Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/XtRfLnJekQlIaPiJOLD7lckoaeA.roa
File: XtRfLnJekQlIaPiJOLD7lckoaeA.roa (raw, json)
Hash identifier: 9/lbfR9VAfjzp5dczi0yIegMdr9cVRGR25ThGO2hXkA=
Subject key identifier: 5E:D4:5F:2E:72:5E:91:09:48:68:F8:89:38:B0:FB:95:C9:28:69:E0
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 08770D62
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/XtRfLnJekQlIaPiJOLD7lckoaeA.roa
Signing time: Tue 14 Jun 2022 00:02:44 +0000
ROA not before: Tue 14 Jun 2022 00:02:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 55722
IP address blocks: 151.216.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142019938 (0x8770d62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 14 00:02:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ed45f2e725e91094868f88938b0fb95c92869e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:85:78:42:66:94:b8:85:56:07:8c:0e:21:ee:
49:a3:f7:1f:91:63:5c:fd:6a:fe:6a:cc:ae:d2:c9:
35:c7:a8:7f:fc:2a:95:38:ba:fc:18:25:07:5a:e0:
63:c9:af:ca:cb:fa:21:27:76:00:cb:0d:be:a8:b0:
c5:89:49:06:59:ae:57:97:7b:71:2a:87:d0:77:1f:
90:2c:51:2f:da:94:7c:e6:85:df:c7:fb:ae:61:e1:
34:b8:db:f4:cd:23:da:57:6e:af:1c:f2:86:85:42:
0a:b3:58:12:72:2b:52:92:24:4b:25:d7:6d:51:23:
57:dc:42:22:a0:ef:da:8c:67:11:f6:2d:4f:d7:59:
af:d3:55:55:9e:69:90:79:0f:9e:61:7e:71:2b:1c:
b2:e3:94:3f:78:57:8c:99:10:1f:c2:bd:94:ba:4b:
6f:ce:7d:78:4a:9d:81:01:dc:c2:43:28:ad:37:43:
fd:9e:60:63:13:3f:d4:b2:1c:d6:1c:72:e3:68:ff:
2f:de:f2:b8:b4:83:f8:a2:94:84:c8:28:82:7d:97:
17:50:a6:36:71:fe:4d:99:d4:53:47:42:da:bc:b2:
44:4b:f5:28:32:f7:fe:78:55:00:07:68:6e:96:81:
1e:46:38:cf:d7:f2:f3:6f:9a:93:1d:ad:10:18:f9:
e0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D4:5F:2E:72:5E:91:09:48:68:F8:89:38:B0:FB:95:C9:28:69:E0
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/XtRfLnJekQlIaPiJOLD7lckoaeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.33.0/24
Signature Algorithm: sha256WithRSAEncryption
40:ed:4a:77:38:43:78:3e:b6:26:1e:26:0e:d4:b6:be:a5:04:
7c:61:b1:73:73:cd:6e:bc:54:64:b3:e3:e4:05:ba:49:e9:c6:
d7:8b:94:99:2e:88:7d:aa:d5:26:e8:63:7f:69:54:50:f7:6e:
55:40:c5:3d:06:df:cc:92:17:8b:2c:5c:2d:81:80:88:b0:ed:
b8:ff:24:25:46:ed:b7:3e:60:d6:af:8c:7f:da:b5:72:60:61:
57:b8:b9:ce:56:07:61:90:f5:95:22:df:8c:ff:b4:6b:cc:a5:
7f:3e:65:f5:4b:c6:0c:6c:19:5d:d7:2f:eb:12:53:f4:10:a6:
56:ab:de:02:06:2f:f9:41:de:ae:ea:bc:39:02:54:7b:87:51:
9b:15:0c:3e:00:b3:14:e5:73:76:2a:dd:1d:5c:6e:7f:10:f8:
d9:84:13:8e:4a:2a:3f:8e:05:d0:05:b6:15:8e:34:c4:c8:11:
73:30:8d:b1:4e:47:85:3f:c4:ec:fd:16:d2:e1:0d:89:7b:e9:
1d:20:64:74:25:76:66:46:78:8c:55:bc:20:40:e8:d2:37:c3:
69:a3:6c:94:ce:62:cd:4b:5f:82:43:be:dd:b7:7e:9a:8f:a1:
92:0c:67:56:e6:42:19:ba:70:b0:66:8b:17:94:f0:22:c3:4d:
7c:31:6c:3b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECHcNYjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDYx
NDAwMDI0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWVkNDVmMmU3MjVl
OTEwOTQ4NjhmODg5MzhiMGZiOTVjOTI4NjllMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMGFeEJmlLiFVgeMDiHuSaP3H5FjXP1q/mrMrtLJNceof/wq
lTi6/BglB1rgY8mvysv6ISd2AMsNvqiwxYlJBlmuV5d7cSqH0HcfkCxRL9qUfOaF
38f7rmHhNLjb9M0j2ldurxzyhoVCCrNYEnIrUpIkSyXXbVEjV9xCIqDv2oxnEfYt
T9dZr9NVVZ5pkHkPnmF+cSscsuOUP3hXjJkQH8K9lLpLb859eEqdgQHcwkMorTdD
/Z5gYxM/1LIc1hxy42j/L97yuLSD+KKUhMgogn2XF1CmNnH+TZnUU0dC2ryyREv1
KDL3/nhVAAdobpaBHkY4z9fy82+akx2tEBj54CUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRe1F8ucl6RCUho+Ik4sPuVyShp4DAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L1h0UmZMbkpla1FsSWFQaUpPTEQ3bGNrb2FlQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJfYITANBgkqhkiG9w0BAQsFAAOC
AQEAQO1KdzhDeD62Jh4mDtS2vqUEfGGxc3PNbrxUZLPj5AW6SenG14uUmS6IfarV
Juhjf2lUUPduVUDFPQbfzJIXiyxcLYGAiLDtuP8kJUbttz5g1q+Mf9q1cmBhV7i5
zlYHYZD1lSLfjP+0a8ylfz5l9UvGDGwZXdcv6xJT9BCmVqveAgYv+UHeruq8OQJU
e4dRmxUMPgCzFOVzdirdHVxufxD42YQTjkoqP44F0AW2FY40xMgRczCNsU5HhT/E
7P0W0uENiXvpHSBkdCV2ZkZ4jFW8IEDo0jfDaaNslM5izUtfgkO+3bd+mo+hkgxn
VuZCGbpwsGaLF5TwIsNNfDFsOw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:46 2023 by rpki-client on console-ams.rpki-client.org