Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/2e8cf1-3960-4ee3-870e-d55cdba9d5bb/1/037vT4jxGiq_lZiWCd0tStUOOFA.roa
File: 037vT4jxGiq_lZiWCd0tStUOOFA.roa (raw, json)
Hash identifier: LOhI8mdlfneev3f0wd8yUvWC0+MPCK9oHH+AWerIAOQ=
Subject key identifier: D3:7E:EF:4F:88:F1:1A:2A:BF:95:98:96:09:DD:2D:4A:D5:0E:38:50
Certificate issuer: /CN=bd97f445e6611f7893b7cc8be580ca0ee2e91022
Certificate serial: 1C603F60
Authority key identifier: BD:97:F4:45:E6:61:1F:78:93:B7:CC:8B:E5:80:CA:0E:E2:E9:10:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZf0ReZhH3iTt8yL5YDKDuLpECI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/2e8cf1-3960-4ee3-870e-d55cdba9d5bb/1/037vT4jxGiq_lZiWCd0tStUOOFA.roa
Signing time: Sat 01 Jan 2022 08:01:55 +0000
ROA not before: Sat 01 Jan 2022 08:01:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59547
IP address blocks: 151.248.48.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 476069728 (0x1c603f60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd97f445e6611f7893b7cc8be580ca0ee2e91022
Validity
Not Before: Jan 1 08:01:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d37eef4f88f11a2abf95989609dd2d4ad50e3850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:69:50:03:d8:63:5a:47:51:2c:3f:f7:12:5d:
00:21:5e:89:2e:21:1c:b7:74:db:94:03:33:37:55:
1e:ad:a2:44:50:49:65:5b:6a:88:78:1a:67:aa:20:
2c:6d:eb:9a:6a:34:54:a5:74:c2:a0:f2:6a:72:be:
ed:58:59:11:e1:7f:a0:ee:33:49:ee:03:f0:07:a0:
0b:be:6f:c1:4e:1a:6d:86:26:e5:40:db:2a:74:ff:
c8:56:41:73:a9:70:c8:20:40:cd:87:a7:ca:f4:eb:
14:af:de:d2:69:2d:66:c0:4e:10:10:96:85:cd:b6:
d5:28:77:1d:b2:2f:3a:c2:60:4d:d3:7b:d7:96:16:
9e:26:5b:83:7d:38:5b:db:55:3a:66:58:f4:da:b2:
aa:54:a9:05:1b:af:e6:63:15:1d:49:03:a3:a1:e6:
be:39:cd:5f:61:ff:28:d3:f8:5e:07:83:f1:e6:04:
5e:fe:a3:89:ba:e0:98:b3:03:60:1f:a7:24:2e:b9:
17:df:37:19:35:a0:fb:80:d1:c1:94:b2:a6:2e:fe:
e8:3a:aa:25:52:26:a6:82:bb:3c:e5:a1:2c:13:0d:
54:a3:b6:1f:cc:dc:85:79:21:1f:da:99:6f:48:d0:
b1:1e:db:04:1b:bd:22:15:46:e6:05:11:7b:45:77:
14:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:7E:EF:4F:88:F1:1A:2A:BF:95:98:96:09:DD:2D:4A:D5:0E:38:50
X509v3 Authority Key Identifier:
keyid:BD:97:F4:45:E6:61:1F:78:93:B7:CC:8B:E5:80:CA:0E:E2:E9:10:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZf0ReZhH3iTt8yL5YDKDuLpECI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/2e8cf1-3960-4ee3-870e-d55cdba9d5bb/1/037vT4jxGiq_lZiWCd0tStUOOFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/2e8cf1-3960-4ee3-870e-d55cdba9d5bb/1/vZf0ReZhH3iTt8yL5YDKDuLpECI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.248.48.0/21
Signature Algorithm: sha256WithRSAEncryption
4c:33:37:d9:16:8d:f1:ee:5f:f6:92:a9:1f:a0:fb:7b:5e:00:
91:0a:3b:c1:e5:d7:d0:8b:ec:79:57:c8:be:95:ed:52:e2:fa:
6a:24:46:a4:05:03:3b:1f:c1:85:66:e2:13:01:9c:3a:47:d7:
6d:3e:32:2b:35:f7:8d:19:d6:62:d4:15:b0:c1:c1:55:f2:65:
46:df:18:ee:f5:c3:4c:4b:3b:cd:75:e9:0c:d8:c8:42:3b:fe:
a7:30:04:26:05:58:11:06:d7:6e:f5:21:45:cf:8f:22:6c:63:
7e:92:bb:0f:8b:46:d1:1d:2d:72:e9:31:97:ba:a7:ce:33:bc:
bc:3a:f9:09:8a:35:e8:6e:6c:4b:39:4b:3e:88:6e:55:f4:a0:
f0:66:ee:7a:91:6b:7d:b5:e1:c6:9c:eb:1f:40:34:05:16:db:
87:8e:8b:5e:32:68:10:65:6f:52:af:af:6a:4e:49:b0:4a:34:
17:30:09:e3:cb:5e:31:53:d1:dc:14:e4:59:d2:34:02:97:b4:
89:38:f0:9b:e9:01:64:83:40:3a:eb:d6:e1:0b:94:2b:10:bf:
b5:e5:7e:88:45:22:e5:77:ae:d6:1d:42:7b:73:6d:ea:3b:e9:
d0:c8:a2:a6:e3:c9:51:d3:6c:6a:ff:4d:8d:d9:92:e5:c0:8f:
7d:bd:96:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:00 2024 by rpki-client on console-ams.rpki-client.org