Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/CWSB5yeoLf_2PA5t9_Fe-subcLY.roa
File: CWSB5yeoLf_2PA5t9_Fe-subcLY.roa (raw, json)
Hash identifier: lNxD304Wfza0N6vnF59gdvvVISM2mJWqR6bAp6RKsLU=
Subject key identifier: 09:64:81:E7:27:A8:2D:FF:F6:3C:0E:6D:F7:F1:5E:FA:CB:9B:70:B6
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 08A37E94
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/CWSB5yeoLf_2PA5t9_Fe-subcLY.roa
Signing time: Fri 17 Jun 2022 01:47:44 +0000
ROA not before: Fri 17 Jun 2022 01:47:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 17660
IP address blocks: 151.216.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144932500 (0x8a37e94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 17 01:47:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=096481e727a82dfff63c0e6df7f15efacb9b70b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9d:92:c0:29:12:df:ca:6a:cd:e7:66:8d:e0:
b9:4f:3d:27:65:a2:c0:69:e8:e3:40:54:63:b2:be:
9e:e5:60:a7:8b:1d:ae:39:13:7a:99:55:8b:b6:0b:
20:27:d1:7a:af:25:05:d3:98:a4:82:5d:e2:92:bb:
a4:75:85:3f:df:66:54:20:11:01:ea:91:6c:69:4a:
56:b9:12:48:e4:34:74:57:f3:84:0a:64:69:7d:2a:
ee:e9:70:f4:7e:17:30:0a:bb:4c:cd:e6:50:80:b5:
3d:1a:8a:d1:6d:2c:28:88:2c:59:4e:09:f9:31:fe:
25:22:54:36:c0:42:a8:58:95:ce:06:a6:71:a0:31:
f8:5a:ad:25:dd:5e:72:71:58:a8:27:93:37:89:4c:
47:16:a1:b7:c8:d1:5f:ee:44:4b:a4:cd:f6:7d:9f:
9c:fa:6e:d6:ce:af:7b:b7:35:12:5a:98:9b:43:3e:
16:d6:e0:5e:7f:0a:c0:a8:54:3c:3d:4a:ef:9e:08:
3d:f5:ab:70:14:20:b7:21:05:ad:d0:ae:e8:71:f3:
11:3a:f1:ee:63:8a:fa:76:b8:63:0a:75:0a:70:af:
e3:2e:c6:ec:53:dc:9a:f0:5f:6c:01:8b:98:b0:e0:
32:9b:60:fe:47:c4:25:bd:60:be:9f:64:dd:5e:19:
34:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:64:81:E7:27:A8:2D:FF:F6:3C:0E:6D:F7:F1:5E:FA:CB:9B:70:B6
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/CWSB5yeoLf_2PA5t9_Fe-subcLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.34.0/24
Signature Algorithm: sha256WithRSAEncryption
03:c1:41:eb:d4:75:0e:43:b8:1b:a4:e3:b8:d3:0f:33:a2:b4:
b8:53:8b:bf:72:6b:cd:8e:c1:eb:35:d1:e2:47:be:18:ba:c0:
2e:eb:6e:1e:a8:f9:68:e9:b1:c7:75:6d:f7:40:99:0d:0b:cc:
a2:50:de:ac:fa:58:08:94:8e:61:96:46:e3:59:44:fc:64:6d:
dd:13:67:13:ae:ff:b4:63:e4:ab:6a:4e:81:3d:4e:d5:d5:44:
15:ff:3b:ec:e5:b1:e5:9e:25:13:48:f6:c6:45:0b:96:af:75:
a3:2e:05:ee:77:cb:0b:6e:38:6a:7d:8c:52:52:4b:e9:c4:08:
aa:11:41:f9:65:dc:3d:aa:11:c1:fc:6c:8e:6e:b2:a7:c2:84:
08:17:26:65:2e:d2:9b:ba:6f:7f:37:ad:d5:b5:41:8d:8c:73:
16:d2:95:4e:eb:8f:f0:83:88:ea:d7:35:24:9d:94:f6:14:b3:
b3:d8:62:f5:4e:0d:fc:a2:38:22:07:f2:a5:c2:fb:64:f9:29:
4c:66:ca:44:4f:e4:39:96:b5:99:48:5e:5e:6b:5d:9a:9b:ff:
bd:70:7e:79:00:60:16:5b:12:e9:9b:74:5b:f4:a5:ee:c3:a4:
68:83:53:98:d0:fb:a9:3f:06:46:2e:c5:fb:77:98:91:35:66:
98:ae:ac:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:56 2023 by rpki-client on console-fra.rpki-client.org