Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/124bb5-7816-4725-8668-b003d444089d/1/b1sSjqRkw15MJHq_RwvIVpyzKcU.roa
File: b1sSjqRkw15MJHq_RwvIVpyzKcU.roa (raw, json)
Hash identifier: ZqqmUmKM7QX153T9eRt7yUEWopAZSMmkBexEsMnZtqo=
Subject key identifier: 6F:5B:12:8E:A4:64:C3:5E:4C:24:7A:BF:47:0B:C8:56:9C:B3:29:C5
Certificate issuer: /CN=c30f935c6fa0e259943c64a3ee4ca41af177cc48
Certificate serial: 0189E36D4FCC794635D0868ABBFAB789EB3C
Authority key identifier: C3:0F:93:5C:6F:A0:E2:59:94:3C:64:A3:EE:4C:A4:1A:F1:77:CC:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ww-TXG-g4lmUPGSj7kykGvF3zEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/124bb5-7816-4725-8668-b003d444089d/1/b1sSjqRkw15MJHq_RwvIVpyzKcU.roa
Signing time: Fri 11 Aug 2023 07:08:59 +0000
ROA not before: Fri 11 Aug 2023 07:08:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29608
IP address blocks: 151.216.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e3:6d:4f:cc:79:46:35:d0:86:8a:bb:fa:b7:89:eb:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c30f935c6fa0e259943c64a3ee4ca41af177cc48
Validity
Not Before: Aug 11 07:08:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f5b128ea464c35e4c247abf470bc8569cb329c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7b:05:11:62:0b:f6:50:36:d4:c4:8c:9d:b4:
4d:5b:46:86:5d:70:35:63:05:c2:41:29:b0:f9:c5:
9e:b7:95:69:2a:74:94:98:0d:f1:be:79:17:3b:3f:
53:28:95:94:84:74:35:ad:6a:ee:51:c4:17:44:e6:
12:3d:60:23:2d:34:05:56:8f:86:ec:26:4a:2a:1d:
5a:82:aa:87:ca:53:1c:d0:f8:e2:33:01:8b:88:cc:
9e:d1:14:16:96:6a:9e:54:5c:97:ee:71:6f:11:d9:
80:8e:f6:78:27:4a:b9:a2:2d:8c:09:63:41:3a:f9:
94:ce:20:f1:70:ef:7a:c2:4b:14:5b:3e:cf:8f:cb:
3a:61:66:20:f6:45:33:93:6e:8f:84:85:16:26:45:
90:ad:da:60:f6:34:9c:57:91:87:81:d0:18:cd:1b:
82:74:c9:06:2f:5d:7b:b2:ad:de:d3:13:34:99:33:
87:1b:bd:43:0e:9b:7c:c8:6b:f9:f6:b3:14:35:05:
9d:1e:78:d8:e3:8a:96:1e:11:05:21:ab:78:07:ac:
1e:a0:0a:9c:3c:51:c0:d4:09:ef:a8:7f:9b:2c:27:
22:10:93:49:d3:e1:ff:31:66:00:d9:d9:4e:31:ee:
37:9e:ce:0b:30:2f:c4:e7:38:c5:3d:ac:4d:d5:24:
16:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:5B:12:8E:A4:64:C3:5E:4C:24:7A:BF:47:0B:C8:56:9C:B3:29:C5
X509v3 Authority Key Identifier:
keyid:C3:0F:93:5C:6F:A0:E2:59:94:3C:64:A3:EE:4C:A4:1A:F1:77:CC:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ww-TXG-g4lmUPGSj7kykGvF3zEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/124bb5-7816-4725-8668-b003d444089d/1/b1sSjqRkw15MJHq_RwvIVpyzKcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/124bb5-7816-4725-8668-b003d444089d/1/ww-TXG-g4lmUPGSj7kykGvF3zEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.40.0/22
Signature Algorithm: sha256WithRSAEncryption
54:27:46:d5:78:8c:6e:c2:e0:d7:76:35:7b:38:d4:45:df:c1:
f2:c4:88:46:31:fe:1d:d0:d0:e9:5a:78:cd:dd:b2:a7:06:42:
69:ac:f1:21:31:ed:d1:5c:40:75:e4:1b:32:e9:89:79:03:09:
46:d4:84:11:bc:f0:88:c0:9b:0a:61:c8:11:76:48:a3:10:06:
8e:6a:7c:66:a4:c9:6b:f0:ca:c8:77:0c:dd:55:78:22:54:17:
a6:fb:ef:07:03:a3:24:72:3f:89:e4:d4:2e:ee:e1:71:74:81:
3b:36:d5:c8:51:81:06:c4:28:d7:a1:3b:5b:31:b0:a0:e8:93:
b1:1f:04:af:f3:2b:5d:b5:b1:9d:bb:e6:14:c6:dd:2c:1d:90:
64:f0:9f:b5:0e:85:d8:2b:ea:a5:0d:7f:50:6d:8a:6a:f5:95:
83:3b:bd:89:e2:e9:6f:a5:26:21:96:31:12:ce:88:7a:d7:53:
68:b6:59:40:e0:d8:ee:fc:5a:f7:9e:9d:c1:30:cf:46:b9:32:
ce:00:e4:97:65:98:a2:72:32:07:3a:17:23:49:3f:5e:c7:cb:
99:b5:e7:04:7b:43:40:c0:f8:24:76:8a:30:e4:09:5b:63:78:
2e:33:7c:72:8a:5b:43:c2:49:b0:fb:a8:10:b1:8f:c6:f3:dd:
f6:2e:22:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:25 2024 by rpki-client on console-fra.rpki-client.org