Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/L61T3g_l4BRvY8Xy64oFLhymPFo.roa
File: L61T3g_l4BRvY8Xy64oFLhymPFo.roa (raw, json)
Hash identifier: nzPuSLbV5wvjQveIhah0AU74xK+WAfiB4kdwOF8fby8=
Subject key identifier: 2F:AD:53:DE:0F:E5:E0:14:6F:63:C5:F2:EB:8A:05:2E:1C:A6:3C:5A
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 0848EE63
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/L61T3g_l4BRvY8Xy64oFLhymPFo.roa
Signing time: Fri 10 Jun 2022 03:45:02 +0000
ROA not before: Fri 10 Jun 2022 03:45:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 23676
IP address blocks: 151.216.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138997347 (0x848ee63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 10 03:45:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2fad53de0fe5e0146f63c5f2eb8a052e1ca63c5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:88:a9:71:24:c4:e5:cd:5c:f9:b8:85:13:97:
53:9f:59:9c:13:bb:31:b1:14:95:48:9c:9c:eb:00:
1e:44:24:5b:e7:23:9b:6b:ab:f6:00:d3:b1:76:8c:
e6:52:5d:83:d9:9e:0a:bc:07:0b:a1:b3:a4:c5:03:
8e:a1:4b:b0:1b:57:2e:de:67:ec:fe:4b:03:19:de:
d4:b6:5d:78:55:01:91:be:7b:a0:e2:57:7c:47:c2:
23:f3:ce:c9:81:48:fc:1f:aa:d6:7b:0c:d4:b0:7b:
2d:72:b5:94:28:9a:73:7e:d1:78:4d:30:91:33:05:
e2:44:07:93:ab:47:e8:4b:3d:a8:41:70:80:e2:08:
53:1a:fc:48:b5:2d:a1:50:58:af:30:d5:7e:26:b0:
b5:26:07:c1:57:54:fb:78:fc:87:24:c2:ef:bf:7c:
35:af:6d:d8:43:f1:91:19:1a:e3:6f:03:c3:25:53:
69:35:45:ea:2c:45:c9:ad:e2:fe:71:cd:bf:2d:dc:
c5:20:a7:cb:61:a1:8b:e8:2a:66:4b:bc:8a:b6:5d:
57:2f:82:2a:4e:aa:f8:c0:ca:ae:53:98:f0:0b:47:
37:78:45:d5:f0:70:f3:62:13:b0:f3:34:6e:60:c3:
19:2f:f4:79:06:d7:aa:32:34:df:3d:38:15:cb:f9:
6b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:AD:53:DE:0F:E5:E0:14:6F:63:C5:F2:EB:8A:05:2E:1C:A6:3C:5A
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/L61T3g_l4BRvY8Xy64oFLhymPFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.32.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:d1:65:d2:87:62:73:ff:6c:20:fa:56:a0:b2:f4:18:00:56:
5f:42:7a:a2:d1:0e:af:db:9f:85:dc:3e:89:6c:c0:11:30:7b:
dc:d8:09:78:07:f4:62:62:30:48:d7:76:9a:6e:41:8b:35:29:
09:21:6e:cd:9b:db:f0:f1:a8:63:f0:da:fc:83:48:8c:3c:9e:
9f:56:e4:e1:bb:88:34:9a:a6:3a:14:4b:4f:c7:9b:e5:d9:52:
93:9f:40:83:4a:7e:49:c1:1b:90:3c:7c:0a:05:ad:98:53:c1:
10:13:21:d1:c7:2d:8b:84:be:e5:b7:1e:86:37:31:ef:ab:ec:
1c:a0:d5:64:3e:c3:47:37:99:45:09:f1:81:c8:97:ec:ef:a4:
89:d4:f6:5a:e7:94:52:71:50:c3:40:43:d7:0f:77:c6:73:05:
ca:49:19:19:32:60:80:b0:06:64:6a:70:d4:4f:1e:bd:4e:82:
cd:b5:f8:d1:3f:ba:a0:65:04:00:93:34:08:e6:a4:88:70:ef:
fa:83:5e:fd:fa:f2:b1:68:d3:c5:02:8e:69:24:45:c1:aa:45:
98:f6:7e:81:f4:e7:47:42:a4:c2:5d:c5:6f:64:bd:38:23:63:
82:95:e4:df:d0:2b:a1:8c:4d:61:29:1c:95:c8:f6:15:b2:9d:
91:25:46:46
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECEjuYzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDYx
MDAzNDUwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmZhZDUzZGUwZmU1
ZTAxNDZmNjNjNWYyZWI4YTA1MmUxY2E2M2M1YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKmIqXEkxOXNXPm4hROXU59ZnBO7MbEUlUicnOsAHkQkW+cj
m2ur9gDTsXaM5lJdg9meCrwHC6GzpMUDjqFLsBtXLt5n7P5LAxne1LZdeFUBkb57
oOJXfEfCI/POyYFI/B+q1nsM1LB7LXK1lCiac37ReE0wkTMF4kQHk6tH6Es9qEFw
gOIIUxr8SLUtoVBYrzDVfiawtSYHwVdU+3j8hyTC7798Na9t2EPxkRka428DwyVT
aTVF6ixFya3i/nHNvy3cxSCny2Ghi+gqZku8irZdVy+CKk6q+MDKrlOY8AtHN3hF
1fBw82ITsPM0bmDDGS/0eQbXqjI03z04Fcv5a7UCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQvrVPeD+XgFG9jxfLrigUuHKY8WjAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L0w2MVQzZ19sNEJSdlk4WHk2NG9GTGh5bVBGby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJfYIDANBgkqhkiG9w0BAQsFAAOC
AQEAH9Fl0odic/9sIPpWoLL0GABWX0J6otEOr9ufhdw+iWzAETB73NgJeAf0YmIw
SNd2mm5BizUpCSFuzZvb8PGoY/Da/INIjDyen1bk4buINJqmOhRLT8eb5dlSk59A
g0p+ScEbkDx8CgWtmFPBEBMh0ccti4S+5bcehjcx76vsHKDVZD7DRzeZRQnxgciX
7O+kidT2WueUUnFQw0BD1w93xnMFykkZGTJggLAGZGpw1E8evU6CzbX40T+6oGUE
AJM0COakiHDv+oNe/frysWjTxQKOaSRFwapFmPZ+gfTnR0Kkwl3Fb2S9OCNjgpXk
39AroYxNYSkclcj2FbKdkSVGRg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:46 2023 by rpki-client on console-ams.rpki-client.org