Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/0Z6pcgInu0sZcNcJga2Y77wt43E.roa
File: 0Z6pcgInu0sZcNcJga2Y77wt43E.roa (raw, json)
Hash identifier: wyDfO6HJhXPnzVGDCoBfKXFOt4H3WGzMFyalHYmhm54=
Subject key identifier: D1:9E:A9:72:02:27:BB:4B:19:70:D7:09:81:AD:98:EF:BC:2D:E3:71
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 0915E892
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/0Z6pcgInu0sZcNcJga2Y77wt43E.roa
Signing time: Sun 26 Jun 2022 03:04:21 +0000
ROA not before: Sun 26 Jun 2022 03:04:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 17660
IP address blocks: 151.216.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152430738 (0x915e892)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 26 03:04:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d19ea9720227bb4b1970d70981ad98efbc2de371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:84:41:3a:23:0f:02:03:e2:07:54:58:c3:09:
8a:cb:63:56:4c:d6:3f:a4:06:96:1f:a6:05:13:3f:
b3:36:ed:63:da:4d:20:84:30:63:e8:8c:d1:e6:74:
ea:f8:f6:b2:33:1f:3b:9b:78:c9:a4:a3:35:71:2f:
d2:3c:46:cf:ac:9b:b8:0e:97:1d:db:57:6f:c9:a3:
4c:b4:cb:9e:82:57:69:24:b1:02:7d:3f:5d:d6:6f:
41:b2:04:f5:4e:76:35:ee:2e:b5:b9:82:83:76:c2:
f6:7a:2b:d6:fc:92:41:d8:a9:77:d3:6c:47:6d:96:
d8:0c:ab:15:4d:3a:29:76:87:dc:f7:03:64:ad:cf:
ee:25:05:3c:c4:07:cd:53:07:39:ab:b1:7c:ba:2d:
68:04:8c:26:ff:de:60:44:c4:6c:ac:ec:0a:bc:5b:
a8:1f:bf:e8:4b:71:b6:bc:a4:c5:a8:91:64:de:ad:
2c:f3:28:82:89:53:07:8e:c9:77:83:15:e1:d2:e8:
72:b4:60:41:6c:a9:31:e1:d4:a5:b4:41:f5:dc:3b:
21:9d:ee:2b:69:8f:87:a0:d4:6d:10:d6:dc:40:29:
a2:8b:8c:f3:76:5d:6b:28:86:4e:35:02:71:d4:ed:
b4:f6:27:71:e6:58:6f:e1:5e:22:e9:be:ef:b0:39:
f8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:9E:A9:72:02:27:BB:4B:19:70:D7:09:81:AD:98:EF:BC:2D:E3:71
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/0Z6pcgInu0sZcNcJga2Y77wt43E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.34.0/24
Signature Algorithm: sha256WithRSAEncryption
35:4e:16:ea:f1:06:aa:c1:6d:b0:d7:b2:9a:1f:cc:0a:5e:47:
2d:66:88:4c:5f:8d:b0:37:dd:6b:dd:2f:3b:b7:76:de:4f:72:
44:88:74:4d:66:9e:6a:73:a4:7f:4c:32:90:b3:de:24:22:c0:
e6:37:b0:73:60:e5:43:de:da:1a:d1:58:81:95:3f:2b:4b:14:
30:6c:a9:92:fd:df:a8:af:c9:7d:71:63:1c:a6:3b:90:11:09:
47:05:6b:f3:d1:1e:c5:77:9b:41:65:e0:c9:0f:86:fd:f8:f5:
f4:9b:fa:ee:49:a8:3a:d9:b0:52:de:f0:fb:cf:f8:54:56:88:
52:31:34:ff:76:06:1a:07:70:2a:75:e1:15:7b:ea:c1:0b:53:
5a:ae:d8:6f:91:f9:cb:ae:b0:2f:82:63:10:7f:ff:33:f7:c7:
cc:7d:7c:e0:a5:fe:36:aa:4f:09:3b:a5:28:d2:04:64:ce:5f:
0a:57:db:7f:26:18:2a:80:3c:c4:e3:49:7e:c7:9d:fb:07:55:
bf:ab:d5:49:42:a2:58:f3:7d:8f:8f:37:cc:fd:5a:7f:f7:ea:
f9:9a:97:9e:03:7c:4e:0b:dd:9d:7f:0b:8e:66:d2:43:ac:5e:
17:c4:ed:f1:6a:31:dd:19:63:df:ff:ae:2e:24:53:21:e1:d6:
aa:75:82:9b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECRXokjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDYy
NjAzMDQyMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDE5ZWE5NzIwMjI3
YmI0YjE5NzBkNzA5ODFhZDk4ZWZiYzJkZTM3MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJWEQTojDwID4gdUWMMJistjVkzWP6QGlh+mBRM/szbtY9pN
IIQwY+iM0eZ06vj2sjMfO5t4yaSjNXEv0jxGz6ybuA6XHdtXb8mjTLTLnoJXaSSx
An0/XdZvQbIE9U52Ne4utbmCg3bC9nor1vySQdipd9NsR22W2AyrFU06KXaH3PcD
ZK3P7iUFPMQHzVMHOauxfLotaASMJv/eYETEbKzsCrxbqB+/6EtxtrykxaiRZN6t
LPMogolTB47Jd4MV4dLocrRgQWypMeHUpbRB9dw7IZ3uK2mPh6DUbRDW3EApoouM
83ZdayiGTjUCcdTttPYnceZYb+FeIum+77A5+A0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTRnqlyAie7Sxlw1wmBrZjvvC3jcTAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
LzBaNnBjZ0ludTBzWmNOY0pnYTJZNzd3dDQzRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJfYIjANBgkqhkiG9w0BAQsFAAOC
AQEANU4W6vEGqsFtsNeymh/MCl5HLWaITF+NsDfda90vO7d23k9yRIh0TWaeanOk
f0wykLPeJCLA5jewc2DlQ97aGtFYgZU/K0sUMGypkv3fqK/JfXFjHKY7kBEJRwVr
89EexXebQWXgyQ+G/fj19Jv67kmoOtmwUt7w+8/4VFaIUjE0/3YGGgdwKnXhFXvq
wQtTWq7Yb5H5y66wL4JjEH//M/fHzH184KX+NqpPCTulKNIEZM5fClfbfyYYKoA8
xONJfsed+wdVv6vVSUKiWPN9j483zP1af/fq+ZqXngN8TgvdnX8LjmbSQ6xeF8Tt
8Wox3Rlj3/+uLiRTIeHWqnWCmw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:55 2023 by rpki-client on console-fra.rpki-client.org