Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/BZ8H9Jn2jXW772c4Y6PPjni4rIE.roa
File: BZ8H9Jn2jXW772c4Y6PPjni4rIE.roa (raw, json)
Hash identifier: URYGJ4uiU7wUn59gqGjA/j/xj590n3ia7nOXqQF2Lj4=
Subject key identifier: 05:9F:07:F4:99:F6:8D:75:BB:EF:67:38:63:A3:CF:8E:78:B8:AC:81
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 081613A7
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/BZ8H9Jn2jXW772c4Y6PPjni4rIE.roa
Signing time: Mon 06 Jun 2022 03:48:22 +0000
ROA not before: Mon 06 Jun 2022 03:48:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 23676
IP address blocks: 151.216.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135664551 (0x81613a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 6 03:48:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=059f07f499f68d75bbef673863a3cf8e78b8ac81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:18:f5:0b:d1:c1:e3:58:a5:62:b7:60:81:14:
b7:be:57:a6:8f:c5:43:c2:c9:09:f4:dc:73:7d:4b:
d7:b7:f6:48:1d:87:6c:80:01:1f:ea:a1:c4:24:40:
32:3a:95:17:c5:ea:0b:3f:32:63:f2:cb:52:40:92:
39:2d:ff:c0:f6:df:9d:a3:ef:ce:3b:f1:d6:07:0b:
9b:38:cd:d3:e7:e7:ed:13:5a:db:0b:72:d6:9f:ff:
0c:b4:8b:3f:b7:7a:0a:b4:2d:ad:3e:ee:44:65:1f:
ff:e2:78:bd:f0:52:a0:71:f1:54:22:f2:d7:55:61:
66:12:5e:c2:6b:8e:f9:74:48:f7:21:8b:f4:7e:0c:
ee:cc:9b:3f:08:60:e9:08:30:e2:d1:6b:08:33:ef:
4e:b1:ee:46:81:6c:b9:03:f1:e7:07:93:c9:cc:7a:
4a:ec:d4:c0:3c:17:76:8e:37:6f:64:4f:ad:9c:24:
04:a9:c9:45:3a:f4:b8:5d:8b:72:4c:db:55:c0:6d:
e8:7a:2b:19:f7:84:8b:56:3c:04:62:f5:d8:2f:f7:
0d:7a:4e:44:3e:00:27:77:65:64:c8:5d:9b:6e:a0:
65:c3:d2:d5:7d:bf:24:f4:19:ef:d4:d9:f9:40:f0:
d2:56:52:6c:95:d1:f5:e0:14:a4:b2:f6:24:3c:22:
1d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:9F:07:F4:99:F6:8D:75:BB:EF:67:38:63:A3:CF:8E:78:B8:AC:81
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/BZ8H9Jn2jXW772c4Y6PPjni4rIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.32.0/24
Signature Algorithm: sha256WithRSAEncryption
42:1a:49:bf:76:15:8d:d9:28:15:50:76:35:cd:8b:f5:53:ca:
ae:18:ee:ce:16:03:2e:6f:5d:f6:c6:91:82:ca:50:7a:be:ff:
c5:5e:da:0b:5c:22:24:c1:ea:ba:55:19:8a:d0:58:75:cc:0e:
50:86:5a:ae:55:0c:76:34:20:8b:12:64:e7:59:62:c8:ff:e6:
e1:39:c1:4a:2d:d7:92:b7:57:0e:64:12:72:72:24:c7:a8:a2:
ca:5e:ee:4e:19:9e:61:db:ac:e7:05:07:ae:b6:61:64:c8:04:
b0:12:1e:7a:ae:96:4a:80:f1:b6:b5:da:48:b4:fb:c7:98:7d:
90:88:c4:07:40:60:46:98:12:f5:1d:37:c7:48:8b:42:7f:60:
62:7b:f7:b1:59:3f:41:cf:d0:c6:a1:69:11:80:15:d0:77:6d:
09:c6:d5:ad:55:ec:a8:53:7c:78:f3:97:f6:c7:c1:99:7f:d2:
23:a8:68:86:2c:6b:19:6b:68:60:c0:9f:ab:5a:c8:fe:cb:5e:
83:56:4e:b3:f7:f4:4e:31:42:35:59:27:72:15:3b:b7:fa:28:
8d:91:ef:51:19:90:d1:78:3a:24:be:30:d3:bb:a7:1b:f1:ef:
b3:f5:85:f3:93:aa:78:71:52:7b:c0:1b:59:ac:cc:51:26:2e:
60:cb:67:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:54 2024 by rpki-client on console-ams.rpki-client.org