Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/W3J9GAj3OjG1EktltOqWrV4ROfA.roa
File: W3J9GAj3OjG1EktltOqWrV4ROfA.roa (raw, json)
Hash identifier: VLBKYp7AaCpTE6t4OcCXNltjrzqJ3Bew0m6fuLToW1c=
Subject key identifier: 5B:72:7D:18:08:F7:3A:31:B5:12:4B:65:B4:EA:96:AD:5E:11:39:F0
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 074F9BCC
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/W3J9GAj3OjG1EktltOqWrV4ROfA.roa
Signing time: Sun 22 May 2022 01:52:29 +0000
ROA not before: Sun 22 May 2022 01:52:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 55722
IP address blocks: 151.216.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122657740 (0x74f9bcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: May 22 01:52:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5b727d1808f73a31b5124b65b4ea96ad5e1139f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f6:ce:e7:c7:96:39:a8:e2:be:09:de:11:93:
f2:0a:54:dc:2a:bb:06:08:cc:c8:ff:bb:0c:9b:07:
0e:10:7d:7f:9b:55:c3:c3:9f:9e:6f:27:61:0c:b2:
3b:3b:fa:52:99:95:c8:70:b4:e2:40:a9:7f:81:cc:
1f:62:c9:34:93:3d:4d:fe:ee:87:cb:0c:44:06:f1:
c8:5a:64:01:55:cc:16:05:27:fb:43:15:eb:2e:99:
88:b2:46:25:8e:1b:3f:7c:c6:a5:17:39:91:c6:a6:
6e:f1:cb:54:4f:2c:dd:50:64:8e:70:4a:2f:7f:3b:
8e:f3:0b:e3:27:0b:4a:4c:9c:3c:7e:b9:85:31:4c:
00:8f:f8:83:fc:25:c3:5e:c9:8b:e5:e6:a1:0e:5f:
92:da:12:45:03:33:11:af:0c:96:57:59:34:17:4d:
f2:24:d4:18:41:03:cb:87:e1:34:6b:f6:95:f4:04:
8a:e1:9e:8a:6c:c7:45:51:bc:bc:6b:ad:5f:0a:db:
d8:3c:10:95:30:bf:99:6c:9c:8b:dd:dc:ad:94:62:
bd:ed:b9:cc:a2:fb:e8:f3:65:13:fe:3d:18:1f:4b:
52:47:3a:30:11:23:5c:b8:93:a7:b6:d3:50:a7:91:
8c:bd:f4:4e:48:8a:27:ef:e3:df:33:97:78:3a:56:
f9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:72:7D:18:08:F7:3A:31:B5:12:4B:65:B4:EA:96:AD:5E:11:39:F0
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/W3J9GAj3OjG1EktltOqWrV4ROfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.33.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:43:df:ed:a9:21:1b:d8:22:f4:3f:0a:83:9a:5d:34:da:0d:
3f:cc:d1:6c:21:5a:0a:7d:fc:88:1b:2b:cb:98:4e:5b:ba:cc:
85:ef:5e:46:52:0a:11:1e:2a:35:f8:7a:7a:52:83:29:f9:9a:
07:37:4d:83:59:bc:22:7b:4f:23:55:5d:e5:58:3e:d1:5f:77:
09:45:b1:0d:59:eb:59:2f:e2:cd:f4:53:52:ee:db:5a:d1:1d:
ed:b3:17:57:4d:a8:ed:ca:11:fe:6a:8e:9c:28:be:d1:f1:a7:
c4:c7:1d:51:36:69:d8:98:72:a6:00:69:5e:13:b6:ff:c0:c8:
85:94:9f:32:19:ec:38:aa:e8:41:81:90:e6:13:dd:2a:d7:8a:
01:44:95:8e:94:d0:29:4d:ba:fa:5f:f9:2e:a0:00:5e:4e:df:
0d:66:c2:d3:0d:62:b4:3e:01:2e:1d:03:70:ce:e7:ad:2f:e9:
1c:19:4b:36:d4:54:99:58:83:fc:13:7a:0a:a1:34:95:e9:6a:
80:84:87:6e:ac:5f:5d:4a:75:ea:3a:8d:d5:09:c4:55:6f:3a:
5b:f6:ce:8f:dc:33:ab:1f:09:09:4f:af:d6:0c:e8:76:bb:43:
90:6a:39:1b:32:70:eb:6f:70:79:91:6a:a0:bc:ec:b7:39:50:
27:5d:bd:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:58 2025 by rpki-client