Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Qtan006A-Us0wsaw1bmtQr2DSKM.roa
File: Qtan006A-Us0wsaw1bmtQr2DSKM.roa (raw, json)
Hash identifier: 6R+B9PZG3kZcl7mG5iQmqcM266YOEv/Bjr9PdrNB9x0=
Subject key identifier: 42:D6:A7:D3:4E:80:F9:4B:34:C2:C6:B0:D5:B9:AD:42:BD:83:48:A3
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 0979B0AB
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Qtan006A-Us0wsaw1bmtQr2DSKM.roa
Signing time: Sun 03 Jul 2022 00:21:25 +0000
ROA not before: Sun 03 Jul 2022 00:21:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 23676
IP address blocks: 151.216.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158970027 (0x979b0ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jul 3 00:21:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=42d6a7d34e80f94b34c2c6b0d5b9ad42bd8348a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:94:34:c8:5c:36:48:8a:25:49:09:58:bc:14:
94:05:58:76:0d:31:34:d6:4a:bf:72:ce:7f:f9:f6:
93:58:32:ce:eb:a1:53:30:08:f4:29:87:b6:0c:62:
a3:78:d4:d3:1a:54:b6:64:f8:a8:8e:0d:1b:07:07:
23:e9:3f:98:36:ec:71:bc:fe:db:37:94:d6:9e:24:
85:bf:fb:e2:33:d9:83:c6:81:ec:ea:50:f4:68:2c:
ab:27:60:8f:e9:8d:2f:9e:38:36:af:2b:01:ab:26:
c2:34:51:dd:20:a8:cb:5c:f0:61:f6:59:24:e4:57:
2c:9d:fc:f5:76:f1:01:35:c4:18:b7:30:68:76:87:
23:16:d7:c4:14:14:cb:8d:53:87:c4:dc:80:6a:3c:
24:3b:a9:43:4d:c5:13:e7:32:4a:b0:16:4b:c6:72:
6d:54:ed:e3:b8:3f:43:3c:a0:c5:8e:1a:74:d5:1a:
ec:8c:58:9e:0c:37:ce:c6:92:0b:d0:58:97:c3:65:
1a:91:04:7c:fb:55:49:53:a9:be:90:ea:92:84:c7:
61:16:62:7d:af:e6:d5:3b:0c:d6:b8:39:d7:69:c6:
58:03:b1:a8:a1:2c:99:53:b7:24:ba:16:7e:b3:cf:
d6:17:25:6d:50:dd:2b:cb:2c:5f:e5:2f:95:76:a2:
ed:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D6:A7:D3:4E:80:F9:4B:34:C2:C6:B0:D5:B9:AD:42:BD:83:48:A3
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Qtan006A-Us0wsaw1bmtQr2DSKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.32.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:ae:02:fb:0d:a2:ab:34:a8:02:74:e2:08:eb:c5:cc:f9:1c:
e8:e3:a7:04:88:86:1b:f3:d9:5d:cf:03:a0:51:71:9c:c6:84:
e2:60:4a:b5:09:e0:45:05:85:82:ea:0a:5a:c9:c0:e4:c7:18:
ea:f3:57:34:61:a4:82:a5:54:39:48:d8:ad:39:f7:75:35:f1:
7d:10:c7:c4:a7:a1:23:c0:10:87:09:d5:59:db:2a:fb:b1:1d:
27:83:d1:4b:07:72:96:f1:86:ff:87:03:9c:b6:75:e2:34:11:
fe:dc:11:fc:44:8a:81:47:74:62:f6:99:b1:2e:58:91:2b:60:
93:e3:86:27:14:3c:09:fa:dc:2d:a5:ce:5f:b3:aa:d0:b3:74:
97:7e:c0:c0:4d:28:08:d2:b0:a0:4b:f8:50:d3:3f:3e:14:e7:
57:0e:5f:0d:bd:73:8d:48:0c:73:c5:00:91:aa:18:42:9e:cf:
9e:5d:1b:e7:05:74:2e:2a:a8:00:77:96:40:51:1d:5d:c5:3c:
7b:3a:21:8e:74:dd:16:17:1c:9f:fa:cd:78:4b:dd:12:07:53:
67:12:0e:0e:32:85:cb:3a:cd:5c:b9:88:1f:ff:2d:f2:6a:62:
b2:34:1a:b4:66:f3:2f:eb:22:86:f6:10:be:10:29:76:23:27:
db:3e:09:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:27 2025 by rpki-client