Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/aX0mFGvmFcxZCApisGqHiNxYNnA.roa
File: aX0mFGvmFcxZCApisGqHiNxYNnA.roa (raw, json)
Hash identifier: c2J7GW8IgWeZUf3arbHo6IX03ojdpGNZOWQJqwW9wwc=
Subject key identifier: 69:7D:26:14:6B:E6:15:CC:59:08:0A:62:B0:6A:87:88:DC:58:36:70
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 09883810
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/aX0mFGvmFcxZCApisGqHiNxYNnA.roa
Signing time: Mon 04 Jul 2022 00:29:25 +0000
ROA not before: Mon 04 Jul 2022 00:29:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 23676
IP address blocks: 151.216.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159922192 (0x9883810)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jul 4 00:29:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=697d26146be615cc59080a62b06a8788dc583670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9e:bc:95:54:12:e3:50:08:c8:a7:eb:3c:54:
ab:20:35:2c:aa:6c:a8:0f:21:e5:55:7a:6f:41:e2:
54:61:61:7b:82:64:f0:4a:96:1a:af:f9:a8:df:89:
c0:a2:45:ee:a5:3f:90:09:56:38:ef:20:f6:bc:e0:
9a:ac:ea:35:cb:47:01:fa:2b:1a:63:a9:5c:ba:13:
d5:9e:6c:9b:0c:5f:ea:8d:ff:c6:23:a4:e8:a6:5d:
4a:a4:aa:16:5b:88:1e:58:b0:e1:29:34:48:da:15:
09:27:23:f7:2f:2e:29:95:2d:4d:61:07:2f:9b:66:
81:58:89:da:dc:2b:1c:fa:0f:b1:3a:72:81:65:54:
5a:7e:f4:d8:c7:24:74:82:dc:81:b0:fd:e1:59:f0:
0f:d8:ef:eb:bb:41:e8:02:be:1e:5e:91:7f:22:cd:
2d:53:51:37:2e:e6:33:45:83:18:88:10:96:9c:ba:
b5:0a:14:21:68:ae:e2:5c:61:01:ce:4f:f6:b9:51:
a7:fd:fb:dc:e1:c1:8d:91:f0:92:c1:12:c2:cc:22:
ce:fb:9b:6f:87:99:5f:d3:a2:d2:0b:11:75:07:cf:
4b:80:02:e1:8f:d3:44:12:4b:a0:d4:34:cb:44:b7:
d1:e1:52:a1:81:e6:bb:02:61:c9:af:38:bc:73:e7:
d1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:7D:26:14:6B:E6:15:CC:59:08:0A:62:B0:6A:87:88:DC:58:36:70
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/aX0mFGvmFcxZCApisGqHiNxYNnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.32.0/24
Signature Algorithm: sha256WithRSAEncryption
66:9d:bc:22:b0:15:11:34:f1:a1:ce:f0:40:70:8f:0e:5b:f2:
65:4b:d6:01:54:04:41:8c:c8:07:07:07:0c:da:1c:57:ca:f2:
cb:f2:6a:7f:f7:48:45:4b:da:3e:c6:73:42:24:bd:9a:c0:81:
c0:ad:90:a5:e2:2a:33:a9:41:59:b1:7e:eb:0d:4d:07:19:ff:
3b:bc:e8:73:83:ab:88:d3:47:29:46:f9:10:fd:a9:e5:95:5c:
85:74:bc:1f:00:2a:00:bc:cb:cf:51:e4:99:40:6c:ab:f3:13:
9e:ed:a6:18:73:fe:aa:ef:fa:bd:04:5b:4e:5a:c0:35:29:51:
c2:44:d0:cd:41:ab:4a:da:f2:9f:0d:8c:a3:2e:43:77:df:33:
a4:ff:00:76:78:d7:2a:1e:5d:44:9e:32:37:76:a4:02:39:1e:
00:a2:78:e4:d4:ac:ce:5b:61:38:04:bc:7c:7c:97:43:d8:5f:
ea:6e:cb:13:6d:5e:a7:ff:06:15:94:2c:51:71:04:18:05:99:
1e:11:e8:d1:4a:6c:cc:1e:4d:17:a4:07:b6:87:78:bd:03:2f:
89:a6:e1:96:96:a3:ba:22:bb:9e:b8:41:ab:b5:27:69:09:f2:
87:50:b0:6b:83:76:43:9c:7a:9b:95:b1:bc:58:80:9e:d3:90:
1f:85:f4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:39:31 2025 by rpki-client