Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/93b0f3-c21f-45f4-81f8-b95a9d173cb7/1/grS7nG9l_T4p6WYXOwZijUSzL94.roa
File: grS7nG9l_T4p6WYXOwZijUSzL94.roa (raw, json)
Hash identifier: PKwMf5uzcRtnCpMFxJxg+lfhwAdkhKsvopIK2NNn1Cw=
Subject key identifier: 82:B4:BB:9C:6F:65:FD:3E:29:E9:66:17:3B:06:62:8D:44:B3:2F:DE
Certificate issuer: /CN=b4668c6cd8c40ddf93c30a7669e30f6b50c183c3
Certificate serial: 01856EEFCC00F37DDB4155E0F54CDF4D5337
Authority key identifier: B4:66:8C:6C:D8:C4:0D:DF:93:C3:0A:76:69:E3:0F:6B:50:C1:83:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGaMbNjEDd-Twwp2aeMPa1DBg8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/93b0f3-c21f-45f4-81f8-b95a9d173cb7/1/grS7nG9l_T4p6WYXOwZijUSzL94.roa
Signing time: Sun 01 Jan 2023 20:04:47 +0000
ROA not before: Sun 01 Jan 2023 20:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204727
IP address blocks: 151.248.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:ef:cc:00:f3:7d:db:41:55:e0:f5:4c:df:4d:53:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4668c6cd8c40ddf93c30a7669e30f6b50c183c3
Validity
Not Before: Jan 1 20:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82b4bb9c6f65fd3e29e966173b06628d44b32fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e2:82:ae:4a:da:dd:4c:80:55:66:92:a9:4d:
e6:ff:05:00:ce:48:be:af:cc:52:67:48:d4:4a:bd:
81:ce:58:37:30:e9:4a:1b:64:4f:28:c1:b8:ec:ef:
65:0f:79:01:6e:3f:78:cd:3b:0d:f0:56:b0:7b:19:
46:a0:cb:da:64:f7:59:dc:40:7b:ac:ba:71:57:93:
62:f6:4c:1b:ed:ae:58:a9:52:bb:dc:dc:83:c4:2a:
2b:5e:33:ee:dd:c6:bd:97:6d:cf:0c:3d:d3:82:18:
fe:f6:6d:d5:4d:50:a5:fb:02:c8:78:f6:73:1e:ed:
b8:33:42:88:18:1c:cb:fc:dc:1f:17:e7:c1:68:e2:
a3:a9:14:a1:73:ee:25:9e:b5:6c:ad:98:f6:39:f2:
2e:53:44:c3:8a:9e:27:20:bb:e0:4f:01:35:e7:52:
4f:16:c5:23:c8:e2:49:cd:ba:94:35:06:84:05:98:
46:6e:c1:2b:18:29:ee:87:4c:18:c1:73:64:14:fc:
0f:74:fb:bb:1d:ba:de:80:05:67:ba:78:58:42:db:
73:71:34:96:fa:c8:7b:29:1d:61:23:19:ad:4d:b5:
29:ef:b4:4c:93:df:4c:a2:e3:2f:c9:38:fc:75:0f:
7d:b3:bb:2f:99:34:7d:ee:bc:de:bc:9f:ed:b5:e1:
20:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B4:BB:9C:6F:65:FD:3E:29:E9:66:17:3B:06:62:8D:44:B3:2F:DE
X509v3 Authority Key Identifier:
keyid:B4:66:8C:6C:D8:C4:0D:DF:93:C3:0A:76:69:E3:0F:6B:50:C1:83:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGaMbNjEDd-Twwp2aeMPa1DBg8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/93b0f3-c21f-45f4-81f8-b95a9d173cb7/1/grS7nG9l_T4p6WYXOwZijUSzL94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/93b0f3-c21f-45f4-81f8-b95a9d173cb7/1/tGaMbNjEDd-Twwp2aeMPa1DBg8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.248.18.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:db:ba:8b:a1:6d:b3:78:e2:39:e9:ac:f1:99:fb:11:9a:0a:
ac:a6:14:a4:eb:e7:0c:a4:fe:98:8f:31:88:b8:b9:f0:6e:c6:
ee:20:cc:78:b9:10:cf:e8:ad:03:a7:f0:fe:b8:f2:00:5c:a5:
5c:b7:05:34:c4:2e:6a:72:c2:b0:02:61:a9:46:0b:41:1d:a4:
21:4f:b7:1e:52:9f:b9:08:25:d0:f3:c2:6d:b8:26:4a:d6:6c:
0f:b7:c9:02:1f:20:39:54:a8:ce:c8:f5:29:c0:51:bb:7a:f6:
e1:ef:93:b4:34:ac:d2:54:95:b4:7f:c1:77:bf:eb:5f:40:2e:
6a:16:7e:dc:1d:87:c8:57:70:ad:fd:8d:8b:4a:12:86:51:16:
d6:a4:f0:3a:b0:01:5b:6c:4c:b1:31:ef:f7:2d:c9:20:be:d4:
2c:27:a5:43:ba:75:65:55:0e:06:5d:5d:42:e8:08:92:37:56:
ef:32:dd:b2:9d:46:6e:ff:ea:1c:2b:01:24:73:a3:fa:25:e8:
43:cc:d5:d9:53:22:9f:0d:ab:9a:ef:28:b4:69:87:70:a6:72:
22:3f:af:80:4a:a7:8a:86:01:df:14:d8:99:83:af:ea:5d:f4:
78:f8:e6:4f:19:b6:aa:09:0b:a1:0c:0f:a9:1f:d2:0d:fe:38:
1a:b1:91:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:49 2024 by rpki-client on console-fra.rpki-client.org