Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/XEAGGieUftzImjD_vkFM-UovNkM.roa
File: XEAGGieUftzImjD_vkFM-UovNkM.roa (raw, json)
Hash identifier: S4lo34g+PK+uiy3fgsGOD0Ke7ZN7yihuJ5HylsTFIgc=
Subject key identifier: 5C:40:06:1A:27:94:7E:DC:C8:9A:30:FF:BE:41:4C:F9:4A:2F:36:43
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 093E5EAF
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/XEAGGieUftzImjD_vkFM-UovNkM.roa
Signing time: Wed 29 Jun 2022 03:47:03 +0000
ROA not before: Wed 29 Jun 2022 03:47:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 23676
IP address blocks: 151.216.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155082415 (0x93e5eaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 29 03:47:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c40061a27947edcc89a30ffbe414cf94a2f3643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:cc:77:74:c1:5e:f2:3b:be:64:5f:9b:03:ee:
21:35:9e:c8:f9:d0:f9:90:e4:04:b7:3d:4e:18:19:
24:ec:98:9d:61:f9:58:13:15:33:cd:38:9c:16:a4:
fc:44:ea:16:9a:42:41:04:c4:cf:64:b0:8f:84:d0:
c6:bf:ae:3f:c0:3d:b5:03:1c:d0:c7:4a:df:62:c5:
56:32:8c:c0:3c:25:39:d8:1e:22:56:cb:49:51:82:
69:54:0a:3f:e6:db:2a:d4:ed:d9:04:49:59:82:0f:
4b:86:c9:a3:62:53:1b:89:21:78:76:00:b4:34:cd:
e5:f7:bf:3e:20:44:18:88:b5:a7:25:db:ca:24:6c:
3d:38:88:df:8c:fd:f8:46:41:c8:04:92:76:09:2a:
75:13:fa:41:78:61:d4:0c:93:fd:ec:e2:dd:e1:ba:
33:6a:a1:88:89:e8:85:e8:cb:5e:cd:2b:ed:06:cc:
b5:7b:58:e4:ae:97:95:75:7e:a1:1c:72:3f:57:2f:
de:e5:90:cb:2b:33:29:f7:37:51:08:db:31:e3:85:
bf:8e:9b:84:9f:50:af:03:67:f8:87:fd:e5:59:ae:
7a:91:6a:d8:9e:61:a5:fd:4c:76:d3:35:83:7a:47:
a4:5a:6d:84:f3:7e:0c:2c:d0:7f:bc:d9:e9:41:a7:
f5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:40:06:1A:27:94:7E:DC:C8:9A:30:FF:BE:41:4C:F9:4A:2F:36:43
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/XEAGGieUftzImjD_vkFM-UovNkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.32.0/24
Signature Algorithm: sha256WithRSAEncryption
41:a2:64:15:05:d8:e6:ab:6f:e3:bb:77:67:e9:d2:09:a2:42:
31:bb:80:5a:5f:89:b2:34:c9:d0:97:1a:31:cc:e8:a3:86:2d:
24:04:04:e9:eb:66:2b:2b:6b:f4:0d:c1:ba:d1:62:94:42:a3:
dc:dc:57:98:0f:a3:82:68:f4:44:52:ea:fc:66:3d:3a:15:5f:
63:f5:ee:48:0e:fb:0f:2d:bc:b1:cf:06:c8:81:ce:86:bd:28:
d5:9d:02:d0:02:1b:ea:1f:d8:63:02:2b:ca:6e:30:09:96:11:
50:5b:b0:00:b0:83:75:29:39:57:2f:90:c5:c7:46:51:4e:c2:
b2:98:7c:33:ee:c8:c2:8d:e0:dc:5b:fa:96:83:db:d4:e4:48:
bb:a3:8f:52:bd:18:aa:15:18:61:4b:4e:ec:a1:34:11:de:c0:
54:00:64:03:59:d3:bb:97:18:c5:aa:80:16:09:28:a7:e0:a8:
25:a9:ac:5f:bb:1a:df:c9:be:7b:ce:9c:62:22:42:e8:54:cb:
08:cc:95:f0:23:df:05:06:57:14:2e:44:c4:6d:3a:41:a7:29:
f5:d8:0a:a8:78:90:dd:7c:dc:d1:8d:da:35:43:86:8f:5f:82:
63:34:0f:b4:90:03:ab:09:63:3b:ca:94:be:17:3a:d7:58:e0:
a9:57:5d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:46 2023 by rpki-client on console-ams.rpki-client.org