Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/1-SH9F5vuYT-JZhqxozGgUiKzEKE.roa
File: 1-SH9F5vuYT-JZhqxozGgUiKzEKE.roa (raw, json)
Hash identifier: qGVuoDp2n53egec/aZbuOjcMTRJievwNj5wVjtdK8Hw=
Subject key identifier: F9:21:FD:17:9B:EE:61:3F:89:66:1A:B1:A3:31:A0:52:22:B3:10:A1
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 09732FF4
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/1-SH9F5vuYT-JZhqxozGgUiKzEKE.roa
Signing time: Sat 02 Jul 2022 05:24:25 +0000
ROA not before: Sat 02 Jul 2022 05:24:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 17660
IP address blocks: 151.216.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158543860 (0x9732ff4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jul 2 05:24:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f921fd179bee613f89661ab1a331a05222b310a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:80:b8:16:e5:97:ea:51:6d:58:db:d1:e1:22:
54:9e:37:80:91:bb:be:eb:1b:c1:42:0d:f6:c8:58:
03:16:c3:7f:15:4d:d7:22:59:0e:64:a4:53:24:52:
92:89:84:76:42:9f:9e:1c:69:76:aa:fa:2c:d3:f9:
4f:8d:3d:0b:02:33:74:41:ab:df:df:88:a2:ed:5e:
97:6e:4b:01:47:a8:12:9f:b2:69:09:0c:f0:72:d6:
89:3a:6f:f6:a2:5a:c9:c3:ad:db:91:a2:6c:4a:a6:
4e:2b:fd:a6:fb:97:0f:66:2f:51:19:6a:03:24:d5:
ad:8b:1d:fc:c7:c3:68:b2:b2:a0:9a:a8:80:78:ef:
08:54:45:fe:4f:48:a3:68:56:55:1d:56:e1:af:17:
eb:38:92:75:29:54:6e:78:29:3f:4f:16:8a:76:8a:
2e:d6:96:84:c3:e3:21:ac:49:c3:90:f9:3a:35:29:
98:43:83:79:5c:6c:c0:7c:91:82:61:48:70:c0:02:
11:c3:05:e0:24:51:49:92:e8:ac:d3:31:cb:93:f7:
de:d9:4c:f8:e7:8d:4b:29:00:43:78:b9:a3:88:39:
93:1d:c8:3c:db:bb:30:e4:25:9f:ce:e3:5e:95:42:
91:ed:36:42:d9:7e:f8:28:81:40:55:0c:5b:0f:cf:
af:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:21:FD:17:9B:EE:61:3F:89:66:1A:B1:A3:31:A0:52:22:B3:10:A1
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/1-SH9F5vuYT-JZhqxozGgUiKzEKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.34.0/24
Signature Algorithm: sha256WithRSAEncryption
73:ac:76:65:4e:f1:5b:3e:a2:54:bd:35:98:28:35:3e:bd:ff:
61:1c:63:49:1f:f8:b2:2d:c2:3e:82:b0:13:2e:d0:cf:35:ed:
aa:5e:a0:99:40:df:09:a5:0b:ee:eb:a9:e9:59:d3:b0:d3:80:
d7:a9:39:a1:0f:12:22:0b:aa:26:57:69:3c:b7:8e:59:7f:e4:
6f:b4:d4:cb:94:4b:c9:28:b3:9d:c4:e0:a0:69:2e:a3:61:25:
55:39:85:6d:cf:33:bf:2a:4e:3c:95:fd:90:f5:29:9e:8e:fe:
37:10:39:a1:2b:6d:22:9e:73:ec:61:ba:cb:dd:ea:b0:a7:2f:
39:bf:c6:33:01:b6:af:5d:d6:81:59:d0:e4:f1:39:dd:42:00:
9b:bf:6f:76:c0:5a:b1:b8:cb:ea:db:36:b8:50:2b:c6:0e:6d:
66:a5:b9:b7:44:93:31:33:d6:99:9d:6a:a3:86:ab:1d:ab:f3:
56:cb:9c:b0:f8:26:39:37:2f:8a:32:5f:cf:8f:1b:34:7f:10:
28:fa:b8:bc:6d:01:60:1e:d4:9a:56:0f:40:e1:0f:fc:8c:6d:
ea:a5:22:b3:28:f8:46:bc:1d:d7:fd:40:58:b4:16:a2:19:5e:
57:2e:93:c9:a6:1c:71:0a:23:5d:51:81:3f:bb:f7:6f:4d:a4:
67:e4:a9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:37 2025 by rpki-client