Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Xc_6a2R6RSq2mM6X7paDsrCyHOc.roa
File: Xc_6a2R6RSq2mM6X7paDsrCyHOc.roa (raw, json)
Hash identifier: GnnzG49F7vfr+zJAfzASssQtN3B5odFB7u0L3aWYQR4=
Subject key identifier: 5D:CF:FA:6B:64:7A:45:2A:B6:98:CE:97:EE:96:83:B2:B0:B2:1C:E7
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 06D8A748
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Xc_6a2R6RSq2mM6X7paDsrCyHOc.roa
Signing time: Fri 13 May 2022 00:09:47 +0000
ROA not before: Fri 13 May 2022 00:09:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 17660
IP address blocks: 151.216.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114861896 (0x6d8a748)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: May 13 00:09:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5dcffa6b647a452ab698ce97ee9683b2b0b21ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e9:1d:71:27:29:d2:36:00:e7:bb:16:08:07:
6c:5c:51:53:29:50:9e:a4:06:c9:a4:2e:a9:a9:ea:
6e:db:3e:6d:37:27:3a:a0:8a:c5:f6:08:82:fe:4b:
7b:02:ae:88:cb:6b:e0:7c:42:12:04:5c:5a:86:87:
04:66:3a:75:c7:c2:58:1f:c3:0d:de:d5:5c:8d:82:
6c:68:f0:e0:44:78:f5:a2:8d:48:d1:4d:71:20:7b:
f8:cf:cc:34:97:a8:f2:8a:36:91:b7:e8:43:67:c6:
1c:ed:32:69:c1:91:62:08:67:8a:40:91:1b:7f:9b:
30:ae:25:ce:51:da:53:00:10:39:14:b2:2f:01:76:
40:da:08:06:b8:69:a5:6e:78:04:32:1e:8d:70:e8:
95:3f:2a:9b:a6:dd:b7:85:2c:5a:3d:4e:d5:64:61:
00:d9:40:dc:97:b8:7a:11:52:a6:0c:33:91:47:cd:
0e:ab:32:b5:1b:96:f1:ea:e4:21:05:39:4f:75:b6:
d8:96:8f:1e:d4:74:c8:6c:ed:2a:4b:df:79:45:73:
6d:6f:51:01:0c:a4:d5:bc:9c:be:65:e8:60:89:66:
bf:bd:f3:52:53:3d:58:63:75:63:0e:94:2a:93:ee:
e2:8e:3e:14:b9:0c:b9:5e:47:62:1d:05:c6:43:35:
d8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:CF:FA:6B:64:7A:45:2A:B6:98:CE:97:EE:96:83:B2:B0:B2:1C:E7
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Xc_6a2R6RSq2mM6X7paDsrCyHOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.34.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:c6:f2:a2:79:28:b6:7d:5a:f0:8a:ed:fa:70:d4:43:ab:dd:
64:2e:e6:25:86:4a:2c:78:0b:7c:04:72:8e:1e:8a:dd:49:e2:
2a:5f:87:a2:c6:64:36:a7:e4:24:03:a1:41:98:31:b8:7e:a7:
42:d9:5b:38:f6:9a:2c:38:dc:05:ca:83:51:28:88:a7:d0:ce:
3c:8c:f3:a2:56:f6:0c:38:96:f3:40:4c:89:d8:32:d0:3d:5d:
e3:af:9e:59:46:78:9e:42:3c:67:03:3b:63:fa:0a:4e:4f:7d:
f6:55:ef:d9:08:58:c6:a7:fd:31:63:06:cc:89:de:c4:51:38:
a6:df:93:71:04:1f:e5:67:90:59:46:c9:68:4c:73:48:fe:d5:
81:a6:19:56:5b:42:c9:c6:3b:b4:81:93:8b:98:85:99:37:33:
bf:1e:50:07:12:af:6f:43:f5:18:f8:c6:b5:99:91:59:1c:c6:
c3:bb:ef:90:88:19:f0:73:2f:6c:56:77:c5:11:9c:57:75:9d:
c3:8a:79:74:72:24:49:0d:98:20:95:d1:a4:e3:7a:59:f2:04:
9a:06:e4:a2:49:ee:d2:a2:84:e4:90:4c:11:e8:00:af:88:24:
49:e5:16:a5:93:59:4c:63:98:9c:22:bb:5e:cf:60:19:9a:db:
f6:c7:25:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:46 2023 by rpki-client on console-ams.rpki-client.org