Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/PZ5xRmwJWkqdhrIROc2ElJ1V_O8.roa
File: PZ5xRmwJWkqdhrIROc2ElJ1V_O8.roa (raw, json)
Hash identifier: sn2rTKzNAKl+/7Ch8speLAcn5agabuODH3efu0Ek38k=
Subject key identifier: 3D:9E:71:46:6C:09:5A:4A:9D:86:B2:11:39:CD:84:94:9D:55:FC:EF
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 08DB9EF8
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/PZ5xRmwJWkqdhrIROc2ElJ1V_O8.roa
Signing time: Tue 21 Jun 2022 03:47:44 +0000
ROA not before: Tue 21 Jun 2022 03:47:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 55722
IP address blocks: 151.216.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148610808 (0x8db9ef8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 21 03:47:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d9e71466c095a4a9d86b21139cd84949d55fcef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f5:ab:cf:b6:c9:35:07:4e:0c:7e:c4:57:68:
7f:c6:83:30:05:0e:61:c6:2d:ac:7c:0e:33:44:e8:
eb:b6:a6:d9:f6:08:b7:e9:a6:88:f3:02:59:b5:dd:
2a:29:72:d2:1a:8a:b5:b8:3e:4f:a1:14:ef:b9:85:
7d:06:bc:13:7d:f4:41:e9:65:09:d7:6d:d9:07:0c:
96:7a:37:47:cb:ee:f1:42:39:4a:ee:00:39:4e:78:
29:c6:8e:a0:a8:69:ee:25:26:cf:e7:8a:d8:77:10:
a4:b4:5a:ea:6b:10:50:44:69:dd:c7:2b:b5:47:6f:
d6:1c:4e:e2:84:c8:16:7d:b3:4e:76:c9:05:1c:ac:
cd:3e:c1:03:65:53:1b:ba:23:45:b1:98:b7:77:6b:
6e:1b:c7:b6:7b:c3:f9:db:dd:97:12:e5:d3:68:b6:
5d:5f:82:45:b2:6d:2f:92:8c:29:95:db:14:0d:83:
ea:70:db:92:d6:1f:80:07:f1:8e:06:2f:8d:be:96:
5b:7c:77:e9:38:42:db:ea:69:41:e0:b4:b3:ee:bd:
a8:8e:3a:e2:4f:02:cd:f9:46:85:a4:02:a0:b6:52:
1a:6b:c9:23:33:b7:90:a1:2d:f2:5e:be:e0:4b:24:
17:b1:2f:4f:bd:9d:6d:a6:a4:02:95:da:61:92:53:
42:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:9E:71:46:6C:09:5A:4A:9D:86:B2:11:39:CD:84:94:9D:55:FC:EF
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/PZ5xRmwJWkqdhrIROc2ElJ1V_O8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.33.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:c3:27:70:a3:4a:a5:ce:02:7b:4c:80:5c:e2:1b:40:bf:76:
91:6d:74:c7:04:84:30:fd:ba:dc:02:c4:a3:60:28:f2:d6:f4:
72:57:7c:2f:a2:17:85:a7:38:bf:a1:1b:cb:83:91:9b:9b:06:
5a:09:eb:4b:4e:74:4e:c5:56:43:2f:db:3c:e9:3e:e9:d4:19:
93:28:dd:c3:17:6b:ff:ba:93:e8:12:4e:de:12:26:c8:d8:98:
c2:aa:90:9e:dc:31:86:e1:d4:87:c8:12:6b:9f:ff:29:77:4a:
d6:b6:3c:a2:92:c2:9a:8d:05:22:4c:51:0a:2f:bb:82:05:06:
f2:c9:09:88:e6:30:3d:fb:81:6e:b2:73:5d:75:fa:11:52:1d:
3d:13:7a:82:bc:0f:8c:e5:54:55:ed:9d:b0:0e:0b:83:3b:ca:
bd:08:03:2d:0c:5e:d7:91:ec:6e:05:b0:cd:68:a0:16:02:d0:
8c:5e:d1:c1:6b:4f:80:6f:25:82:e7:5e:fa:8b:2f:eb:4c:67:
d3:63:22:ea:c7:0f:2c:09:38:2a:ef:f6:e6:00:d0:d8:cc:e6:
65:73:7c:be:c5:a5:99:ba:f6:2d:59:e9:b4:c9:00:c9:e7:14:
09:f7:52:4f:8c:51:ed:f3:af:a4:df:c2:60:49:7c:14:fa:3b:
5b:d8:ee:1c
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECNue+DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDYy
MTAzNDc0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2Q5ZTcxNDY2YzA5
NWE0YTlkODZiMjExMzljZDg0OTQ5ZDU1ZmNlZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALj1q8+2yTUHTgx+xFdof8aDMAUOYcYtrHwOM0To67am2fYI
t+mmiPMCWbXdKily0hqKtbg+T6EU77mFfQa8E330QellCddt2QcMlno3R8vu8UI5
Su4AOU54KcaOoKhp7iUmz+eK2HcQpLRa6msQUERp3ccrtUdv1hxO4oTIFn2zTnbJ
BRyszT7BA2VTG7ojRbGYt3drbhvHtnvD+dvdlxLl02i2XV+CRbJtL5KMKZXbFA2D
6nDbktYfgAfxjgYvjb6WW3x36ThC2+ppQeC0s+69qI464k8CzflGhaQCoLZSGmvJ
IzO3kKEt8l6+4EskF7EvT72dbaakApXaYZJTQg0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ9nnFGbAlaSp2GshE5zYSUnVX87zAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L1BaNXhSbXdKV2txZGhySVJPYzJFbEoxVl9POC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJfYITANBgkqhkiG9w0BAQsFAAOC
AQEAmsMncKNKpc4Ce0yAXOIbQL92kW10xwSEMP263ALEo2Ao8tb0cld8L6IXhac4
v6Eby4ORm5sGWgnrS050TsVWQy/bPOk+6dQZkyjdwxdr/7qT6BJO3hImyNiYwqqQ
ntwxhuHUh8gSa5//KXdK1rY8opLCmo0FIkxRCi+7ggUG8skJiOYwPfuBbrJzXXX6
EVIdPRN6grwPjOVUVe2dsA4LgzvKvQgDLQxe15HsbgWwzWigFgLQjF7RwWtPgG8l
gude+osv60xn02Mi6scPLAk4Ku/25gDQ2MzmZXN8vsWlmbr2LVnptMkAyecUCfdS
T4xR7fOvpN/CYEl8FPo7W9juHA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:56 2023 by rpki-client on console-fra.rpki-client.org