Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/SUxIQO_37scvghjRnYDJ27s6O2k.roa
File: SUxIQO_37scvghjRnYDJ27s6O2k.roa (raw, json)
Hash identifier: 4SKJWoPCHuT1dgJfj0TLuMBRjSeB77L/5c8jHqZNA8M=
Subject key identifier: 49:4C:48:40:EF:F7:EE:C7:2F:82:18:D1:9D:80:C9:DB:BB:3A:3B:69
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 07F8ED42
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/SUxIQO_37scvghjRnYDJ27s6O2k.roa
Signing time: Sat 04 Jun 2022 02:10:20 +0000
ROA not before: Sat 04 Jun 2022 02:10:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 23676
IP address blocks: 151.216.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133754178 (0x7f8ed42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 4 02:10:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=494c4840eff7eec72f8218d19d80c9dbbb3a3b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1b:90:2f:58:52:ef:2e:c7:78:34:2b:71:15:
a1:89:88:31:82:ed:82:94:98:02:df:0c:7d:d4:28:
66:38:af:31:28:3c:19:e5:fb:c6:3a:07:cb:f0:ea:
61:3e:2d:06:d5:9e:1e:d8:d0:68:08:05:af:34:73:
df:3a:95:ae:12:8d:0d:f9:fc:81:9a:9e:8b:ed:de:
88:0e:79:d4:6a:3c:b0:52:69:77:bb:e4:93:e4:87:
7b:cb:49:bc:f9:98:e9:ea:16:1a:9d:5c:de:f4:f2:
e1:4c:31:14:08:6f:b8:7a:a8:b2:ac:18:8b:0c:73:
c3:44:b1:91:34:e5:ea:9a:90:a6:94:80:dc:b1:65:
28:1b:d5:52:d1:c4:76:7f:e6:51:cc:f9:fb:0b:7d:
33:54:77:fa:7d:5f:12:46:74:1b:08:f1:fd:ce:89:
26:b7:d9:11:19:34:c0:d7:da:78:e7:bf:b0:2c:13:
a7:8b:b1:cb:89:b0:bf:f8:87:e4:3a:bb:3a:1a:d8:
4f:5e:ea:68:9a:b2:37:b8:d6:57:df:30:79:46:0f:
51:61:2e:5a:c0:7a:3d:93:2d:82:7a:0e:43:7f:16:
af:f5:9c:d5:28:e9:f2:0d:30:8a:9f:49:5d:6d:c9:
a2:75:9f:da:4d:b6:36:3b:c6:6d:a4:3c:ea:30:e4:
0b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:4C:48:40:EF:F7:EE:C7:2F:82:18:D1:9D:80:C9:DB:BB:3A:3B:69
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/SUxIQO_37scvghjRnYDJ27s6O2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.32.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:bf:e3:9a:8f:3c:e1:3f:25:c5:95:5b:b0:93:d4:7f:ed:ab:
4f:f6:2d:5a:6c:8e:da:b7:a1:1d:a6:b7:1a:d0:da:6a:47:2e:
b1:bb:26:3f:9e:f8:3e:08:51:61:76:b1:d0:46:5b:69:3b:f2:
b8:00:79:93:80:1a:bf:7a:99:ab:9f:be:3b:ff:b1:a4:12:c8:
6b:bf:90:f8:e9:1b:93:86:a2:f3:cf:27:f5:aa:1a:be:80:56:
a0:ae:c4:77:9a:b9:72:58:49:d7:e0:ea:c9:46:0e:e5:e6:82:
f6:81:7c:ea:75:9d:f4:26:ab:53:de:9e:64:e0:26:59:10:7f:
1c:fd:2a:ce:91:ea:a8:70:7f:31:1e:2a:11:9c:08:5b:22:40:
7d:d6:0d:30:66:0b:4d:a3:46:4e:f5:fd:54:1b:2c:71:1c:67:
ee:08:80:6f:e6:9d:9f:43:49:31:a5:71:5e:5c:cd:fe:ab:82:
1e:e3:85:77:7b:a0:98:92:ce:eb:1a:f2:b5:d0:14:8f:43:2e:
b7:6c:b6:12:35:46:9f:f4:75:e9:fe:a1:57:76:53:83:85:8d:
70:fc:a1:4c:36:a8:e4:d7:6e:c5:cd:0b:f6:74:b6:cc:a8:95:
d2:97:4f:28:4f:08:4c:e1:1d:60:5f:08:a8:11:6e:15:37:a7:
aa:6e:05:8e
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEB/jtQjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDYw
NDAyMTAyMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDk0YzQ4NDBlZmY3
ZWVjNzJmODIxOGQxOWQ4MGM5ZGJiYjNhM2I2OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMQbkC9YUu8ux3g0K3EVoYmIMYLtgpSYAt8MfdQoZjivMSg8
GeX7xjoHy/DqYT4tBtWeHtjQaAgFrzRz3zqVrhKNDfn8gZqei+3eiA551Go8sFJp
d7vkk+SHe8tJvPmY6eoWGp1c3vTy4UwxFAhvuHqosqwYiwxzw0SxkTTl6pqQppSA
3LFlKBvVUtHEdn/mUcz5+wt9M1R3+n1fEkZ0Gwjx/c6JJrfZERk0wNfaeOe/sCwT
p4uxy4mwv/iH5Dq7OhrYT17qaJqyN7jWV98weUYPUWEuWsB6PZMtgnoOQ38Wr/Wc
1Sjp8g0wip9JXW3JonWf2k22NjvGbaQ86jDkC70CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRJTEhA7/fuxy+CGNGdgMnbuzo7aTAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L1NVeElRT18zN3NjdmdoalJuWURKMjdzNk8yay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJfYIDANBgkqhkiG9w0BAQsFAAOC
AQEAqL/jmo884T8lxZVbsJPUf+2rT/YtWmyO2rehHaa3GtDaakcusbsmP574PghR
YXax0EZbaTvyuAB5k4Aav3qZq5++O/+xpBLIa7+Q+Okbk4ai888n9aoavoBWoK7E
d5q5clhJ1+DqyUYO5eaC9oF86nWd9CarU96eZOAmWRB/HP0qzpHqqHB/MR4qEZwI
WyJAfdYNMGYLTaNGTvX9VBsscRxn7giAb+adn0NJMaVxXlzN/quCHuOFd3ugmJLO
6xrytdAUj0Mut2y2EjVGn/R16f6hV3ZTg4WNcPyhTDao5Nduxc0L9nS2zKiV0pdP
KE8ITOEdYF8IqBFuFTenqm4Fjg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:46 2023 by rpki-client on console-ams.rpki-client.org