Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/299984-6d7d-45e3-b6fd-bc917c9235d2/1/geHnqG8UBHEqh9m8KXVSQTgxbEU.roa
File: geHnqG8UBHEqh9m8KXVSQTgxbEU.roa (raw, json)
Hash identifier: DfHi0Jaf2cYqietC38qKCGx6q2ipxlHmBOqmadk0cWc=
Subject key identifier: 81:E1:E7:A8:6F:14:04:71:2A:87:D9:BC:29:75:52:41:38:31:6C:45
Certificate issuer: /CN=4bf203d6ae6698e09f255780b88accdcd94675a1
Certificate serial: 018CC8010CC2585E579DD7F5AF560563BFB4
Authority key identifier: 4B:F2:03:D6:AE:66:98:E0:9F:25:57:80:B8:8A:CC:DC:D9:46:75:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_ID1q5mmOCfJVeAuIrM3NlGdaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/299984-6d7d-45e3-b6fd-bc917c9235d2/1/geHnqG8UBHEqh9m8KXVSQTgxbEU.roa
Signing time: Tue 02 Jan 2024 02:29:21 +0000
ROA not before: Tue 02 Jan 2024 02:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60068
IP address blocks: 151.248.104.96/27 maxlen: 27
151.248.104.128/27 maxlen: 27
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:0c:c2:58:5e:57:9d:d7:f5:af:56:05:63:bf:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bf203d6ae6698e09f255780b88accdcd94675a1
Validity
Not Before: Jan 2 02:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=81e1e7a86f1404712a87d9bc2975524138316c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b3:9a:cf:68:a0:59:85:a6:55:51:e7:9a:12:
f4:fb:bc:30:43:3a:56:cb:9a:3d:b1:8b:7b:f2:83:
e7:ef:1e:02:d8:03:92:1f:4f:37:fe:bc:2f:22:58:
4e:13:8a:23:c6:31:35:df:67:01:60:a1:d3:e2:98:
19:0b:89:e9:68:22:aa:29:b8:37:62:5e:8f:e1:0a:
a8:b4:61:c4:4b:e4:b8:02:58:bc:f8:b5:4c:4d:e6:
5e:88:95:ff:8e:b3:3a:36:8c:e0:11:1e:61:bc:a4:
f3:c9:01:4d:36:84:8f:1a:7d:b3:6d:21:c0:eb:d2:
48:63:3b:0b:a3:2b:ef:eb:0e:58:c4:94:a3:1c:2e:
df:c4:b0:cc:28:e5:c9:11:0d:a9:ec:e7:d6:50:f5:
28:5b:a5:88:fc:e2:81:f5:6f:f8:16:f5:33:18:51:
4a:d9:7b:63:5e:17:ee:7d:07:61:70:78:68:b2:8d:
32:71:59:fa:54:62:e3:6f:da:98:2c:03:b1:a7:2d:
f1:6a:78:57:82:28:9f:47:4b:d8:58:55:8a:59:da:
60:58:5c:4c:41:1d:80:bc:52:c2:06:4c:93:b3:0d:
bb:ad:74:82:1d:61:2b:17:ef:41:27:45:ea:68:a7:
4c:bc:fe:01:91:cb:a0:98:e6:d4:c8:e9:03:6e:ca:
31:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E1:E7:A8:6F:14:04:71:2A:87:D9:BC:29:75:52:41:38:31:6C:45
X509v3 Authority Key Identifier:
keyid:4B:F2:03:D6:AE:66:98:E0:9F:25:57:80:B8:8A:CC:DC:D9:46:75:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_ID1q5mmOCfJVeAuIrM3NlGdaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/299984-6d7d-45e3-b6fd-bc917c9235d2/1/geHnqG8UBHEqh9m8KXVSQTgxbEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/299984-6d7d-45e3-b6fd-bc917c9235d2/1/S_ID1q5mmOCfJVeAuIrM3NlGdaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.248.104.96-151.248.104.159
Signature Algorithm: sha256WithRSAEncryption
97:04:94:59:56:f1:a6:8e:a6:3d:cf:dc:8b:d4:99:eb:3a:2d:
4d:3f:2f:cc:d8:06:5a:cb:f8:a6:b9:d4:ec:e0:ba:bf:cc:0d:
7c:a1:28:e6:0c:a9:6e:d1:fb:98:3e:f2:de:63:3f:c6:44:43:
c1:d3:e6:ea:a5:74:5e:a0:0b:76:be:49:27:c7:ec:36:8d:40:
bd:e3:a8:45:4d:a2:7b:53:a8:c2:c0:3b:b2:06:3c:f2:e5:4d:
7c:88:ff:ae:27:ac:60:31:0d:87:28:2f:3f:a7:cc:c3:13:ce:
1d:41:09:48:d7:01:d9:81:31:3b:ad:42:52:1e:fc:1f:2b:c9:
2a:3f:45:db:33:a8:4a:5c:3a:72:4f:5e:27:fc:ce:2f:fc:b2:
11:dc:d7:5e:0a:ad:db:c4:f8:08:91:24:67:c5:0f:0f:c7:e8:
18:1a:4e:3a:e3:b1:7f:7f:19:53:ca:ef:81:b3:ec:47:be:ab:
6a:f5:75:0a:b6:db:22:6b:54:fa:14:f1:36:96:92:07:f8:1a:
03:d6:ed:44:cc:5a:26:99:1d:7d:20:ce:79:6c:4a:67:6a:e2:
40:9a:00:e7:aa:a7:19:43:42:83:45:c6:28:60:67:c4:93:62:
f5:91:2d:5c:6c:db:20:d6:45:40:b5:21:c9:5e:67:f5:a1:ee:
33:58:e5:fb
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgISAYzIAQzCWF5Xndf1r1YFY7+0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZjIwM2Q2YWU2Njk4ZTA5ZjI1NTc4MGI4OGFjY2RjZDk0
Njc1YTEwHhcNMjQwMTAyMDIyOTIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MWUxZTdhODZmMTQwNDcxMmE4N2Q5YmMyOTc1NTI0MTM4MzE2YzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27Oaz2igWYWmVVHnmhL0+7wwQzpW
y5o9sYt78oPn7x4C2AOSH083/rwvIlhOE4ojxjE132cBYKHT4pgZC4npaCKqKbg3
Yl6P4QqotGHES+S4Ali8+LVMTeZeiJX/jrM6NozgER5hvKTzyQFNNoSPGn2zbSHA
69JIYzsLoyvv6w5YxJSjHC7fxLDMKOXJEQ2p7OfWUPUoW6WI/OKB9W/4FvUzGFFK
2XtjXhfufQdhcHhoso0ycVn6VGLjb9qYLAOxpy3xanhXgiifR0vYWFWKWdpgWFxM
QR2AvFLCBkyTsw27rXSCHWErF+9BJ0XqaKdMvP4BkcugmObUyOkDbsoxAQIDAQAB
o4ICEzCCAg8wHQYDVR0OBBYEFIHh56hvFARxKofZvCl1UkE4MWxFMB8GA1UdIwQY
MBaAFEvyA9auZpjgnyVXgLiKzNzZRnWhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU19JRDFxNW1tT0NmSlZlQXVJck0zTmxHZGFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8yOTk5ODQtNmQ3ZC00NWUzLWI2ZmQt
YmM5MTdjOTIzNWQyLzEvZ2VIbnFHOFVCSEVxaDltOEtYVlNRVGd4YkVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8yOTk5ODQtNmQ3ZC00NWUzLWI2ZmQtYmM5MTdjOTIzNWQy
LzEvU19JRDFxNW1tT0NmSlZlQXVJck0zTmxHZGFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAATAQMA4DBQWX+Ghg
AwUFl/hogDANBgkqhkiG9w0BAQsFAAOCAQEAlwSUWVbxpo6mPc/ci9SZ6zotTT8v
zNgGWsv4prnU7OC6v8wNfKEo5gypbtH7mD7y3mM/xkRDwdPm6qV0XqALdr5JJ8fs
No1AveOoRU2ie1OowsA7sgY88uVNfIj/riesYDENhygvP6fMwxPOHUEJSNcB2YEx
O61CUh78HyvJKj9F2zOoSlw6ck9eJ/zOL/yyEdzXXgqt28T4CJEkZ8UPD8foGBpO
OuOxf38ZU8rvgbPsR76ravV1CrbbImtU+hTxNpaSB/gaA9btRMxaJpkdfSDOeWxK
Z2riQJoA56qnGUNCg0XGKGBnxJNi9ZEtXGzbINZFQLUhyV5n9aHuM1jl+w==
-----END CERTIFICATE-----
Generated at Wed May 1 09:24:12 2024 by rpki-client on console-ams.rpki-client.org