Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/GHiJMHA3o4Za9luSudzStY0WWqI.roa
File: GHiJMHA3o4Za9luSudzStY0WWqI.roa (raw, json)
Hash identifier: IT8z/c2YQuYY67ZqjhC36MjQKtwfSOP89/8lRVhiPBE=
Subject key identifier: 18:78:89:30:70:37:A3:86:5A:F6:5B:92:B9:DC:D2:B5:8D:16:5A:A2
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 07C5CDF3
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/GHiJMHA3o4Za9luSudzStY0WWqI.roa
Signing time: Tue 31 May 2022 01:37:13 +0000
ROA not before: Tue 31 May 2022 01:37:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 23676
IP address blocks: 151.216.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130403827 (0x7c5cdf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: May 31 01:37:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=187889307037a3865af65b92b9dcd2b58d165aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:61:9b:26:e8:ea:df:69:75:b7:66:0f:79:b7:
42:54:b4:b9:cd:7f:c2:03:7f:7e:d3:92:59:66:e6:
d4:49:bb:86:e1:19:a9:89:7d:d0:90:7b:e2:6f:13:
fb:7d:c4:63:d3:9e:04:6c:ae:86:40:86:97:87:0f:
8d:ce:0d:f1:08:c1:12:92:f2:7e:22:80:e5:cc:6f:
54:79:e3:0d:3e:23:2e:1f:91:77:84:f6:6b:cf:ec:
9f:2b:e0:e7:2b:c9:6a:08:08:b0:bc:04:84:65:9e:
c1:d3:8b:5e:ea:c5:43:36:71:90:a0:ea:f4:ba:0d:
30:8b:82:63:2d:80:0b:5d:43:73:ee:ed:98:5f:b5:
85:cf:0f:30:48:64:4d:9f:cc:b2:fb:58:e6:55:34:
26:39:dc:b6:da:52:11:cd:e6:5e:30:40:ee:32:d0:
8d:d3:d5:0b:be:17:0b:51:2e:16:d7:84:dd:3a:88:
5b:67:29:24:bc:ee:a1:ca:ea:f2:a6:50:f4:df:b3:
c9:33:f9:4f:f6:8b:45:9a:6a:f4:e3:ed:1c:c4:9e:
df:f4:4b:8f:07:f5:6c:0b:5a:30:e5:5e:fd:e6:f7:
11:92:42:f6:3d:56:0e:3e:60:3e:0d:69:50:40:18:
2d:14:5b:13:7f:f5:74:fe:2e:04:22:37:d5:13:b3:
b1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:78:89:30:70:37:A3:86:5A:F6:5B:92:B9:DC:D2:B5:8D:16:5A:A2
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/GHiJMHA3o4Za9luSudzStY0WWqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.32.0/24
Signature Algorithm: sha256WithRSAEncryption
01:19:2a:5f:e5:67:bc:de:22:80:0a:2f:b0:e4:d4:7b:6e:ff:
04:73:a0:ab:70:ff:7f:80:55:f8:96:b4:f5:c7:c3:98:72:71:
a7:4b:a7:12:46:98:ab:97:95:63:46:85:c4:c5:92:8e:1c:4b:
1b:98:ea:c7:df:24:33:57:94:d4:d2:11:b6:8a:02:cf:ea:95:
66:9a:75:b8:41:03:8b:2e:1a:70:6d:64:e8:d9:ad:55:5c:4a:
12:54:48:ef:17:d8:be:ab:68:f7:cf:ea:bd:6e:05:37:58:de:
5f:41:97:17:b2:04:0d:57:fb:1c:86:c6:ed:ea:9a:99:cb:c4:
88:65:d8:6b:cf:a1:55:e8:f2:97:73:ef:49:a5:91:d9:63:82:
c5:bb:33:0d:3c:bc:8d:1d:8e:d6:6b:68:9d:80:76:80:15:3b:
a7:74:49:f6:f0:19:7e:46:2d:88:60:6e:99:ff:e5:fc:9e:e5:
f7:04:8c:c9:45:be:2f:97:69:01:50:65:3d:0f:ec:78:df:f8:
8f:bb:27:53:ec:f6:bc:f5:1c:02:46:21:50:87:1e:04:93:f1:
55:e6:bc:5f:53:76:f7:14:c3:e2:a9:bd:49:fb:aa:9b:a4:1c:
9d:ce:dc:ae:b6:65:ec:be:d3:75:6d:5f:a7:f1:64:4b:8b:0a:
2d:f2:28:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:41 2025 by rpki-client