Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/2y0olaFygnss8sjtSZNt96BTUmU.roa
File: 2y0olaFygnss8sjtSZNt96BTUmU.roa (raw, json)
Hash identifier: tNG84Jt2swdO4VHg0UCjmnFWvwKgLezluXK7pMgD7D0=
Subject key identifier: DB:2D:28:95:A1:72:82:7B:2C:F2:C8:ED:49:93:6D:F7:A0:53:52:65
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 0181EB612E20A681BBC02F840C4CF3391F87
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/2y0olaFygnss8sjtSZNt96BTUmU.roa
Signing time: Mon 11 Jul 2022 03:50:23 +0000
ROA not before: Mon 11 Jul 2022 03:50:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 23676
IP address blocks: 151.216.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:eb:61:2e:20:a6:81:bb:c0:2f:84:0c:4c:f3:39:1f:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jul 11 03:50:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=db2d2895a172827b2cf2c8ed49936df7a0535265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b0:e3:cd:c1:80:fd:5d:68:02:78:fd:e8:dc:
fe:ff:79:21:e8:6d:61:90:99:da:f8:8b:a8:5f:28:
db:16:79:2b:09:93:ea:bd:3f:a3:8f:c5:fa:c8:4a:
e4:26:9f:6d:f1:7a:74:24:0d:65:95:f3:0f:9a:d0:
b9:3f:a9:3b:0b:d2:8c:d0:d7:ef:bc:6f:48:54:75:
74:a7:2f:eb:88:5a:95:b0:70:f4:72:4a:00:e4:c1:
0b:0f:2f:df:07:ba:bb:3b:03:e8:4b:ba:80:bc:02:
16:e9:e0:a6:9e:99:f7:30:98:51:50:b6:17:5f:f2:
de:ff:b8:fd:0b:32:e2:46:6c:80:b6:10:de:32:6e:
a6:03:75:32:29:e2:97:d2:d8:98:f4:e1:14:7e:ed:
84:a9:98:ec:b7:a9:2e:ef:1a:dc:63:ac:c9:5a:ee:
cc:12:d8:ca:f2:5a:06:f0:f5:be:11:f8:eb:ee:ce:
ca:19:16:ac:6f:9c:e7:44:09:57:73:f7:f2:b5:77:
1d:35:15:c8:48:8b:32:18:90:95:aa:09:f0:25:f2:
65:c1:df:7a:cc:8c:a9:47:27:c5:08:f9:75:31:ab:
23:4a:0b:96:ca:a2:7f:eb:ba:47:bf:9c:2a:75:40:
b2:e0:3e:4d:eb:c4:c9:de:03:38:b9:5e:5d:a3:1a:
fb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:2D:28:95:A1:72:82:7B:2C:F2:C8:ED:49:93:6D:F7:A0:53:52:65
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/2y0olaFygnss8sjtSZNt96BTUmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.32.0/24
Signature Algorithm: sha256WithRSAEncryption
90:dc:67:d9:8d:d3:b2:83:96:69:7d:91:a8:22:cd:a9:5a:3c:
9d:c1:07:28:a6:e8:5c:4f:54:df:d3:17:e9:12:84:b2:f3:01:
c0:be:3c:24:d6:c9:cf:18:34:3c:b8:b6:d8:a0:f7:f2:d6:fd:
60:28:20:e9:fc:b1:89:b6:0d:0f:ff:4d:dc:81:5f:00:51:f8:
3d:86:3f:9a:7b:c1:c8:18:36:ee:30:e9:9f:f7:ff:5b:d0:54:
1a:ad:50:ed:5a:61:00:73:ca:3d:28:20:1c:12:36:5a:2a:ab:
e4:a2:c8:04:37:78:e1:92:ec:05:10:c0:f2:29:3b:02:40:db:
83:6e:18:d3:55:4b:e1:36:02:ad:5a:ff:82:ce:05:aa:0c:b6:
01:19:7f:cb:64:82:92:9f:7f:21:08:ee:0e:c3:50:00:2c:3d:
b9:6b:10:42:3d:90:87:36:58:af:3e:a0:7f:0c:b1:96:67:02:
85:fb:84:3e:89:cd:f5:2a:8e:40:d8:e9:ee:c3:45:dc:75:cb:
00:4b:48:23:4f:d2:63:82:7d:50:88:7c:1c:8b:c3:7e:77:5f:
9c:9a:ac:d9:35:dc:bb:a4:26:fb:8b:55:3e:1d:68:e5:64:47:
6f:8c:c1:34:3c:23:cd:03:bd:6e:89:6d:b3:f0:7f:48:a0:c1:
3e:6f:d4:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:45 2023 by rpki-client on console-ams.rpki-client.org