Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/FVitE0IO1FzXNtTN3bdSaOfNf6g.roa
File: FVitE0IO1FzXNtTN3bdSaOfNf6g.roa (raw, json)
Hash identifier: a0pWBrEXSuCDgwAFzjGMEEkndaJH38VOAobDAX+4LuE=
Subject key identifier: 15:58:AD:13:42:0E:D4:5C:D7:36:D4:CD:DD:B7:52:68:E7:CD:7F:A8
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 0960FD94
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/FVitE0IO1FzXNtTN3bdSaOfNf6g.roa
Signing time: Fri 01 Jul 2022 04:36:02 +0000
ROA not before: Fri 01 Jul 2022 04:36:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 23676
IP address blocks: 151.216.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157351316 (0x960fd94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jul 1 04:36:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1558ad13420ed45cd736d4cdddb75268e7cd7fa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:da:9e:fa:79:10:77:2b:b1:f9:5e:e4:db:9c:
ed:ee:21:29:19:ac:c7:1e:34:fc:14:f9:9a:69:a8:
41:26:08:f8:60:12:2d:8a:15:1f:a0:0d:61:d5:0f:
5e:f0:3e:84:2b:69:c8:22:1e:c0:66:11:34:0e:65:
83:2e:90:1f:19:df:be:6f:54:40:6a:da:6f:6c:a9:
10:7f:bc:f2:60:8d:85:d2:b3:49:28:35:af:c2:4e:
0a:0e:ea:fd:82:e8:26:dc:a8:31:ab:fd:aa:5a:6c:
ba:19:9f:97:16:b8:91:7c:db:9a:ea:06:66:9c:fa:
81:b6:44:b9:0a:67:f7:f2:df:af:d2:b0:48:34:14:
74:5c:85:0f:2e:df:a5:7a:0d:ab:1a:ab:b0:a0:81:
80:16:86:17:60:85:07:64:ed:d7:ef:69:d9:0d:8b:
32:14:53:e7:91:cc:13:ac:3c:0f:86:90:4c:fb:7b:
3f:e4:bc:69:ce:d2:e2:71:ac:db:95:76:93:2c:f1:
31:b0:fb:5c:33:ca:52:5e:12:53:e4:49:e1:6e:3b:
e8:ca:36:35:4e:11:e4:1e:95:d0:f6:f7:19:d9:d7:
8e:fb:ba:39:1c:d2:75:58:90:fa:07:72:d3:d8:cd:
12:b2:bb:81:cf:fe:22:81:69:1f:f3:ca:de:75:5d:
4d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:58:AD:13:42:0E:D4:5C:D7:36:D4:CD:DD:B7:52:68:E7:CD:7F:A8
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/FVitE0IO1FzXNtTN3bdSaOfNf6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.32.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:6d:66:46:c3:9a:08:63:09:51:d5:a0:5b:b5:2e:31:2e:f1:
33:59:b0:8e:0a:2b:e4:39:72:a7:89:28:f0:92:fc:eb:ab:88:
a4:8a:a8:26:ac:0d:5a:55:c1:b4:06:5f:07:9e:b9:d3:ed:dd:
9f:cb:be:10:90:6d:83:4f:fd:5f:20:f8:72:42:75:5c:bc:07:
a8:4f:44:3a:46:05:ed:6e:f4:96:72:ce:ef:0e:1d:bf:b4:11:
e7:35:a5:4a:90:84:41:7c:0e:78:a6:9f:7d:31:40:5c:c4:21:
07:cc:ec:0b:3b:9d:a7:5b:03:7b:c3:d5:ec:05:1f:ca:cc:46:
0a:6e:71:3b:03:63:23:c6:bd:b1:8b:a8:10:30:61:9c:0e:b5:
d0:0f:76:3f:9b:58:64:56:48:18:73:55:27:27:ad:97:3d:4a:
df:e3:f9:3a:23:c7:c9:78:37:71:53:f6:82:6f:83:7c:ef:ae:
db:c7:a6:26:9e:de:0d:da:55:2d:c2:c5:26:03:f5:fc:3a:61:
a7:b2:bc:0e:e2:da:6a:d2:92:58:5c:94:6e:da:b1:84:97:db:
ce:44:ea:95:0a:bb:df:ae:9b:b1:3a:07:ee:47:ed:77:2c:d4:
b6:5b:30:29:8e:a3:0c:79:aa:3c:b7:89:2b:6d:8d:17:ce:c5:
dc:a0:7e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:11:40 2025 by rpki-client