Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/IazbtVBzxXL6dJNei6p5xL1m21k.roa
File: IazbtVBzxXL6dJNei6p5xL1m21k.roa (raw, json)
Hash identifier: 4+aH7Ej8jvi0ESr/svqu6j9acA7Dr7qBRMWGY5WRXm4=
Subject key identifier: 21:AC:DB:B5:50:73:C5:72:FA:74:93:5E:8B:AA:79:C4:BD:66:DB:59
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 083BC82E
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/IazbtVBzxXL6dJNei6p5xL1m21k.roa
Signing time: Thu 09 Jun 2022 03:33:02 +0000
ROA not before: Thu 09 Jun 2022 03:33:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 23676
IP address blocks: 151.216.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138135598 (0x83bc82e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 9 03:33:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=21acdbb55073c572fa74935e8baa79c4bd66db59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:78:8f:06:0d:b1:1d:af:9a:3e:cc:1d:3a:26:
92:cc:60:3a:aa:fc:26:d8:0f:07:4f:9d:85:84:ee:
d8:0a:a3:9e:17:5c:3a:fd:d3:cd:51:b1:51:d1:d3:
4e:99:71:f6:78:eb:1c:71:ec:d0:b3:dc:45:fc:30:
8d:d4:fd:21:a6:77:fc:29:dd:8f:15:cc:ae:56:48:
ed:ad:bd:b4:c9:f5:98:df:0d:0f:cd:b8:73:b8:9c:
2f:9d:08:4a:3b:fb:b8:22:33:d6:a8:0f:25:af:a7:
76:0b:17:86:9e:65:45:48:93:e8:a0:bf:0d:85:93:
6b:3f:a6:18:a2:e7:41:0a:ed:06:34:a5:94:65:10:
10:6c:e4:6c:20:34:d6:34:06:89:f7:16:5d:86:d9:
73:53:d6:bc:51:48:34:36:c3:0a:a0:8e:88:30:09:
4b:5d:0f:ee:54:75:7c:d1:e0:83:92:b2:1d:66:fe:
15:62:6b:6d:7c:bc:42:ba:4d:a3:01:71:06:f6:a4:
c1:9c:7b:23:c4:17:a4:55:e7:98:41:e3:25:a9:79:
17:02:75:12:bc:c7:5b:4c:59:a2:c3:10:60:52:22:
18:fd:94:4d:9a:48:70:05:67:ea:5a:27:5b:6f:b6:
07:91:0d:9b:79:ed:a3:96:7a:8d:a9:bb:a9:74:8a:
02:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:AC:DB:B5:50:73:C5:72:FA:74:93:5E:8B:AA:79:C4:BD:66:DB:59
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/IazbtVBzxXL6dJNei6p5xL1m21k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.32.0/24
Signature Algorithm: sha256WithRSAEncryption
85:4f:59:49:93:1f:f3:46:a2:24:63:60:d6:0e:69:a0:9d:e4:
f4:fc:95:e4:62:66:1a:76:d8:a5:c1:0d:0c:31:63:98:38:11:
a2:11:8f:79:b5:08:c5:18:db:44:4a:a7:2f:39:34:9d:b7:af:
82:3b:54:2f:26:91:d3:5c:da:79:d5:5f:c1:31:fa:88:03:87:
ab:a6:ee:5e:16:3d:0d:64:4a:ee:63:8e:cd:64:f0:e9:37:5c:
85:42:0d:19:ef:cc:4f:69:dc:15:ee:c8:6c:fe:48:75:60:c3:
a4:da:05:61:97:7a:c2:27:9c:22:85:d0:a0:e7:d0:5f:fe:17:
7c:f4:20:89:49:3b:5a:4f:7b:e1:be:a8:8e:fa:51:12:f0:7d:
68:83:ec:c0:bb:e4:a8:67:f6:0e:60:ae:d2:2c:1b:ab:c1:65:
ea:34:53:5f:28:f5:44:be:cc:97:a5:45:c7:c0:4f:5d:f5:e7:
d3:ce:5e:3a:3a:5d:b4:c2:f0:32:61:9c:e9:77:c1:77:98:a0:
f6:1c:cf:3c:22:06:04:63:79:3b:24:b9:93:40:fe:5f:1f:42:
25:5e:00:ed:17:9c:d7:97:4e:ed:80:0e:e0:f2:5e:81:8c:20:
c8:e9:3c:43:12:bf:43:99:7e:36:4f:f3:9c:d1:25:e2:e0:65:
93:16:2b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:53:37 2025 by rpki-client