Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/6378bb-52ce-46af-959c-a9054928b544/1/SC2U3RjtOTEevPflXlMHUn0bkD4.roa
File: SC2U3RjtOTEevPflXlMHUn0bkD4.roa (raw, json)
Hash identifier: JbmqT1i1wjLtGBzmy4bfghjunV4N2wGXbbBzPyasfwE=
Subject key identifier: 48:2D:94:DD:18:ED:39:31:1E:BC:F7:E5:5E:53:07:52:7D:1B:90:3E
Certificate issuer: /CN=f6450d2d0213ee4c9f3181efeeb2d663fe0d365b
Certificate serial: 018CC501018EE35689D72936AEA07FB0844A
Authority key identifier: F6:45:0D:2D:02:13:EE:4C:9F:31:81:EF:EE:B2:D6:63:FE:0D:36:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kUNLQIT7kyfMYHv7rLWY_4NNls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/6378bb-52ce-46af-959c-a9054928b544/1/SC2U3RjtOTEevPflXlMHUn0bkD4.roa
Signing time: Mon 01 Jan 2024 12:30:26 +0000
ROA not before: Mon 01 Jan 2024 12:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212609
IP address blocks: 194.15.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:01:8e:e3:56:89:d7:29:36:ae:a0:7f:b0:84:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6450d2d0213ee4c9f3181efeeb2d663fe0d365b
Validity
Not Before: Jan 1 12:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=482d94dd18ed39311ebcf7e55e5307527d1b903e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3d:00:f2:f2:e0:fc:66:64:1b:f5:71:0d:e3:
36:23:79:34:14:52:9c:71:12:58:77:30:d8:26:60:
0e:9e:e5:fe:64:49:36:0a:84:0f:e6:dc:9b:6f:fa:
7f:b8:4f:74:16:fe:25:3e:21:d9:0f:31:59:b1:2f:
7e:bc:34:46:3d:4f:b2:41:18:c6:0b:9f:76:36:bc:
ff:71:0b:36:d1:3e:eb:4a:a5:81:d5:91:bb:6b:62:
11:bf:f0:54:3f:25:34:2b:3b:ba:45:cc:e1:3e:8d:
35:c4:bd:b7:66:8b:f4:82:7c:19:a0:f7:2a:cb:73:
1d:82:9b:71:62:c9:8f:8f:71:97:79:fc:ec:96:5c:
74:ec:0b:24:ab:89:43:ee:77:74:29:c7:57:6b:0b:
71:28:bb:16:81:d6:d8:98:91:da:1c:fd:9e:69:ec:
3c:0a:7b:bd:68:3e:d3:31:50:26:89:9e:d3:75:4b:
de:78:56:ca:3d:4f:48:f1:11:02:14:ec:ec:2b:b7:
27:de:46:3e:d2:f7:7e:6d:2c:3f:4a:2a:cb:d9:85:
08:7e:18:08:92:35:d3:1e:09:b4:85:e5:51:d8:44:
02:64:30:12:ef:39:e3:3c:6f:32:e6:ed:21:6a:11:
d9:7e:33:78:7c:50:0e:16:30:3b:25:f7:35:2b:7e:
e6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:2D:94:DD:18:ED:39:31:1E:BC:F7:E5:5E:53:07:52:7D:1B:90:3E
X509v3 Authority Key Identifier:
keyid:F6:45:0D:2D:02:13:EE:4C:9F:31:81:EF:EE:B2:D6:63:FE:0D:36:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kUNLQIT7kyfMYHv7rLWY_4NNls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/6378bb-52ce-46af-959c-a9054928b544/1/SC2U3RjtOTEevPflXlMHUn0bkD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/6378bb-52ce-46af-959c-a9054928b544/1/9kUNLQIT7kyfMYHv7rLWY_4NNls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.151.0/24
Signature Algorithm: sha256WithRSAEncryption
78:a2:96:ec:7c:fd:28:67:2e:8d:cf:fd:57:44:6b:b8:13:65:
c1:38:c1:e3:d4:e8:2d:6b:19:58:c4:c4:50:ed:e8:b0:40:6f:
1e:1c:d7:14:d4:5b:7b:b1:4a:81:94:79:bd:46:7e:16:06:5e:
cf:ce:30:06:e8:ae:4b:46:83:9a:49:0d:2f:46:3c:da:00:d7:
a4:6d:cc:78:85:74:3c:f9:95:82:0c:08:64:fa:9f:7d:0a:78:
aa:be:3e:61:33:ec:cb:27:44:69:3b:f1:15:09:6c:8a:f8:06:
3d:bb:6b:11:9a:0b:1c:75:9a:40:f5:26:6e:01:b2:5e:8e:a0:
0a:bf:3c:4e:f9:d9:07:8b:07:32:07:71:ce:b8:1f:66:80:3f:
7e:be:bd:7c:82:5e:c4:a3:3f:20:c4:d8:4c:f1:6f:1b:c5:05:
af:c4:4b:10:17:11:0e:fc:f9:ee:7b:fd:fc:2f:23:5a:89:df:
9e:fd:64:57:e5:ed:11:79:3e:5d:87:d7:ff:f9:2b:76:86:1b:
a6:e9:46:e5:2f:4e:b4:9e:fb:cd:de:1c:d6:d1:13:7e:6f:42:
37:4e:93:dd:72:b5:c6:9a:18:12:72:51:5c:fd:2b:58:58:39:
2f:26:1f:68:47:13:e6:0f:47:04:f5:be:3a:c9:d2:d4:f1:fe:
15:e0:50:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:58 2024 by rpki-client on console-ams.rpki-client.org