Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/0fzu9cggafwqvk2i4h-kx_G-wx8.roa
File: 0fzu9cggafwqvk2i4h-kx_G-wx8.roa (raw, json)
Hash identifier: rFigZWBYVjeN9ymRzwOnquB615X5vcNBPv6T0qGBb1w=
Subject key identifier: D1:FC:EE:F5:C8:20:69:FC:2A:BE:4D:A2:E2:1F:A4:C7:F1:BE:C3:1F
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 07DDAE80
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/0fzu9cggafwqvk2i4h-kx_G-wx8.roa
Signing time: Thu 02 Jun 2022 01:13:20 +0000
ROA not before: Thu 02 Jun 2022 01:13:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 23676
IP address blocks: 151.216.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131968640 (0x7ddae80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 2 01:13:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d1fceef5c82069fc2abe4da2e21fa4c7f1bec31f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:00:08:81:5a:d1:81:b6:6a:61:ca:07:1a:dc:
ec:9a:2a:09:4b:51:13:65:e7:79:6d:f6:fc:40:f6:
26:c4:91:91:c1:ea:f0:aa:30:50:10:b2:d2:45:25:
db:e7:b4:3b:56:1a:09:c9:d3:90:57:44:54:e1:18:
e2:68:f2:c8:2b:4e:96:06:16:1b:a0:05:e4:df:88:
32:98:6a:78:10:1e:68:41:0d:a5:95:04:fe:c6:36:
3a:5f:fe:25:56:9d:4f:2d:8b:aa:68:b4:4a:de:3a:
20:f3:62:5e:0f:fe:eb:b6:79:d5:b9:8f:06:b5:97:
6a:90:8a:3b:c1:5b:c9:00:80:d1:60:12:68:c9:c1:
39:87:cf:51:84:45:e5:6f:36:08:a3:1a:7e:a4:75:
6f:62:62:11:c2:f3:bb:94:28:fa:ae:0a:d0:15:5c:
91:ba:83:09:3d:38:58:c6:ce:5d:b1:ca:38:40:35:
4c:f4:65:69:2e:f6:fc:69:6f:00:79:d8:74:2d:40:
ea:ce:8b:9f:05:1f:e4:07:e8:50:cd:71:56:0b:6c:
51:95:91:2e:84:4d:c9:00:1e:43:b3:b2:32:ef:74:
5e:7f:27:a7:e0:46:6b:b0:28:d6:79:61:66:74:61:
dc:ca:cc:fa:36:57:06:b9:c1:8a:4b:63:74:b0:69:
d2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:FC:EE:F5:C8:20:69:FC:2A:BE:4D:A2:E2:1F:A4:C7:F1:BE:C3:1F
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/0fzu9cggafwqvk2i4h-kx_G-wx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.32.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:bf:54:b9:31:d1:0b:d9:76:0b:6d:2a:c4:c0:11:12:c4:65:
bd:d7:bb:28:34:3f:94:b0:9f:90:68:76:e0:87:b6:4f:1e:76:
91:8f:63:a7:90:64:18:49:92:99:02:a7:ef:34:c9:d9:b2:22:
68:90:81:62:63:b8:b0:71:a6:b6:52:c2:0f:18:b8:f5:ea:d8:
bf:0f:92:ec:7f:92:b6:60:cf:58:59:e4:f9:2c:45:8c:19:c6:
bb:ba:bb:71:86:2b:6f:9a:f1:d0:bc:2e:c7:dc:2f:6b:2b:b4:
19:0f:f0:53:8f:75:25:5b:ed:e5:66:54:09:da:7e:65:5a:b1:
b2:74:37:e3:f5:7d:dc:85:ed:70:77:ea:13:85:a4:4d:5e:0c:
2b:6f:a0:aa:ac:58:64:14:a6:bc:07:ae:c8:b6:f8:2d:a1:94:
4b:29:ff:ad:10:fb:88:4b:73:7d:78:a6:f1:18:67:d2:18:58:
ee:13:db:3d:64:82:25:5e:a5:24:8f:47:a0:f3:60:08:cd:08:
8a:72:6e:bf:28:0a:43:4b:cf:fb:5e:77:85:81:e5:c5:72:0c:
3f:a1:9a:32:18:64:15:ce:27:ad:d8:28:ea:71:d4:5e:07:8b:
73:06:d4:7b:2c:5b:5c:0f:56:b1:27:c8:73:2c:db:9e:e1:6d:
e8:81:89:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:37 2025 by rpki-client