Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/HmaqrrdqeOL7Y6BoQJaNWWihAsY.roa
File: HmaqrrdqeOL7Y6BoQJaNWWihAsY.roa (raw, json)
Hash identifier: ghrg0SylG8hB+u8rPhflEqi5GtYVWPsp31CsdlL33+g=
Subject key identifier: 1E:66:AA:AE:B7:6A:78:E2:FB:63:A0:68:40:96:8D:59:68:A1:02:C6
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 0181D17583D19A9907DDBC4FAEEF1195F1E3
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/HmaqrrdqeOL7Y6BoQJaNWWihAsY.roa
Signing time: Wed 06 Jul 2022 03:02:28 +0000
ROA not before: Wed 06 Jul 2022 03:02:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 17660
IP address blocks: 151.216.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d1:75:83:d1:9a:99:07:dd:bc:4f:ae:ef:11:95:f1:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jul 6 03:02:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e66aaaeb76a78e2fb63a06840968d5968a102c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:35:57:ea:80:3b:07:2a:21:63:99:9a:1e:f5:
a8:a6:82:01:d7:cf:4c:fc:8e:48:bc:df:fc:99:b9:
19:a5:dc:81:ce:35:f9:9f:18:c8:54:d5:74:ea:06:
f1:a3:0d:8e:c0:8f:7b:94:a2:6c:f5:ca:4b:3c:39:
37:54:41:8f:0e:94:1b:e0:7a:cd:73:c0:d8:0f:ff:
83:87:cd:0f:58:74:4b:bf:01:85:50:e1:b9:f8:32:
88:03:8c:87:d0:cc:1b:06:27:d6:2f:13:30:0e:be:
d8:35:05:19:66:16:72:ab:ad:8a:73:31:78:a2:47:
b3:df:40:2c:a4:87:b6:61:cf:f3:3b:6e:f0:32:cb:
a4:cf:f9:7e:19:8d:2e:74:79:f6:7b:6e:30:0a:02:
a6:9c:77:e2:84:47:f3:71:13:53:31:89:cc:88:57:
48:6a:81:f5:f2:10:a9:8d:39:04:71:b4:a9:a9:e4:
1b:fb:18:0b:7c:00:8e:02:1e:6e:17:7d:e3:42:c7:
07:78:6f:33:b1:4f:f3:1b:3d:62:87:f8:08:e1:16:
03:0b:e2:9b:c1:2e:d5:b4:11:3b:fc:cd:f1:3a:62:
13:80:d2:3c:b1:42:89:39:f7:7e:c3:89:90:38:ef:
64:83:3b:12:9b:f3:6f:70:ec:e6:de:1e:22:45:71:
aa:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:66:AA:AE:B7:6A:78:E2:FB:63:A0:68:40:96:8D:59:68:A1:02:C6
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/HmaqrrdqeOL7Y6BoQJaNWWihAsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.34.0/24
Signature Algorithm: sha256WithRSAEncryption
11:ad:43:ae:cc:6d:97:38:49:6a:12:7e:21:fb:e2:e0:74:38:
c9:5f:23:fa:78:8d:80:c9:5e:f0:b7:6a:60:06:e7:70:a9:da:
1b:b6:7c:c5:4b:0e:40:9e:01:24:92:99:38:9c:37:39:fd:34:
4d:31:22:d0:b5:52:90:9a:8d:f7:c5:46:be:3d:bf:e0:71:2f:
3a:4a:4c:53:61:26:0b:0d:b9:61:89:77:20:76:7d:43:14:85:
7d:3a:8a:bf:b8:6a:a9:7f:dc:eb:d2:ca:a7:95:a0:4e:49:b3:
92:3c:24:b3:ef:c4:74:d9:e7:bd:be:0a:2c:11:0e:08:80:0f:
1f:7d:e3:fc:b2:5a:2b:87:33:19:90:c8:5d:d2:fd:ac:a2:75:
f6:48:ab:6e:16:9d:c1:78:3e:84:67:1a:95:34:6b:29:fe:b8:
9d:4a:9e:72:11:b3:46:a5:c3:95:35:e2:c9:7e:0c:9b:c2:3d:
1f:18:e4:9f:7c:95:49:a5:31:0c:8e:08:f6:3b:a6:f6:11:d5:
84:5c:4e:6e:46:89:cc:94:96:a2:0c:05:da:d7:85:8e:89:8c:
6b:f5:08:f3:1a:79:10:56:3c:dd:ec:cb:08:d7:34:2a:27:26:
32:1a:6c:4c:ae:c9:fd:2f:20:0f:b7:17:76:ac:de:51:96:c2:
10:4f:a9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:40 2025 by rpki-client