Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/IKoM_8Grch-T-qDBvXkcEymgbKk.roa
File: IKoM_8Grch-T-qDBvXkcEymgbKk.roa (raw, json)
Hash identifier: +3JBcfJHjAWccxdqtdeEccB0mfV2uShyNz2pSRQQ99o=
Subject key identifier: 20:AA:0C:FF:C1:AB:72:1F:93:FA:A0:C1:BD:79:1C:13:29:A0:6C:A9
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 069481E0
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/IKoM_8Grch-T-qDBvXkcEymgbKk.roa
Signing time: Sun 08 May 2022 01:38:39 +0000
ROA not before: Sun 08 May 2022 01:38:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 17660
IP address blocks: 151.216.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110395872 (0x69481e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: May 8 01:38:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=20aa0cffc1ab721f93faa0c1bd791c1329a06ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3d:39:26:5c:14:5a:f0:f3:67:ce:0c:48:ba:
7a:e4:c7:53:bc:30:52:0f:b4:bd:4c:71:87:bb:09:
9a:36:a3:b8:cf:ae:4a:c6:74:fd:64:96:b0:ee:29:
17:8e:d0:70:16:2c:94:7e:05:1a:e9:3f:9a:f9:dd:
46:f9:ed:c5:c5:df:c2:ff:1b:e9:c2:e5:cc:43:89:
91:6f:40:56:57:a2:75:93:63:9e:7b:b3:df:b6:57:
55:e4:60:3d:27:ea:37:d6:fe:03:fb:28:0b:33:76:
87:d6:1b:9e:93:a7:b4:d3:b9:61:29:b9:2c:cd:c8:
c7:de:c4:5e:c3:2f:e7:a8:b4:7a:71:a7:76:cf:fd:
aa:e6:d8:92:06:31:1a:c4:20:16:7a:8f:7c:87:03:
a5:d6:46:1e:2c:e4:69:a3:4b:3d:d7:e5:e5:b0:79:
90:03:56:19:78:ff:d5:59:9d:2a:e8:bd:47:9e:04:
8b:da:c2:cc:b2:8c:5b:9f:9d:02:b7:84:b5:8e:6d:
b4:cd:55:b7:21:28:54:5a:c0:d7:56:14:ff:97:b3:
2a:e0:5a:b5:96:8f:83:73:d4:c9:6a:a7:c4:70:95:
d3:4b:ae:2e:cf:20:36:08:6d:07:99:22:be:80:8b:
9f:ff:5b:e7:72:72:b1:f4:91:61:0c:ca:2d:2f:fa:
75:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:AA:0C:FF:C1:AB:72:1F:93:FA:A0:C1:BD:79:1C:13:29:A0:6C:A9
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/IKoM_8Grch-T-qDBvXkcEymgbKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.34.0/24
Signature Algorithm: sha256WithRSAEncryption
23:8b:fb:94:65:37:e1:09:a5:08:79:ae:41:40:23:33:b5:3a:
e3:d2:ed:73:35:b9:b4:9d:cc:07:02:fb:2c:07:38:a0:ab:43:
d7:50:39:31:73:19:3b:58:18:fa:3f:7a:ee:37:b6:68:d7:d8:
c7:cd:34:bc:3a:14:2e:0c:d1:cf:da:9a:81:00:dd:6b:8b:c1:
85:e7:72:dd:d2:d6:dc:af:6b:12:7d:3b:af:83:37:5c:8a:4f:
74:2a:83:d9:86:44:db:a8:6b:37:3a:8a:fc:d0:9f:68:68:c8:
f0:1b:df:7e:6e:13:8b:50:6e:e6:6c:4f:61:9d:c4:07:e1:9e:
09:c0:14:41:b5:44:fe:16:57:d4:a7:67:ac:e8:e9:a2:81:a8:
ee:9b:95:39:cb:b3:a9:2d:31:b7:8c:0f:7f:5b:f8:2f:4b:e2:
4d:86:6c:c1:53:12:1a:7c:50:8d:f8:74:84:a7:1a:ae:d5:aa:
58:71:5f:dc:79:b0:46:51:ae:65:4f:df:94:42:82:6e:1f:ad:
6f:49:66:35:51:9f:76:03:38:39:12:95:1e:f4:cb:12:c9:ba:
50:47:4f:c4:34:d8:66:8d:f5:2c:9d:43:d0:81:33:98:59:6f:
1e:e1:ed:3c:1a:93:3c:51:95:b4:d9:5f:ba:10:c6:52:42:72:
66:e0:6f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:28 2024 by rpki-client on console-fra.rpki-client.org