Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/RbAoy33hffaYP1LSDg9yAycytU4.roa
File: RbAoy33hffaYP1LSDg9yAycytU4.roa (raw, json)
Hash identifier: WLYp1LUjXzgDjb7IHLoDInOEZvheO1mUa8BkVfAblwM=
Subject key identifier: 45:B0:28:CB:7D:E1:7D:F6:98:3F:52:D2:0E:0F:72:03:27:32:B5:4E
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 0185700B8AAAD1D70951D7537183903325EC
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/RbAoy33hffaYP1LSDg9yAycytU4.roa
Signing time: Mon 02 Jan 2023 01:14:42 +0000
ROA not before: Mon 02 Jan 2023 01:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 55722
IP address blocks: 151.216.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:0b:8a:aa:d1:d7:09:51:d7:53:71:83:90:33:25:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jan 2 01:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45b028cb7de17df6983f52d20e0f72032732b54e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ae:de:0a:24:c7:81:a1:e1:de:77:15:3a:bc:
df:bb:8d:7d:48:2e:83:c0:24:12:d0:2f:cd:e4:89:
57:0c:e8:0f:e9:b7:5e:f1:24:42:25:16:e1:3a:c5:
78:a7:c4:98:78:0c:90:b9:36:84:b3:96:b0:23:90:
e4:04:c9:fb:97:fe:70:06:d6:dc:8b:3b:3d:34:0c:
05:92:3d:03:80:19:9e:19:b0:1a:3c:21:82:44:cc:
66:e1:49:51:1e:4d:dc:a8:30:df:e0:20:ed:70:22:
62:5e:97:78:33:65:7f:b4:a8:ab:62:d8:f6:01:d8:
f2:03:58:72:76:39:bc:6a:6f:20:84:0e:08:0c:4b:
f2:fa:bc:bf:a5:aa:db:d3:0f:e1:f6:e8:de:9f:c6:
c2:89:40:c7:26:6a:0a:85:e2:48:bc:f4:0e:7b:3d:
50:53:ad:21:6f:ab:82:44:95:f4:4a:00:2b:b9:ba:
41:f5:b1:27:9d:02:9e:e6:2f:ff:cd:78:36:7b:24:
a0:4e:66:24:72:2b:1a:21:11:be:1e:bd:ef:c9:ba:
2a:9e:0f:49:f4:eb:c1:fc:71:bf:e1:54:ec:1a:54:
89:08:0a:7b:a6:f5:bd:aa:99:2d:f7:f6:ca:09:81:
5c:37:83:89:48:c5:d5:a0:90:b0:74:fc:b0:dc:6c:
30:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B0:28:CB:7D:E1:7D:F6:98:3F:52:D2:0E:0F:72:03:27:32:B5:4E
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/RbAoy33hffaYP1LSDg9yAycytU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.33.0/24
Signature Algorithm: sha256WithRSAEncryption
15:fe:f8:43:be:c4:a0:11:55:ed:b7:3f:9f:2c:79:5a:a7:bb:
87:08:0a:19:8b:97:54:07:e7:dd:ae:4a:d7:2e:b8:e1:fa:d3:
83:4b:a3:4c:e8:b4:47:ac:19:bb:32:a4:d0:a9:44:09:a5:33:
15:ab:de:38:1c:e2:72:65:d9:01:ea:4e:f2:c0:f3:a3:4c:80:
a3:d4:40:5e:dd:68:1b:9c:e3:50:2e:b2:a0:b9:1c:d9:71:5f:
b4:a4:57:2a:25:bc:c2:00:97:0e:ba:42:ed:c9:f8:e4:2c:fc:
f2:7c:b1:97:36:5b:da:2f:4f:ec:97:1a:d3:9b:2e:0b:7f:e3:
66:71:dd:84:2d:87:5a:3c:a3:24:d1:94:a0:fc:7d:1e:dc:23:
7f:64:90:b7:bd:ac:49:5d:f7:cc:7e:f5:ba:e4:af:d0:41:b5:
e6:04:d0:c9:5c:ee:70:32:ae:15:10:a0:08:92:16:27:13:5d:
c1:5e:5c:ea:25:e5:29:78:fc:50:7f:7d:2d:62:bb:54:6f:d8:
ab:91:58:21:c1:c8:9e:b6:1c:99:5b:7b:76:93:1b:79:e0:17:
82:29:19:94:9f:36:f3:2a:08:74:fe:9d:0b:17:7e:9e:f7:71:
a2:02:2c:f2:db:ac:25:6f:14:3a:75:5c:54:3d:1a:45:31:81:
0b:d1:bc:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:46 2023 by rpki-client on console-ams.rpki-client.org