Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/aHHc99wtSn8BQzIyiPlPy50l_vU.roa
File: aHHc99wtSn8BQzIyiPlPy50l_vU.roa (raw, json)
Hash identifier: TltGNg02O0T068hnrZ/YlcmEI0qUu+VQigds+tq8Kxc=
Subject key identifier: 68:71:DC:F7:DC:2D:4A:7F:01:43:32:32:88:F9:4F:CB:9D:25:FE:F5
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 08BE2F21
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/aHHc99wtSn8BQzIyiPlPy50l_vU.roa
Signing time: Sun 19 Jun 2022 00:11:44 +0000
ROA not before: Sun 19 Jun 2022 00:11:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 23676
IP address blocks: 151.216.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146681633 (0x8be2f21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 19 00:11:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6871dcf7dc2d4a7f0143323288f94fcb9d25fef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3d:36:2b:e2:fd:5c:8c:e2:ef:10:75:b7:19:
f0:f1:a1:73:97:43:43:19:aa:0b:ca:e1:e2:69:82:
52:ac:92:46:4c:15:60:83:4c:37:48:70:d3:a1:4e:
ef:ab:c1:7f:d2:d5:e9:3d:14:36:25:91:9d:80:64:
09:d4:55:51:33:11:fd:d0:6e:43:a1:8a:85:6b:22:
24:09:66:f0:bb:de:24:0b:df:d5:2e:cd:22:df:a7:
24:5e:8f:78:06:7e:63:5b:a2:4b:88:9f:c2:e3:4e:
15:85:36:68:53:9b:91:40:b3:35:ee:f5:e8:e8:d6:
65:64:97:28:69:17:8c:42:1a:ee:32:66:db:c8:ae:
39:8c:8f:74:7f:43:f8:53:f1:09:51:14:cf:b3:29:
f0:81:c7:c3:a0:ee:b7:e2:0f:65:8a:ec:51:23:6f:
d7:07:e4:6d:09:60:aa:7e:47:2c:47:95:f5:9c:20:
49:72:b4:e8:b4:c3:c6:4a:02:37:ab:b8:5b:54:ff:
e8:1e:cc:65:25:1b:6e:4d:39:84:9f:e3:16:41:ac:
5e:ef:f2:46:87:31:5a:b6:cf:4c:3a:f5:28:0d:af:
4d:c6:be:85:97:3e:1f:2e:f2:c6:4d:88:55:fa:9c:
11:bb:7f:c6:c4:03:77:1a:91:72:19:89:59:91:02:
f5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:71:DC:F7:DC:2D:4A:7F:01:43:32:32:88:F9:4F:CB:9D:25:FE:F5
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/aHHc99wtSn8BQzIyiPlPy50l_vU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.32.0/24
Signature Algorithm: sha256WithRSAEncryption
28:57:96:72:36:d1:00:d1:71:5d:95:b5:cf:04:0b:df:03:a9:
d4:8e:d6:cb:a6:65:7a:8a:5e:e3:5c:1b:d2:97:c3:9b:dc:3f:
71:47:fe:de:6a:39:6e:ae:06:e1:f8:a8:fe:b3:6f:da:44:ea:
33:72:29:e7:be:24:d9:f1:b6:74:14:5a:14:bc:fd:d1:9d:65:
7b:44:f3:b1:c1:31:67:06:b1:cf:c1:5d:d8:07:90:0d:ef:2d:
15:cc:3f:55:e9:8c:aa:d2:8a:68:b0:94:1b:18:74:ea:fa:b7:
ea:1b:87:f0:6a:ad:32:15:44:04:32:ed:54:e7:c6:d4:bd:6d:
7f:bc:4d:77:43:81:3d:17:bc:02:2f:43:67:a1:05:8f:3e:49:
db:a9:e2:4e:c8:1b:bf:82:98:87:32:2c:58:bf:14:86:80:de:
03:a8:7d:9d:cf:89:d1:73:0a:e0:ae:52:59:11:3c:2b:78:b6:
8d:45:c9:ff:85:af:4c:f0:15:19:f7:fa:66:00:ec:f8:e1:c9:
fa:ce:82:e5:6e:1c:50:04:fd:4f:66:3e:c3:4e:19:5f:34:19:
34:94:e2:99:c0:29:3f:28:1a:9c:8e:05:75:f4:e9:22:08:f9:
6f:00:bb:b8:d3:a4:b7:75:fa:89:3c:2e:18:60:11:e4:a6:0c:
65:6a:ff:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:56 2023 by rpki-client on console-fra.rpki-client.org