Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Xgd6jDVGnAThsBDZhpWGOARe4g4.roa
File: Xgd6jDVGnAThsBDZhpWGOARe4g4.roa (raw, json)
Hash identifier: 0v+Hp65fo0/4q/JYZYvQPLxM9RPVUiPyYWZ3i3pkeMg=
Subject key identifier: 5E:07:7A:8C:35:46:9C:04:E1:B0:10:D9:86:95:86:38:04:5E:E2:0E
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 07EB48CE
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Xgd6jDVGnAThsBDZhpWGOARe4g4.roa
Signing time: Fri 03 Jun 2022 01:34:20 +0000
ROA not before: Fri 03 Jun 2022 01:34:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 23676
IP address blocks: 151.216.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132860110 (0x7eb48ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 3 01:34:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5e077a8c35469c04e1b010d986958638045ee20e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ea:de:4f:c1:5d:d5:ca:1e:12:65:7e:b9:03:
ff:aa:47:b9:85:a7:c7:d5:af:81:27:f1:0a:0d:1d:
e4:38:65:ba:f4:52:65:bf:b6:cb:0c:88:a4:a4:90:
99:41:82:76:17:94:2b:99:8a:ac:bc:99:45:6d:42:
ee:b6:cd:8d:e9:74:e9:e6:78:43:ac:43:e2:d1:8c:
a0:71:21:42:b2:d0:2d:e5:f5:4f:e3:88:1f:4d:9e:
8e:ac:b1:56:10:4d:c5:9d:04:09:40:49:00:7a:0f:
65:1d:c5:2b:0d:72:55:2a:31:ba:ec:7d:84:b8:35:
40:f1:03:87:7c:31:8c:4b:56:f3:60:a7:d0:aa:30:
e4:e4:66:1e:50:1e:9e:b9:c3:84:9c:1d:fa:1c:43:
d5:2e:69:78:3c:40:7e:ca:da:d1:d9:86:ee:e3:e7:
bf:7a:fd:33:68:52:16:a4:5b:de:84:9a:35:cd:f7:
aa:f8:45:07:f4:e7:03:9f:77:6c:ce:3a:06:6d:54:
83:04:fb:dc:18:35:c3:79:a7:aa:65:07:24:e3:51:
77:43:46:d3:30:78:81:08:f1:2d:01:db:02:98:90:
a9:39:f9:7d:01:9e:62:20:1c:23:00:73:d5:cc:9c:
8f:ac:ce:88:3b:08:4e:c2:ee:53:3c:56:f5:d7:5b:
65:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:07:7A:8C:35:46:9C:04:E1:B0:10:D9:86:95:86:38:04:5E:E2:0E
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Xgd6jDVGnAThsBDZhpWGOARe4g4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.32.0/24
Signature Algorithm: sha256WithRSAEncryption
90:0c:6e:89:e7:fd:7f:ba:f3:78:19:be:82:c1:c8:c8:c1:c7:
05:8e:c7:ff:9a:4e:ed:4e:66:55:06:2f:b7:0c:d1:fb:d9:50:
28:06:eb:24:2b:6c:a3:8a:ea:02:a4:2b:bc:8a:63:9e:69:6a:
6b:4b:7f:d5:fc:57:99:b8:e7:8d:fe:a2:86:53:56:af:2c:70:
b1:60:a3:5b:e5:b3:7c:4d:50:f9:be:fd:13:3f:a9:0b:dc:ce:
49:59:20:19:11:41:41:34:26:d1:60:f1:f8:a5:e1:cb:54:7f:
38:30:a2:59:3f:11:69:b9:56:a1:79:c6:9a:31:07:b0:05:d4:
2f:6f:10:e1:58:14:99:91:d7:6b:47:9f:94:87:a6:db:71:d2:
85:e0:a4:6b:6b:04:f9:81:fe:ef:69:e9:0e:2f:27:44:a5:b1:
4b:4f:c0:b3:f0:54:34:0d:f4:c8:3a:e9:52:53:68:f9:66:da:
50:bd:c5:a1:74:95:8a:09:b1:06:bd:9a:bc:ac:28:27:8b:bd:
1b:f6:57:cc:c6:cf:06:87:a0:c9:97:2e:d6:da:33:62:31:8a:
6c:aa:45:64:b2:5c:d9:df:1a:15:ed:4f:6c:3f:10:b0:a6:4a:
3a:db:4e:56:55:80:c6:00:61:74:4c:05:5a:7f:67:6e:3f:63:
35:eb:00:2b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEB+tIzjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDYw
MzAxMzQyMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWUwNzdhOGMzNTQ2
OWMwNGUxYjAxMGQ5ODY5NTg2MzgwNDVlZTIwZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANfq3k/BXdXKHhJlfrkD/6pHuYWnx9WvgSfxCg0d5DhluvRS
Zb+2ywyIpKSQmUGCdheUK5mKrLyZRW1C7rbNjel06eZ4Q6xD4tGMoHEhQrLQLeX1
T+OIH02ejqyxVhBNxZ0ECUBJAHoPZR3FKw1yVSoxuux9hLg1QPEDh3wxjEtW82Cn
0Kow5ORmHlAenrnDhJwd+hxD1S5peDxAfsra0dmG7uPnv3r9M2hSFqRb3oSaNc33
qvhFB/TnA593bM46Bm1UgwT73Bg1w3mnqmUHJONRd0NG0zB4gQjxLQHbApiQqTn5
fQGeYiAcIwBz1cycj6zOiDsITsLuUzxW9ddbZbcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBReB3qMNUacBOGwENmGlYY4BF7iDjAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L1hnZDZqRFZHbkFUaHNCRFpocFdHT0FSZTRnNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJfYIDANBgkqhkiG9w0BAQsFAAOC
AQEAkAxuief9f7rzeBm+gsHIyMHHBY7H/5pO7U5mVQYvtwzR+9lQKAbrJCtso4rq
AqQrvIpjnmlqa0t/1fxXmbjnjf6ihlNWryxwsWCjW+WzfE1Q+b79Ez+pC9zOSVkg
GRFBQTQm0WDx+KXhy1R/ODCiWT8RablWoXnGmjEHsAXUL28Q4VgUmZHXa0eflIem
23HSheCka2sE+YH+72npDi8nRKWxS0/As/BUNA30yDrpUlNo+WbaUL3FoXSVigmx
Br2avKwoJ4u9G/ZXzMbPBoegyZcu1tozYjGKbKpFZLJc2d8aFe1PbD8QsKZKOttO
VlWAxgBhdEwFWn9nbj9jNesAKw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:56 2023 by rpki-client on console-fra.rpki-client.org