Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/GvA7ggRT0qaE2B_6DzRNpAn-NFk.roa
File: GvA7ggRT0qaE2B_6DzRNpAn-NFk.roa (raw, json)
Hash identifier: Zbv/MJdmW5j0an+RoH20CmQuF6zHc0F9VcxeDxBILw4=
Subject key identifier: 1A:F0:3B:82:04:53:D2:A6:84:D8:1F:FA:0F:34:4D:A4:09:FE:34:59
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 07B97D82
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/GvA7ggRT0qaE2B_6DzRNpAn-NFk.roa
Signing time: Mon 30 May 2022 02:12:13 +0000
ROA not before: Mon 30 May 2022 02:12:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 23676
IP address blocks: 151.216.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129596802 (0x7b97d82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: May 30 02:12:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1af03b820453d2a684d81ffa0f344da409fe3459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:15:cf:48:4f:4c:2c:59:e7:68:63:65:63:f0:
e0:cd:e3:f7:5d:27:53:72:1b:1c:0e:6e:22:43:c2:
e4:8a:39:b9:98:02:5a:b0:80:c4:c5:14:7b:4f:1b:
29:75:f3:e0:40:24:be:ae:c6:39:2d:a0:96:fe:4e:
cb:0f:c9:df:0f:52:78:bb:ec:73:3b:83:de:64:50:
53:20:3d:93:21:81:1e:fe:fd:49:1f:eb:e0:1f:3b:
8b:81:e6:dd:ea:4e:9f:99:1e:b6:47:f5:49:e6:ab:
11:8a:17:8a:ac:c8:16:94:8c:ce:1a:52:11:6f:95:
dd:7c:3d:6c:0e:bf:b6:8c:ad:c1:cb:a4:41:c0:0c:
bc:1e:e3:a8:d9:32:3e:26:7f:fa:69:7a:bb:a8:ce:
63:61:6c:d1:69:20:bd:eb:69:f9:d9:60:7d:58:43:
6b:05:ba:59:5b:61:53:c6:a7:87:b6:c3:56:93:7a:
ee:de:6a:ac:08:f3:de:98:64:f5:13:b4:8e:4d:17:
18:7d:b6:eb:b5:c9:26:cc:f9:7b:59:a0:e4:be:44:
d1:11:92:95:b3:2e:c7:70:4c:c7:bc:d0:02:09:a6:
4e:d6:15:30:19:c1:13:28:83:46:58:6c:bc:0d:e6:
f4:38:3d:7b:cc:e9:ce:74:39:7b:01:ce:89:27:23:
c3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F0:3B:82:04:53:D2:A6:84:D8:1F:FA:0F:34:4D:A4:09:FE:34:59
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/GvA7ggRT0qaE2B_6DzRNpAn-NFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.32.0/24
Signature Algorithm: sha256WithRSAEncryption
28:ff:fc:8e:05:8d:63:0a:53:7f:e3:dc:40:1b:45:f9:35:95:
05:59:f2:80:b5:dc:24:bf:86:dc:77:e0:db:30:6d:ee:9d:cf:
f3:79:87:b3:ff:22:8a:a1:e8:34:83:8c:a4:8c:44:3c:f0:18:
b4:aa:9d:58:35:a7:88:c9:1a:64:1e:7d:e5:b7:e9:95:47:a9:
18:63:61:61:a2:fd:5b:0b:8b:f7:54:49:c8:b9:04:22:58:46:
cd:5f:fb:e1:62:89:81:03:5e:81:0c:4b:1d:92:7e:65:8e:b2:
aa:42:30:12:60:af:58:18:f4:5c:db:59:6a:8b:4e:50:f8:0a:
b7:e1:8d:cc:1a:15:3b:22:ba:6d:e0:27:fb:8d:81:81:dd:f0:
29:da:5d:44:c4:59:43:e6:8f:8f:61:3b:88:28:a1:b7:32:80:
7a:54:a6:26:f6:14:5e:9d:b4:88:0c:f1:ab:95:41:a8:9f:f9:
ff:08:b4:77:a0:b9:ea:9f:95:ae:43:ee:30:82:e4:e4:66:c4:
8d:1d:85:33:94:06:28:f4:e2:fc:c0:7e:04:5f:4f:e0:11:18:
fb:66:6b:b1:b3:76:0b:44:22:2b:63:cc:cf:7a:a5:a3:28:3b:
b6:c9:3d:53:0b:b0:53:29:d9:8d:34:27:33:82:df:b6:5b:25:
77:ba:2a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:56 2023 by rpki-client on console-fra.rpki-client.org