Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b68c17-5636-44a4-883d-bd649ee9fd38/1/APboYrI5Wwxr4Xv0U8G-4yLuAJ4.roa
File: APboYrI5Wwxr4Xv0U8G-4yLuAJ4.roa (raw, json)
Hash identifier: KzSDgSYMKjVL/1gsEotEdL6tY1h+G+GC10gkq2+Uz0g=
Subject key identifier: 00:F6:E8:62:B2:39:5B:0C:6B:E1:7B:F4:53:C1:BE:E3:22:EE:00:9E
Certificate issuer: /CN=c9fdbf271affdadd50472e46510cb7562c4b065a
Certificate serial: 01848B8C4377C45A5C1DA6BFFEC36EF76865
Authority key identifier: C9:FD:BF:27:1A:FF:DA:DD:50:47:2E:46:51:0C:B7:56:2C:4B:06:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yf2_Jxr_2t1QRy5GUQy3VixLBlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/b68c17-5636-44a4-883d-bd649ee9fd38/1/APboYrI5Wwxr4Xv0U8G-4yLuAJ4.roa
Signing time: Fri 18 Nov 2022 16:22:16 +0000
ROA not before: Fri 18 Nov 2022 16:22:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29608
IP address blocks: 151.216.0.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:8b:8c:43:77:c4:5a:5c:1d:a6:bf:fe:c3:6e:f7:68:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9fdbf271affdadd50472e46510cb7562c4b065a
Validity
Not Before: Nov 18 16:22:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=00f6e862b2395b0c6be17bf453c1bee322ee009e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:93:83:50:34:9e:6d:76:7b:a2:08:81:4f:54:
0b:54:a0:1d:d8:39:da:a5:b6:9b:96:1a:20:6d:14:
aa:d9:00:9b:e8:7b:24:d6:76:af:cd:9d:f7:23:7d:
2f:20:2f:49:07:51:ee:50:21:c3:05:e6:82:9b:25:
71:4d:e3:4d:31:06:88:a6:c3:41:6c:cf:f4:e0:cc:
0b:e5:0d:d0:22:fa:d2:af:0a:1f:e4:58:55:aa:a1:
b9:47:64:e5:12:a8:1a:0c:48:a4:ec:95:2b:88:f0:
7d:0b:9d:cb:7e:8d:f3:63:ce:28:f2:40:a9:1d:b6:
91:4f:f3:1a:1f:3b:17:d5:31:67:dd:ea:e9:e4:a2:
bf:ce:22:4c:8c:a4:37:80:40:f2:ad:38:ed:60:52:
6a:0e:e4:bb:61:24:f3:d4:68:95:73:c3:6d:f6:a2:
a2:be:da:12:6e:00:6f:b2:1e:ba:85:6a:d2:99:51:
53:3b:8b:6e:c0:53:3e:87:c7:c6:67:64:7e:fd:98:
b1:ec:68:a4:77:60:3e:f6:8b:4d:6c:82:7d:70:a2:
02:37:c6:b9:d2:74:39:fb:a1:11:98:51:e7:c1:77:
b7:66:99:45:e1:3d:25:48:4e:39:89:d3:d9:3c:04:
17:4c:0e:10:dd:e3:b3:cf:6c:8f:55:9c:d0:9c:62:
83:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F6:E8:62:B2:39:5B:0C:6B:E1:7B:F4:53:C1:BE:E3:22:EE:00:9E
X509v3 Authority Key Identifier:
keyid:C9:FD:BF:27:1A:FF:DA:DD:50:47:2E:46:51:0C:B7:56:2C:4B:06:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yf2_Jxr_2t1QRy5GUQy3VixLBlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b68c17-5636-44a4-883d-bd649ee9fd38/1/APboYrI5Wwxr4Xv0U8G-4yLuAJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b68c17-5636-44a4-883d-bd649ee9fd38/1/yf2_Jxr_2t1QRy5GUQy3VixLBlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.0.0/22
Signature Algorithm: sha256WithRSAEncryption
39:2e:51:f5:48:b5:47:f6:c9:80:da:bc:71:18:9e:bc:b3:a8:
8f:fe:59:b4:28:4d:b5:8f:bb:3d:60:68:51:6c:ae:83:ba:0c:
8f:77:02:56:8c:fe:eb:e1:71:6b:13:ef:87:50:d3:b5:dc:de:
1f:1c:82:23:c8:e5:53:39:22:bc:46:5b:a8:cf:91:6d:dc:4a:
c5:b2:7e:43:d5:2e:05:19:97:c8:ae:23:3a:f2:ba:0f:2e:58:
86:07:e5:e3:ec:ec:e7:5d:fa:10:7c:c6:3f:2f:ba:9b:3c:62:
63:dd:2c:18:4e:73:74:cf:4f:78:74:f8:9f:28:e0:44:c8:6a:
87:80:38:dd:dc:7d:03:1e:9e:f7:a4:b1:8e:97:c8:46:a5:97:
08:29:a5:c6:0a:75:27:d5:0c:29:e6:78:1e:2f:47:86:38:49:
6a:ed:ac:b6:a9:1d:62:6c:26:35:28:a4:0f:7f:a0:8e:cf:e2:
c0:93:b5:0b:9f:36:2f:85:88:5e:db:f1:1d:cc:de:be:9a:a9:
34:a4:9f:54:0e:10:41:ea:b5:a2:17:78:8b:00:f6:88:ba:13:
80:a9:c1:44:d2:0f:8d:6e:95:11:ff:d7:8f:18:c7:a8:64:a7:
23:98:a8:93:95:5e:7f:98:c0:e4:1b:85:bf:67:9d:91:05:14:
a6:e4:5a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:42 2023 by rpki-client on console-fra.rpki-client.org