Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/KUXRBuB52rGwksOqEkzArhgAmEU.roa
File: KUXRBuB52rGwksOqEkzArhgAmEU.roa (raw, json)
Hash identifier: Qas6sSgY+2Z0sFF9bJGJm56c1sLWsEmKLnVjieFtEdY=
Subject key identifier: 29:45:D1:06:E0:79:DA:B1:B0:92:C3:AA:12:4C:C0:AE:18:00:98:45
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 08E9640E
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/KUXRBuB52rGwksOqEkzArhgAmEU.roa
Signing time: Wed 22 Jun 2022 05:22:44 +0000
ROA not before: Wed 22 Jun 2022 05:22:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 55722
IP address blocks: 151.216.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149513230 (0x8e9640e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 22 05:22:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2945d106e079dab1b092c3aa124cc0ae18009845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:45:5d:98:05:93:ef:6c:b8:bb:1f:86:7c:78:
8b:4a:f7:14:a9:52:2a:e5:1c:2e:e2:eb:ce:97:25:
90:5a:eb:72:2b:7d:c0:9e:05:06:33:f1:3b:4f:79:
cb:a3:62:2c:7b:21:e1:6c:54:46:48:2c:e3:9c:e4:
fe:9e:24:21:cf:3d:f1:b4:97:76:8e:00:13:5a:e6:
c2:5a:e0:ac:d1:23:05:87:3a:2b:09:b9:4e:83:f0:
db:0c:87:a1:48:cd:55:8e:25:29:70:ff:e4:7b:fa:
c3:e0:2b:7c:fe:81:57:f6:24:0b:9f:3e:34:9a:67:
b5:65:38:6c:2d:df:78:3e:ef:19:54:a2:d5:ab:f1:
69:7b:60:0e:13:7e:78:93:db:4a:31:f7:61:e1:73:
44:80:7e:1b:aa:74:28:b3:ff:cc:a6:df:9f:16:c8:
bd:e4:e8:91:7d:b9:51:d6:53:ec:11:36:ff:04:0f:
62:ef:b7:0c:e3:61:a2:a0:bb:8d:a4:f9:fe:c4:4f:
70:ab:43:c6:c7:0c:40:41:1a:bc:59:c8:24:13:7c:
66:0d:82:de:a8:4a:6f:d4:c2:b2:72:90:5f:c7:c2:
68:6e:07:32:8a:27:3b:74:26:12:0c:74:a6:8b:42:
56:24:01:6b:98:13:52:c1:3b:f9:55:b0:55:a2:43:
d9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:45:D1:06:E0:79:DA:B1:B0:92:C3:AA:12:4C:C0:AE:18:00:98:45
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/KUXRBuB52rGwksOqEkzArhgAmEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.33.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:89:5d:8a:53:0a:df:fe:26:9a:74:a4:41:63:95:db:af:c7:
2f:2d:a0:3b:f9:1a:d3:83:d2:d7:a6:08:9c:f6:d3:43:ac:69:
94:d6:45:a1:fd:9a:98:9c:8b:24:f8:b5:8a:f8:11:9b:51:ca:
62:ef:be:cc:8f:f1:7e:bc:ba:97:3f:e6:44:34:e6:c5:7d:08:
67:9b:86:f0:0b:85:84:44:57:2e:0c:17:39:6a:11:e9:d5:8f:
0e:6a:13:ca:82:f6:24:06:4d:e9:e1:52:0e:52:87:8f:25:11:
3f:21:67:3b:d7:89:77:69:a9:08:9f:bb:5d:07:5c:ba:bd:55:
47:76:7f:75:52:ae:3e:7d:6d:09:a8:ca:6e:b7:b7:a3:2d:10:
cf:29:f5:59:82:7e:da:ff:56:bb:c4:9a:8e:66:75:b9:10:c4:
0f:8a:0c:23:e3:b6:71:4c:75:be:17:6a:07:ad:a1:f3:ae:28:
a7:8f:fa:c9:fb:22:2a:bf:2c:d7:5a:e2:dd:98:53:68:9f:74:
bf:af:89:f2:58:37:41:87:bd:23:98:c8:9e:54:ab:35:29:42:
c5:7d:8c:63:45:50:35:20:59:87:a2:2b:04:7f:c1:c7:51:8f:
fc:52:ff:70:2d:58:2e:ec:33:eb:2d:76:09:40:e9:c8:dc:0e:
38:98:a4:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:46 2023 by rpki-client on console-ams.rpki-client.org