Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/JKIqoUszvZV-8k03ecna2C4SGqk.roa
File: JKIqoUszvZV-8k03ecna2C4SGqk.roa (raw, json)
Hash identifier: sHqVPzmkX1Uzgm/8hzFknzrKbMLk/7On0Kkgm1q/iKY=
Subject key identifier: 24:A2:2A:A1:4B:33:BD:95:7E:F2:4D:37:79:C9:DA:D8:2E:12:1A:A9
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 097B16D9
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/JKIqoUszvZV-8k03ecna2C4SGqk.roa
Signing time: Sun 03 Jul 2022 00:59:11 +0000
ROA not before: Sun 03 Jul 2022 00:59:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 17660
IP address blocks: 151.216.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159061721 (0x97b16d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jul 3 00:59:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=24a22aa14b33bd957ef24d3779c9dad82e121aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:28:54:3e:e6:15:83:1e:2c:78:f9:14:11:ef:
6b:7d:5a:0f:02:3d:ae:e2:f3:65:d0:49:29:c0:0e:
7a:c2:fe:e9:9d:44:6b:0f:29:ad:cb:e5:8a:57:7a:
76:e3:8d:b5:74:db:73:e9:4d:77:e3:bc:52:d8:4e:
20:73:41:f3:04:b8:01:b0:d7:d1:f3:a6:c7:83:05:
a3:4c:a3:62:10:79:f2:c7:02:7d:90:84:0f:de:8a:
5c:ab:56:1a:da:eb:9b:51:99:87:55:f6:ec:14:67:
93:21:0f:c2:82:44:8b:ef:6f:1e:f4:92:77:fc:c2:
60:05:e1:a4:76:49:76:f1:9a:f6:65:1d:b3:6c:a0:
1e:d4:24:28:bb:0c:f6:74:25:52:3f:17:bd:1b:b7:
ee:0a:52:5b:39:e0:0b:84:80:5c:30:c2:0b:48:ee:
c2:3e:3b:e8:2c:2d:a0:90:ce:18:92:b5:fa:4f:7a:
a3:32:62:62:c8:08:98:28:f6:ae:1a:1d:1e:28:20:
22:5b:08:e7:8c:44:11:85:68:63:9a:ea:f5:e5:a0:
22:9a:c3:04:6b:b5:62:d4:67:55:89:9b:eb:2a:fb:
75:37:b7:5a:e3:65:96:7c:d2:e6:13:14:d5:b6:17:
b0:9d:31:36:02:49:1b:54:62:b7:56:fa:c8:da:83:
24:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A2:2A:A1:4B:33:BD:95:7E:F2:4D:37:79:C9:DA:D8:2E:12:1A:A9
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/JKIqoUszvZV-8k03ecna2C4SGqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.34.0/24
Signature Algorithm: sha256WithRSAEncryption
99:65:2a:b0:cf:60:f0:4e:7d:1e:bc:db:e7:78:8a:e0:34:70:
5b:0e:36:26:87:12:21:8d:64:a1:bf:75:38:a0:5e:be:60:dc:
9b:e0:d3:a5:0c:69:11:9f:df:12:a5:f5:83:42:6e:66:b6:ac:
6e:49:14:97:2c:2b:4a:3b:72:05:e8:5b:4b:5f:dd:52:4c:12:
79:3e:89:69:4d:79:41:96:54:c4:e5:65:79:1b:61:42:1a:6a:
65:22:e9:c8:77:77:7a:5d:1a:f3:62:ed:22:e0:90:7c:c8:c9:
9c:42:c2:2b:30:b7:21:f6:5d:b3:4a:a6:a7:a0:6d:2a:03:62:
a5:aa:79:3f:18:2d:1e:9e:9b:75:69:cd:2a:85:a9:ef:e1:34:
27:8c:b1:ef:7e:91:02:c5:f8:9f:99:04:72:a1:1a:f0:a9:24:
a6:13:4d:cb:82:e9:9a:a9:1c:7b:2a:11:f1:b8:81:94:9d:1e:
43:3b:72:fb:90:80:67:ad:1d:a6:7b:ce:d0:74:3c:6f:14:1e:
c2:46:08:01:8b:67:51:83:32:c5:8f:b7:f4:c0:a3:5f:e8:67:
22:a2:b0:21:7e:b8:80:64:dc:82:92:28:16:89:00:01:03:13:
0e:10:2e:02:e9:99:3b:a8:9d:09:e1:8d:b7:3c:fc:d2:f9:d7:
02:14:11:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:28 2024 by rpki-client on console-fra.rpki-client.org