Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/VzRCqS9g4lyAJgDDK9DNhN8k_9A.roa
File: VzRCqS9g4lyAJgDDK9DNhN8k_9A.roa (raw, json)
Hash identifier: K7uaarH6jcTOib6ayv+LN6D+wI/3JKuGv/HLJk8WeWc=
Subject key identifier: 57:34:42:A9:2F:60:E2:5C:80:26:00:C3:2B:D0:CD:84:DF:24:FF:D0
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 0853EDAA
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/VzRCqS9g4lyAJgDDK9DNhN8k_9A.roa
Signing time: Sat 11 Jun 2022 02:27:02 +0000
ROA not before: Sat 11 Jun 2022 02:27:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 23676
IP address blocks: 151.216.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139718058 (0x853edaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 11 02:27:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=573442a92f60e25c802600c32bd0cd84df24ffd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:86:c8:26:10:16:b7:53:1b:a8:34:ec:98:a1:
05:89:48:8b:03:2b:0c:be:bc:9c:2e:5a:3a:e0:4f:
ee:cd:67:43:f4:a4:bd:c4:65:63:b3:e4:4e:fe:14:
66:47:2f:c3:79:57:28:7e:41:da:0a:9e:9a:e9:9b:
f8:a6:78:2a:2f:86:37:91:76:5f:1b:77:42:6b:ce:
0d:ab:ed:36:97:ec:38:ad:5f:b5:66:56:7a:20:7a:
90:48:23:f2:f3:f9:bf:7a:4a:e8:61:0b:a2:25:1b:
6d:9c:d4:94:98:00:63:5b:f0:ed:c6:f5:a9:2a:1f:
89:43:12:dd:07:dd:f2:bd:c4:2e:48:bd:cf:5d:98:
5d:21:01:6b:4b:aa:6d:31:79:99:0c:50:1f:19:03:
81:fd:bb:10:05:f7:c4:17:9a:d3:c4:9e:d6:9b:97:
18:cc:ab:c1:93:7b:39:76:0a:02:4e:da:36:80:33:
da:83:9e:39:77:fd:75:3d:4f:42:13:64:30:78:4a:
66:87:4d:a4:2d:df:92:58:6e:1d:9c:29:ca:7c:8d:
b1:1c:32:67:04:51:8a:12:ba:0a:1a:f5:1c:32:56:
95:f7:fd:f7:50:06:32:f5:23:36:8f:bc:e8:05:6b:
23:8a:f7:98:2a:ef:b8:53:44:e0:de:1d:55:85:fe:
12:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:34:42:A9:2F:60:E2:5C:80:26:00:C3:2B:D0:CD:84:DF:24:FF:D0
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/VzRCqS9g4lyAJgDDK9DNhN8k_9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.32.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:e5:25:3e:d3:b6:52:ef:22:3b:93:ce:f8:83:9a:a1:17:e6:
f6:ab:4f:f2:56:46:68:38:0e:01:06:19:c7:04:ec:2e:82:0b:
5f:75:98:76:b1:3e:44:0e:95:3e:d0:60:8f:80:9c:71:cb:6f:
3c:e4:db:df:36:1f:c2:82:27:8c:76:65:39:a1:6e:f6:7b:6d:
92:66:9f:59:7c:a7:c4:b8:36:36:f0:f9:60:7e:5f:a5:bc:e3:
b3:6b:49:90:80:d6:b8:7c:32:33:bc:44:e6:79:cd:bd:ae:f2:
88:8b:5a:2a:e1:ee:f1:d2:00:cf:e5:26:f7:28:a6:0f:1e:5d:
31:ec:04:1c:0c:b2:a5:58:75:8c:15:89:2a:82:f4:29:67:e3:
34:98:21:18:4e:67:40:20:f4:22:3d:1e:ca:5c:8a:32:5a:3c:
3a:e7:12:0e:c2:41:4e:dc:b4:f2:46:41:9c:b4:79:f1:19:86:
7c:af:e2:ec:6c:f4:91:11:d6:7b:c0:ed:91:b9:27:5e:5a:39:
96:69:e5:39:1e:02:94:72:fb:f9:f1:c8:11:87:d8:84:11:53:
b7:94:e5:d7:eb:98:7a:e7:bd:d9:75:34:60:f0:87:91:e4:2b:
20:e4:3c:cd:f1:b9:2e:be:91:97:01:74:45:5e:66:92:b5:a1:
b5:13:65:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:46 2023 by rpki-client on console-ams.rpki-client.org