Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/1ohWkBcbREh9DoC1QJzhEFtqoJs.roa
File: 1ohWkBcbREh9DoC1QJzhEFtqoJs.roa (raw, json)
Hash identifier: z8Av7G3KEJMsxFC5bEPTQ7osnVq7EevS0w18LFW8yZk=
Subject key identifier: D6:88:56:90:17:1B:44:48:7D:0E:80:B5:40:9C:E1:10:5B:6A:A0:9B
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 0824D9A0
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/1ohWkBcbREh9DoC1QJzhEFtqoJs.roa
Signing time: Tue 07 Jun 2022 02:03:21 +0000
ROA not before: Tue 07 Jun 2022 02:03:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 23676
IP address blocks: 151.216.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136632736 (0x824d9a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 7 02:03:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d6885690171b44487d0e80b5409ce1105b6aa09b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:8d:7e:9a:a8:b1:c8:60:05:38:32:36:73:52:
7f:47:2b:7e:4e:e3:03:d0:d7:58:15:c1:c0:12:a9:
a9:2c:97:12:e5:da:10:40:64:d9:ae:9e:81:93:ff:
21:11:7d:46:6d:e1:31:68:d8:d4:17:1f:77:3a:e7:
20:04:d7:35:1a:5f:61:fc:cb:e2:5a:70:e1:1b:a2:
78:db:86:c7:ea:3e:21:72:c3:df:70:43:44:02:f2:
9b:de:ca:95:1a:64:34:9a:58:35:f0:38:91:c9:e8:
5a:d8:22:b3:0a:d0:17:5f:ad:c2:4e:d5:21:0f:de:
34:c4:d3:c0:b4:f5:86:ba:f7:7d:7f:b6:91:8a:b1:
9d:56:4e:4c:33:ee:44:e1:65:5c:f9:5a:09:6d:6d:
6b:a9:9f:25:09:e6:5b:60:37:dc:d3:26:73:38:8c:
19:98:e4:9a:48:5b:4a:24:3b:c6:ac:46:4d:9c:46:
da:57:10:bb:8b:2f:81:af:53:e5:05:44:88:ce:67:
e7:29:ec:93:be:1a:73:c6:64:c6:0e:85:8b:dd:a7:
55:90:ff:56:ea:7f:ec:ee:ce:ca:c7:18:b8:f1:16:
9b:52:74:59:c8:15:e2:8f:21:2e:6e:13:d1:1a:78:
fe:30:36:b2:6f:c9:22:5a:cd:71:d5:f3:71:d4:fd:
a3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:88:56:90:17:1B:44:48:7D:0E:80:B5:40:9C:E1:10:5B:6A:A0:9B
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/1ohWkBcbREh9DoC1QJzhEFtqoJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.32.0/24
Signature Algorithm: sha256WithRSAEncryption
21:f6:a3:74:3d:4d:83:56:fe:e9:2b:82:bf:cd:f6:88:28:ea:
b9:14:75:a3:e0:70:04:3c:b5:e0:ce:d4:ca:97:f0:fa:14:b9:
49:47:1b:6d:38:7c:08:59:05:25:bc:6d:6a:cc:80:88:40:ce:
9c:ed:85:ff:72:c5:d8:4b:10:3f:54:c0:f4:e4:47:15:6f:5f:
ea:0e:2a:ad:b1:cd:ad:fb:12:b4:35:ec:33:33:7b:56:40:4b:
3c:a0:64:da:90:be:88:66:67:9d:11:3d:dd:76:69:57:18:01:
65:e1:d9:b9:46:f2:a7:ba:5e:1a:e8:94:55:18:8d:78:03:9e:
f7:68:aa:69:c7:8e:7a:76:03:e7:7d:6a:76:0d:ed:1d:45:3c:
85:57:01:9c:db:4c:a5:0d:97:39:b6:b6:91:02:a1:c7:87:e5:
15:f9:94:7d:04:f5:d0:1c:f1:89:e0:a9:c1:44:f0:b8:dc:a9:
ae:2b:1c:01:48:18:39:fa:f9:b6:c3:18:db:e7:a4:2b:ac:77:
af:f4:0b:86:7d:40:79:3d:12:78:83:83:d9:b8:26:e8:b2:b0:
64:4e:da:f7:88:d8:f1:92:c9:00:02:27:72:de:9e:83:c2:40:
cc:d5:c5:c2:bb:81:1c:0a:c8:97:f1:20:42:2d:f0:83:ab:a6:
22:92:33:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:55 2023 by rpki-client on console-fra.rpki-client.org