Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/5u2JhVy2OyAL7io-4AqHYiFyQVk.roa
File: 5u2JhVy2OyAL7io-4AqHYiFyQVk.roa (raw, json)
Hash identifier: CoUVEHKzcY+a9QjFK5+EDRDNn79HF4N1KLykQHQb5nk=
Subject key identifier: E6:ED:89:85:5C:B6:3B:20:0B:EE:2A:3E:E0:0A:87:62:21:72:41:59
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 0950449D
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/5u2JhVy2OyAL7io-4AqHYiFyQVk.roa
Signing time: Thu 30 Jun 2022 04:00:02 +0000
ROA not before: Thu 30 Jun 2022 04:00:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 55722
IP address blocks: 151.216.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156255389 (0x950449d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 30 04:00:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e6ed89855cb63b200bee2a3ee00a876221724159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:61:77:a9:e8:7d:dc:d0:3b:65:39:54:9c:d6:
a2:13:89:42:e9:c4:27:0c:36:16:6f:a9:70:84:ef:
e9:b9:91:ba:e7:61:ce:96:06:3e:2b:1b:71:31:7e:
4d:63:66:b6:8c:80:29:32:02:eb:82:27:80:4b:1c:
08:05:10:8c:86:4f:e1:57:ac:4b:23:ef:d1:24:50:
79:60:5b:a1:69:3c:50:0f:e2:4f:f0:7d:cd:a1:4d:
6c:b1:6e:94:cf:cf:96:ce:1b:c5:86:a7:0c:46:ec:
e1:6d:98:9e:1e:06:dd:e2:41:f3:cc:ed:c8:56:07:
f4:b0:19:5b:59:3e:16:01:b2:1d:37:5c:bd:da:c3:
8c:e7:4e:0d:e8:dc:10:13:38:0e:93:41:cf:2e:c6:
49:b5:7d:93:76:b6:61:17:cd:7d:b5:1a:fd:ee:18:
df:4a:4f:88:e7:39:d1:bc:9c:ff:3d:e5:b2:45:a3:
f5:f7:1f:ea:a2:dd:9e:51:61:ca:f0:a7:1b:6e:37:
fe:b8:dc:f7:b4:54:6e:39:81:cf:d6:93:68:23:53:
a7:37:5d:11:b6:dc:86:5f:49:5e:31:ff:6b:55:b3:
90:e7:c8:34:f0:20:60:31:90:dd:7f:22:57:b1:7f:
8a:2b:3e:4c:b3:38:3f:f8:e6:eb:5b:de:85:5e:68:
16:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:ED:89:85:5C:B6:3B:20:0B:EE:2A:3E:E0:0A:87:62:21:72:41:59
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/5u2JhVy2OyAL7io-4AqHYiFyQVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.33.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:54:2f:45:49:ae:d6:a7:28:73:31:7f:89:f9:a7:c7:17:05:
c6:ee:e2:ee:2e:a6:38:17:c4:ed:32:67:03:27:d5:3a:a1:68:
b0:11:b0:4c:29:b9:5a:20:53:49:25:25:ba:7a:9e:36:4f:44:
64:6a:6d:bd:43:0a:8c:b6:dd:c2:81:5c:b0:d9:69:3b:57:8e:
a7:bf:f7:81:10:8f:b9:6a:9e:f7:5b:5b:d6:b8:e2:13:7a:39:
c6:5d:58:54:31:f7:92:d1:74:c9:bb:ac:7c:34:2f:96:4b:4e:
c3:38:53:6d:2e:75:3a:22:1b:3d:b4:9d:2c:3e:91:c2:40:dc:
df:4f:dd:6a:a8:49:5f:30:e0:45:8a:71:68:3b:82:5f:3c:43:
8a:3d:e9:b6:ab:8d:94:0f:29:71:34:b1:aa:c6:c8:fc:58:44:
c9:eb:38:24:3c:4d:42:76:67:af:b3:94:14:98:63:6e:9f:9b:
3f:d0:8a:53:b7:07:a8:18:a0:97:7d:df:e4:aa:0e:03:73:06:
10:b4:33:ea:2a:c9:de:95:04:e1:33:08:e0:85:bd:d4:cf:25:
41:89:3e:d7:98:3b:c6:06:79:f4:b9:24:bf:6a:9f:25:e8:d4:
53:a5:85:14:71:91:00:93:d5:f8:4c:4e:de:eb:cc:49:02:7e:
97:71:05:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:46 2025 by rpki-client