b9:b3:e1:27:6a:4e:d1:a3:5a:59:ac:53:cb:
ad:c3:b8:6b:64:de:56:42:90:1d:2f:e8:41:60:d9:
d0:27:23:9c:b3:fc:1b:b8:c2:e9:e8:fa:25:3d:ac:
27:bb:5e:bb:aa:e4:b6:f3:09:3f:82:9a:f8:29:51:
da:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:5F:E2:D9:B4:25:B1:2C:19:AD:1E:50:6B:7B:91:96:E8:0D:0A:A8
X509v3 Authority Key Identifier:
keyid:4B:F2:03:D6:AE:66:98:E0:9F:25:57:80:B8:8A:CC:DC:D9:46:75:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_ID1q5mmOCfJVeAuIrM3NlGdaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/299984-6d7d-45e3-b6fd-bc917c9235d2/1/IF_i2bQlsSwZrR5Qa3uRlugNCqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/299984-6d7d-45e3-b6fd-bc917c9235d2/1/S_ID1q5mmOCfJVeAuIrM3NlGdaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.248.104.128/27
Signature Algorithm: sha256WithRSAEncryption
3f:bb:8c:34:02:f4:4f:f3:85:74:26:64:30:41:76:a6:c9:b6:
7b:96:1b:6f:87:e4:a2:cb:1d:1c:97:24:ed:6c:91:4f:92:eb:
0c:fe:5e:a2:d5:9d:57:19:ec:f6:01:f4:e8:e7:cc:da:ee:a7:
6b:a1:96:88:58:0f:ad:ac:ea:be:ed:7e:3a:fa:ea:a3:c8:ca:
73:c6:2a:64:83:b8:c3:22:c2:2b:ec:16:36:6b:a6:58:e4:0e:
eb:6d:58:33:df:b2:fd:6b:83:17:62:0d:43:84:40:f0:22:92:
1d:14:4f:4b:62:8a:b7:43:e4:7b:98:eb:d2:2a:fe:1b:7d:a4:
2a:ea:a4:f0:03:40:69:fc:c1:02:0b:59:e9:db:7f:f5:32:54:
35:0f:ae:c0:a7:bc:bb:dc:c1:3e:0b:f7:2f:51:a5:92:32:73:
b2:2a:e9:dc:85:38:af:fa:07:ec:ba:45:44:7f:e6:0c:4d:57:
e0:b4:7d:72:11:15:d1:80:14:dc:42:3d:fd:6a:25:a0:ff:37:
d7:56:f1:de:f1:04:f8:68:15:20:8e:11:53:bd:6d:5e:ee:98:
21:de:98:41:68:e3:1b:f7:1c:d1:9e:12:42:36:12:f7:43:7f:
f6:04:99:4c:f2:0d:c4:0d:45:21:27:2d:ed:fa:c5:71:c9:d8:
5f:9c:e2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:26 2024 by rpki-client on console-ams.rpki-client.org