Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/836a3c-371d-4e5f-a16c-d5afae4836fd/1/sJ0DTIKwGM33uhiWwWsjaBt1y3Q.roa
File: sJ0DTIKwGM33uhiWwWsjaBt1y3Q.roa (raw, json)
Hash identifier: nYVddBX900Vi8anWK65IvRt9Rxz7UI1h8JuMP1eII58=
Subject key identifier: B0:9D:03:4C:82:B0:18:CD:F7:BA:18:96:C1:6B:23:68:1B:75:CB:74
Certificate issuer: /CN=174eabf6c5092f760496a83f38366ce842bce81a
Certificate serial: 018E5621CE969410DD4702DE8A8C37495139
Authority key identifier: 17:4E:AB:F6:C5:09:2F:76:04:96:A8:3F:38:36:6C:E8:42:BC:E8:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F06r9sUJL3YElqg_ODZs6EK86Bo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/836a3c-371d-4e5f-a16c-d5afae4836fd/1/sJ0DTIKwGM33uhiWwWsjaBt1y3Q.roa
Signing time: Tue 19 Mar 2024 09:53:59 +0000
ROA not before: Tue 19 Mar 2024 09:53:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30781
IP address blocks: 151.216.0.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:56:21:ce:96:94:10:dd:47:02:de:8a:8c:37:49:51:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=174eabf6c5092f760496a83f38366ce842bce81a
Validity
Not Before: Mar 19 09:53:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b09d034c82b018cdf7ba1896c16b23681b75cb74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ed:52:32:df:18:a1:b2:d9:61:8b:5b:f1:7e:
9f:cb:2d:19:d6:0a:1a:0d:e8:b8:03:3e:95:7a:2f:
86:95:50:f7:fe:a4:3f:e9:68:a6:94:73:02:7e:9f:
61:a4:30:0c:21:5f:45:97:d9:a4:ad:7f:dc:3b:62:
9f:57:a5:9e:fe:62:08:70:1a:62:26:60:57:16:a8:
0d:4c:b0:83:9d:a4:9a:de:42:5e:e8:c7:d3:65:de:
01:2c:3f:b5:b5:28:52:64:d7:e6:6d:a3:ad:f0:68:
03:aa:d0:8c:5c:12:1f:48:ad:f4:32:e7:28:93:61:
da:2f:6c:92:ce:65:da:73:d3:24:dc:6d:56:ca:e2:
ab:b7:d7:9c:de:6d:50:eb:81:5a:14:26:fc:1a:21:
f4:23:8c:2f:27:44:b9:fe:f0:45:0a:9d:b7:a7:ae:
59:e8:f5:7f:bf:1b:16:aa:b6:65:e2:1b:a2:0a:d6:
0f:62:6e:61:97:0c:5c:71:60:33:83:e0:57:e1:39:
7a:96:ee:cf:fe:ca:a2:13:18:d6:f1:04:5a:91:e7:
5c:39:97:92:bc:bc:3a:02:9f:4e:b1:eb:b5:af:8b:
18:43:b5:e2:7d:55:49:5d:81:0c:cc:7a:3b:c1:2d:
71:1b:ad:18:fb:19:cd:cd:01:36:4f:3c:c7:4f:07:
af:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:9D:03:4C:82:B0:18:CD:F7:BA:18:96:C1:6B:23:68:1B:75:CB:74
X509v3 Authority Key Identifier:
keyid:17:4E:AB:F6:C5:09:2F:76:04:96:A8:3F:38:36:6C:E8:42:BC:E8:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F06r9sUJL3YElqg_ODZs6EK86Bo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/836a3c-371d-4e5f-a16c-d5afae4836fd/1/sJ0DTIKwGM33uhiWwWsjaBt1y3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/836a3c-371d-4e5f-a16c-d5afae4836fd/1/F06r9sUJL3YElqg_ODZs6EK86Bo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.0.0/19
Signature Algorithm: sha256WithRSAEncryption
c9:48:d5:8d:ba:e1:07:d7:55:64:ae:50:0e:52:19:90:82:10:
44:53:c7:e6:38:cd:d3:e9:bd:6d:46:00:14:71:2f:e9:f3:cf:
4e:62:0e:e3:f0:41:78:3c:1e:ef:6d:8f:b4:c4:39:b5:16:4a:
7f:aa:a4:c8:6d:5b:7f:d2:eb:80:36:32:8c:49:62:db:70:22:
43:79:2c:1f:51:a0:33:39:ed:a1:e2:d2:dd:70:52:58:f6:4b:
a1:24:62:9f:3b:70:d3:00:57:cf:37:59:c5:a8:d9:78:89:5a:
6f:f7:60:85:b7:fd:ae:58:37:1a:cc:27:87:4d:29:9c:c9:94:
c2:01:bd:55:30:48:02:93:fb:23:ce:66:54:5b:a6:2b:a6:88:
e0:70:e4:9f:ee:ec:0c:a4:e3:86:1e:a9:bb:23:42:a1:27:f8:
56:31:e2:66:b3:d4:42:10:0f:30:5a:50:87:a0:1b:52:0b:51:
58:74:fa:8e:91:c3:b3:a0:ef:68:a3:d4:ff:e1:84:00:f8:e8:
31:d2:62:1c:2c:26:2c:19:42:98:b0:9e:0b:cb:a9:d7:0b:6c:
62:84:6c:74:56:8d:cd:64:53:8d:65:ea:b6:b1:81:c3:a9:7e:
51:f9:81:fe:71:79:c0:e0:4d:fb:71:e6:9b:1a:41:50:f8:d3:
4c:80:f2:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:37 2024 by rpki-client on console-ams.rpki-client.org