Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Xcrt-mp0GgNPk0erlS-5CKUcP68.roa
File: Xcrt-mp0GgNPk0erlS-5CKUcP68.roa (raw, json)
Hash identifier: mkyJjpl2QSfRzPV8Rby5iO93hofKX9wRTzCYByQsARo=
Subject key identifier: 5D:CA:ED:FA:6A:74:1A:03:4F:93:47:AB:95:2F:B9:08:A5:1C:3F:AF
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 086C19B2
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Xcrt-mp0GgNPk0erlS-5CKUcP68.roa
Signing time: Mon 13 Jun 2022 03:02:21 +0000
ROA not before: Mon 13 Jun 2022 03:02:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 23676
IP address blocks: 151.216.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141302194 (0x86c19b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 13 03:02:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5dcaedfa6a741a034f9347ab952fb908a51c3faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a8:43:ba:64:32:24:e8:92:fa:46:d4:81:8b:
1a:5d:e9:a3:e9:f9:c9:de:2d:ab:f0:c2:68:63:89:
23:c4:8d:db:1c:37:cd:44:f5:52:9f:50:22:58:86:
3f:34:63:74:3b:40:fe:39:43:a4:0d:cc:47:5b:c2:
3e:6c:16:ba:1f:b9:6a:94:bf:64:23:07:6d:2a:c7:
1a:65:2c:47:77:93:40:4b:35:b5:fc:fd:81:f4:20:
94:16:32:4f:99:aa:90:06:5a:3f:a3:47:2a:e7:36:
64:e0:3e:d8:49:05:6f:a8:81:bb:a4:d3:54:32:ac:
21:ec:c2:ba:bc:f1:96:08:7b:c9:65:9d:46:94:3c:
c3:49:95:5f:ed:11:34:6c:c7:d5:e3:45:14:7b:51:
f5:a8:23:de:61:4a:fa:cc:00:35:db:fb:9a:f6:c9:
04:01:df:c5:b5:36:8c:c5:b0:b3:b9:2d:5b:a5:fa:
1d:c8:49:8b:41:87:d1:b7:7b:a0:5c:2b:d0:7a:2e:
e7:ff:b4:3e:8f:f6:b3:5b:47:82:eb:63:86:f2:d5:
fd:af:5f:ae:83:df:8c:33:9d:91:36:22:37:58:3a:
a9:c6:52:bc:5c:6b:4d:46:81:cb:85:98:5f:97:05:
80:eb:2b:d5:0d:d6:e9:1e:b6:73:f5:5f:89:b9:cd:
db:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:CA:ED:FA:6A:74:1A:03:4F:93:47:AB:95:2F:B9:08:A5:1C:3F:AF
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Xcrt-mp0GgNPk0erlS-5CKUcP68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.32.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:22:51:df:a9:f1:5f:88:7f:0d:91:d8:cf:60:7c:6c:8a:19:
2a:30:75:a4:e9:cd:e4:88:19:18:07:bd:a3:c2:7a:21:9c:ff:
33:29:11:dc:2e:ba:47:c3:56:ac:45:3e:d5:71:62:92:0d:94:
ac:cf:52:cc:67:3b:c2:2a:4c:42:d6:7e:a0:a8:5f:d4:58:2d:
bf:cd:2a:37:c8:4d:d6:13:4f:77:2d:70:b2:38:33:8f:2d:63:
24:5d:2e:4a:cb:24:cd:a8:6a:e0:d5:4e:40:ff:2e:b3:fb:8e:
a7:1e:cf:bb:0e:9e:03:16:d9:58:bf:11:e8:0f:18:80:02:dd:
03:a7:37:ac:87:3b:56:70:3b:43:f3:77:60:d6:51:e8:3b:02:
f9:88:d8:5f:34:30:d5:9b:33:a1:b7:b0:f4:03:bf:e8:09:8c:
a0:df:f5:e4:38:7a:9f:0e:dd:45:c1:f2:0d:53:b0:d6:48:9d:
69:35:7e:f9:8f:27:81:6c:ad:f4:9d:7e:68:2f:93:1c:85:48:
04:13:5e:e5:4a:2e:2b:e7:12:6e:e0:fd:93:43:9a:1e:7a:7d:
99:00:7e:81:02:ad:06:9d:92:86:c6:8e:50:14:4f:07:b2:63:
6a:49:06:e9:65:b0:4e:a8:bc:1a:6f:29:de:c9:d2:af:b2:be:
ce:30:c0:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:28 2024 by rpki-client on console-fra.rpki-client.org