Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Vf374h_V82yLYSFqzp232HtoGkM.roa
File: Vf374h_V82yLYSFqzp232HtoGkM.roa (raw, json)
Hash identifier: G5Oh0C1tjMGDyhVhesnFDw3ZLYs59n86kiNUzu9cCeQ=
Subject key identifier: 55:FD:FB:E2:1F:D5:F3:6C:8B:61:21:6A:CE:9D:B7:D8:7B:68:1A:43
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 0181DC6349C6B8DF0398DCC301681166E436
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Vf374h_V82yLYSFqzp232HtoGkM.roa
Signing time: Fri 08 Jul 2022 05:58:23 +0000
ROA not before: Fri 08 Jul 2022 05:58:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 55722
IP address blocks: 151.216.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:dc:63:49:c6:b8:df:03:98:dc:c3:01:68:11:66:e4:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jul 8 05:58:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=55fdfbe21fd5f36c8b61216ace9db7d87b681a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c4:4a:03:80:ab:e2:37:ea:83:1d:d5:10:a5:
d6:31:68:b8:c1:6b:8b:89:5b:68:8d:24:bb:d9:93:
13:04:dc:81:68:e0:e6:91:ef:cd:fb:cb:72:fb:66:
75:6f:04:15:ee:06:c7:3f:d2:2f:f2:5b:47:a3:c7:
0a:2b:1b:e5:2d:f9:d5:e4:c3:61:e8:9c:96:ce:1b:
26:dd:77:7c:a6:3c:c6:1e:1b:aa:86:2c:d4:03:3d:
c3:57:1d:c2:47:eb:9f:ba:98:34:c0:43:e9:35:c1:
c5:af:94:25:02:9f:26:81:38:20:01:a7:05:da:fa:
49:9f:b4:0b:9f:ea:b7:83:6e:01:8e:bc:54:c0:48:
01:3b:7c:a5:f6:9f:a9:e1:45:c4:d3:41:eb:bc:e8:
f9:3b:d1:71:30:1d:63:6d:a2:cd:92:ba:ce:b7:d4:
20:bb:61:14:98:15:8c:1f:da:b7:fa:11:5f:e4:45:
dd:20:8d:ea:4a:3f:24:20:a9:91:a4:28:6f:80:1f:
05:03:f6:c4:be:40:5d:fa:8f:60:a3:4b:a9:64:05:
61:e4:19:7e:b8:9a:aa:76:88:fb:7c:72:8b:d7:5e:
e7:b3:6d:f0:2c:5d:2b:49:8c:9b:73:22:3f:99:58:
23:68:44:c7:da:c0:89:8c:5a:b6:4d:15:ae:92:eb:
0b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:FD:FB:E2:1F:D5:F3:6C:8B:61:21:6A:CE:9D:B7:D8:7B:68:1A:43
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Vf374h_V82yLYSFqzp232HtoGkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.33.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:6f:e5:e7:2e:f4:e4:fc:cd:31:97:49:b2:f0:ca:f4:6a:30:
c2:cf:f8:97:55:4f:b1:d8:c4:02:d4:7f:52:e8:fc:ee:5f:f5:
1b:ce:f0:35:b8:7f:2f:95:52:7f:07:d1:4b:15:63:69:5c:90:
9e:f9:51:50:16:f3:07:fa:81:cb:c7:50:21:1e:90:4b:42:37:
ba:bb:18:45:73:2f:b1:dc:24:5d:14:3a:ee:cd:ca:bf:da:84:
83:6f:e3:e3:32:54:40:1c:ab:a4:0d:18:64:bf:92:ae:f5:fa:
85:01:2e:93:1d:68:94:fd:3a:f6:89:75:54:3c:e6:7b:cb:52:
cd:a2:4b:0d:d5:9c:84:4d:3d:30:a5:0b:9b:52:d1:04:6d:4a:
f5:76:d2:c7:dd:5e:82:8e:46:ea:0d:f4:c1:94:7b:2d:24:cd:
a2:78:c2:33:a8:42:64:01:4b:b0:af:84:cc:36:6c:08:dd:3a:
ca:ae:57:66:9e:3e:46:35:9e:68:4b:f5:f3:46:03:f9:57:92:
49:90:7f:24:8a:05:7a:9f:5d:81:5b:cd:9e:82:b5:d3:5e:a5:
10:33:7e:ac:46:01:43:fc:0a:bc:a8:43:18:19:20:48:52:56:
5e:27:17:21:e4:36:fb:b6:3c:af:18:2b:50:e2:8e:19:c2:9a:
3c:a0:38:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:33 2025 by rpki-client