Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f40253-7fd7-4426-b4d7-693c1af4043b/1/5L1n4LrhpTzJmlqs34EfLmVneRc.roa
File: 5L1n4LrhpTzJmlqs34EfLmVneRc.roa (raw, json)
Hash identifier: yxJDmmUiIM+69yqO48s9NNMbMTp1Gpt+WR4oNp0t55E=
Subject key identifier: E4:BD:67:E0:BA:E1:A5:3C:C9:9A:5A:AC:DF:81:1F:2E:65:67:79:17
Certificate issuer: /CN=55021b0d994c4b330d66b08cef0693bd32346c5e
Certificate serial: 018A463D6A6352D8422C07A1A2F29F4A7135
Authority key identifier: 55:02:1B:0D:99:4C:4B:33:0D:66:B0:8C:EF:06:93:BD:32:34:6C:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQIbDZlMSzMNZrCM7waTvTI0bF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f40253-7fd7-4426-b4d7-693c1af4043b/1/5L1n4LrhpTzJmlqs34EfLmVneRc.roa
Signing time: Wed 30 Aug 2023 11:39:04 +0000
ROA not before: Wed 30 Aug 2023 11:39:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209854
IP address blocks: 213.109.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:46:3d:6a:63:52:d8:42:2c:07:a1:a2:f2:9f:4a:71:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55021b0d994c4b330d66b08cef0693bd32346c5e
Validity
Not Before: Aug 30 11:39:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4bd67e0bae1a53cc99a5aacdf811f2e65677917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:cd:fc:1a:62:60:f4:c5:a1:3e:a7:3a:af:fb:
84:91:c2:c8:b6:78:5f:dc:5e:9e:48:47:0f:b1:1d:
f1:23:fd:ae:4b:9a:59:d0:52:49:34:89:31:31:1a:
37:27:27:5b:7d:96:78:c9:05:b1:55:02:91:e3:86:
2e:59:d5:2e:e3:bd:04:b0:5f:c5:95:79:c4:2e:cd:
82:85:0a:b8:c7:2b:c0:12:e6:fb:53:06:bb:14:4a:
b2:5e:a6:77:b4:de:80:e4:bd:4a:95:ba:f8:b2:e5:
3e:84:63:a5:81:8f:a2:e4:00:88:90:27:e6:d4:2c:
de:6d:26:6e:04:93:1b:90:82:58:5b:e8:90:33:81:
e3:20:fb:52:81:25:af:aa:6c:81:33:9b:06:6d:e5:
4f:b0:fd:c5:91:96:88:2f:97:eb:7e:90:b6:fd:6e:
a9:4d:80:2e:6b:c3:0a:fa:b5:52:14:c0:ff:c7:e1:
5f:05:8d:d1:a8:77:b8:7c:69:00:0e:31:99:a4:ff:
cd:40:e3:53:51:84:1e:f4:f7:77:f8:44:07:d4:ad:
03:e6:3f:f7:09:d6:1e:78:d1:f0:c4:34:9e:eb:8d:
75:45:9a:a9:21:fc:a4:92:40:19:e6:ac:27:5d:47:
56:29:5c:88:22:2c:93:cd:1f:63:61:9b:07:5a:54:
77:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:BD:67:E0:BA:E1:A5:3C:C9:9A:5A:AC:DF:81:1F:2E:65:67:79:17
X509v3 Authority Key Identifier:
keyid:55:02:1B:0D:99:4C:4B:33:0D:66:B0:8C:EF:06:93:BD:32:34:6C:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQIbDZlMSzMNZrCM7waTvTI0bF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f40253-7fd7-4426-b4d7-693c1af4043b/1/5L1n4LrhpTzJmlqs34EfLmVneRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f40253-7fd7-4426-b4d7-693c1af4043b/1/VQIbDZlMSzMNZrCM7waTvTI0bF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.151.0/24
Signature Algorithm: sha256WithRSAEncryption
16:a6:7a:06:79:5c:1b:82:66:c3:99:e4:6b:01:45:41:05:50:
9c:b2:28:21:70:ba:27:2d:eb:d2:6e:89:9f:8c:2b:1c:f7:e5:
84:a6:f5:6e:61:25:b7:e8:2c:a9:03:21:e0:25:68:92:98:fa:
79:04:e4:56:22:41:64:27:aa:a9:99:d7:8f:58:a8:a2:c5:ec:
d2:70:bf:c2:e4:d6:f8:2d:71:45:7c:a9:cd:6c:7d:30:dd:55:
e1:21:33:fd:12:67:89:0e:18:c3:8a:f6:10:e6:30:08:39:5a:
d9:e8:14:13:1e:03:c4:7d:70:19:3c:f5:7f:c6:f9:4e:ca:01:
89:52:ad:56:2d:70:25:36:05:a0:b3:4c:55:bf:d6:fe:ea:ff:
39:39:90:e4:d6:8d:5a:ac:bb:4d:a0:f3:70:25:83:5a:55:9c:
4a:d0:42:5a:09:1c:c1:60:11:bd:d0:a1:8e:33:c4:30:ee:17:
36:20:b4:d9:16:13:4b:f9:46:51:39:13:ee:36:7a:26:7f:ba:
b5:4c:c8:33:8f:92:fc:05:3f:d3:64:83:4a:1b:bf:ce:ab:38:
7f:bc:56:2a:ed:4d:99:5d:01:04:f3:2e:81:14:c3:3c:dd:45:
05:36:67:4a:a0:90:4e:15:81:8c:c9:c2:8b:c4:8a:3d:27:5d:
11:2d:71:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:24 2024 by rpki-client on console-fra.rpki-client.org