Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Lo2x-WvqL8CHgttW10x0yxMdqjo.roa
File: Lo2x-WvqL8CHgttW10x0yxMdqjo.roa (raw, json)
Hash identifier: zOohpzfmZcJ7Swxhtn4bGrBPYMEzbY3bwgtfwO7M0bg=
Subject key identifier: 2E:8D:B1:F9:6B:EA:2F:C0:87:82:DB:56:D7:4C:74:CB:13:1D:AA:3A
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 07BA0229
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Lo2x-WvqL8CHgttW10x0yxMdqjo.roa
Signing time: Mon 30 May 2022 04:38:13 +0000
ROA not before: Mon 30 May 2022 04:38:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 55722
IP address blocks: 151.216.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129630761 (0x7ba0229)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: May 30 04:38:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2e8db1f96bea2fc08782db56d74c74cb131daa3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b8:13:16:b8:31:72:41:cb:10:f2:f6:19:7c:
43:a7:84:38:84:0b:42:67:6b:e6:32:a3:1a:36:9d:
c9:a6:f4:cd:27:0b:41:90:6c:96:09:ed:7c:94:a7:
83:2d:fe:0a:f7:ab:d0:7e:bb:4e:77:14:28:f0:48:
93:81:61:23:05:44:ba:70:40:17:50:c9:5a:ed:8b:
0d:10:0d:1f:b4:72:6a:bc:af:e2:a7:1e:fd:d0:34:
5e:c1:32:79:ed:ce:b0:a8:9d:fa:00:a5:db:d9:be:
1d:09:14:61:bd:9a:bb:3c:e3:2b:18:df:0d:8c:34:
48:8e:1e:0d:4d:3c:99:ac:22:b9:ee:68:d5:05:c0:
29:36:6b:50:2c:18:50:cf:e2:50:cb:23:ea:c4:a1:
45:61:1e:1f:20:9f:ab:80:7e:65:89:d7:70:ff:bd:
7c:e6:1c:91:9b:4f:4e:56:e0:aa:90:9a:6b:df:b0:
cb:9d:24:33:cf:dd:40:28:15:a4:60:9b:79:c5:70:
e7:db:25:25:bf:90:ea:f3:3d:f6:fc:4d:56:77:cb:
02:84:67:85:57:c2:43:f5:44:d5:9b:d1:fb:fd:92:
36:44:2c:33:c7:b1:26:64:ce:93:fd:50:c2:52:eb:
21:53:f2:d8:53:bd:51:18:e2:93:02:ed:c5:9d:af:
20:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:8D:B1:F9:6B:EA:2F:C0:87:82:DB:56:D7:4C:74:CB:13:1D:AA:3A
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Lo2x-WvqL8CHgttW10x0yxMdqjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.33.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:33:e5:18:96:2f:78:1d:5c:5f:e9:47:3d:fb:7f:d8:e5:cb:
c3:ae:da:49:7c:51:18:02:a8:5b:2a:04:24:0c:7f:a0:a6:b7:
4b:0a:fc:29:ca:57:a7:9b:33:6e:1e:87:c9:0b:62:b3:10:cf:
61:ed:01:52:0d:c9:f0:43:48:d5:aa:5a:c8:93:c4:4a:b4:be:
c7:9a:86:d6:b2:66:8e:83:0a:9e:47:a0:09:f2:87:4d:34:76:
fa:71:6d:62:57:eb:f1:7e:c1:4c:48:ae:e5:e9:1c:fb:69:fc:
00:a7:a8:40:32:e8:91:72:a1:05:dd:34:8d:6e:7b:b1:29:98:
c8:c9:b7:7c:1e:77:a2:09:77:9c:44:79:a6:59:be:ca:44:fe:
b6:08:6f:d8:75:80:89:13:76:64:0e:1b:be:25:47:28:49:be:
39:c2:4f:66:32:48:a6:a2:53:75:90:28:cf:0e:b2:3f:0b:9a:
13:1e:00:69:de:8c:b2:b3:07:4a:75:a9:ec:9c:50:44:a6:9c:
a7:38:95:ad:fa:92:ff:3c:6c:4e:46:38:31:66:0b:e3:bb:ff:
a1:ed:d0:7f:b2:aa:5b:1f:af:45:76:51:54:97:7b:e1:cc:96:
64:66:27:54:13:36:c1:cd:b5:26:ff:b0:24:64:28:4b:6c:a4:
c9:d8:9b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:28 2024 by rpki-client on console-fra.rpki-client.org