Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/TEs9yg8nIKZ-dJ3acVEYDgExNuI.roa
File: TEs9yg8nIKZ-dJ3acVEYDgExNuI.roa (raw, json)
Hash identifier: XSlr1HXJjFauZVDwY91Z4OtdzOSTivThVYOS37XOhNc=
Subject key identifier: 4C:4B:3D:CA:0F:27:20:A6:7E:74:9D:DA:71:51:18:0E:01:31:36:E2
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 06409B6B
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/TEs9yg8nIKZ-dJ3acVEYDgExNuI.roa
Signing time: Tue 26 Apr 2022 06:12:56 +0000
ROA not before: Tue 26 Apr 2022 06:12:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 23676
IP address blocks: 151.216.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104897387 (0x6409b6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Apr 26 06:12:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4c4b3dca0f2720a67e749dda7151180e013136e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7b:43:a0:ac:ac:12:5a:98:30:b6:9f:9f:d6:
91:ac:58:96:b4:df:b4:0c:f8:6b:14:4f:4a:0e:92:
56:0c:8f:e3:95:20:77:8f:9d:a5:3d:12:79:c0:25:
0a:7c:d6:67:12:0e:57:80:70:b9:82:b1:10:a0:f5:
d5:46:99:63:b3:ec:82:ec:24:7c:ad:70:e2:0a:23:
d3:ac:79:8d:a9:31:25:03:9b:32:12:f2:63:51:39:
58:f6:c7:e7:98:40:91:cd:ec:00:11:bd:67:cb:00:
a8:26:89:77:73:7f:7a:87:5a:fc:e5:0f:7a:12:ef:
04:99:d6:42:5f:bb:ab:e8:56:67:14:00:ee:5b:fc:
1e:2f:30:b8:cc:83:eb:5a:10:69:1b:80:57:e3:f9:
e5:c1:c3:95:cf:72:18:5c:37:9e:91:3a:ca:e5:1a:
d4:10:8c:29:a9:2c:ed:5b:e5:b3:fc:40:f8:ea:01:
2d:0a:12:40:f3:8c:1f:20:dd:31:ec:cf:67:4c:8a:
c3:f1:a4:77:93:f5:bc:d2:41:fb:bc:66:30:e0:72:
62:6d:19:58:8e:7a:e3:5a:6b:02:52:a8:94:c2:33:
4b:06:de:bc:2a:8e:52:5f:4b:aa:44:fb:d7:7f:ae:
82:37:e7:08:d1:1b:f9:48:a6:3b:94:28:4c:7d:a5:
b8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:4B:3D:CA:0F:27:20:A6:7E:74:9D:DA:71:51:18:0E:01:31:36:E2
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/TEs9yg8nIKZ-dJ3acVEYDgExNuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.32.0/24
Signature Algorithm: sha256WithRSAEncryption
48:32:6a:b6:92:9d:11:ca:0f:31:a7:57:cc:03:a7:17:ee:b0:
74:b1:e1:ba:c0:d3:ac:bd:26:73:9e:ae:99:58:bd:2c:fd:39:
32:f5:e7:bb:3a:d2:d2:c8:20:44:84:26:20:be:91:dd:38:ae:
df:e4:d9:7c:52:b6:e1:3b:1f:2d:48:06:57:d9:f4:f1:06:fe:
8c:e5:43:8a:67:ab:08:2d:93:13:fd:3b:52:9f:5c:84:af:47:
fa:1c:7a:c8:03:9b:bf:a5:d3:aa:cc:82:5d:ac:bd:85:42:bf:
82:2a:fc:71:e4:4f:a5:c4:5c:72:b6:f5:a1:8a:69:e7:15:c2:
75:9d:18:8d:2f:93:71:b8:0f:7f:18:5f:5b:73:6e:ea:a4:1d:
81:ee:6e:39:61:83:c7:a7:57:41:dc:f5:eb:e2:b8:70:3e:b5:
94:57:95:4d:02:7d:1a:29:f2:d8:35:cc:90:d8:f2:5d:83:dd:
58:ed:e9:64:f5:76:4d:1f:18:dd:90:73:22:3c:fb:7f:b2:1d:
0d:32:08:f8:a3:16:73:4d:77:73:60:5c:da:42:4c:3b:de:a2:
00:14:90:ae:7d:ee:b6:69:1c:15:8d:d1:64:c6:9d:fa:c8:73:
8c:93:84:7a:f4:e6:f7:22:46:ea:9c:0f:f4:64:f3:48:91:23:
6f:a1:cc:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:56 2023 by rpki-client on console-fra.rpki-client.org