Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/awVs1vGUCtxrKtyNtNyIIPrPX9g.roa
File: awVs1vGUCtxrKtyNtNyIIPrPX9g.roa (raw, json)
Hash identifier: OofxGYWyC6KIYkuMD2OmwcamUlDb2T+5H0X7kA+useI=
Subject key identifier: 6B:05:6C:D6:F1:94:0A:DC:6B:2A:DC:8D:B4:DC:88:20:FA:CF:5F:D8
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 08128230
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/awVs1vGUCtxrKtyNtNyIIPrPX9g.roa
Signing time: Mon 06 Jun 2022 00:01:20 +0000
ROA not before: Mon 06 Jun 2022 00:01:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 55722
IP address blocks: 151.216.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135430704 (0x8128230)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 6 00:01:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6b056cd6f1940adc6b2adc8db4dc8820facf5fd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e8:75:e0:f8:93:df:59:35:cd:4a:33:95:0f:
9a:43:22:35:63:b0:97:d0:85:d7:55:21:a7:05:4f:
4a:d8:62:93:e9:cc:5e:ec:87:e3:cb:86:41:92:fb:
ea:72:6b:1b:ff:d3:d1:09:a0:e1:59:f4:77:38:b5:
74:38:70:d0:d3:de:cb:d4:a5:4f:de:25:9d:9a:05:
44:d4:40:38:2b:70:e3:ae:9e:1e:c2:e0:90:d5:04:
14:d1:4f:10:59:11:bc:da:ff:db:2e:55:bb:d2:2f:
aa:b6:9c:b3:fc:04:28:4c:61:c8:8d:3d:23:55:f6:
4d:80:00:fc:1a:2e:48:7e:61:74:3b:1d:12:3f:dc:
07:55:a9:69:14:94:12:6d:d4:8b:0e:b7:4a:df:d4:
06:25:05:9b:f0:d3:53:95:5e:53:c3:f2:26:76:32:
74:04:38:28:68:43:3e:82:17:71:a2:9b:11:ee:8a:
67:9f:e4:8d:6e:64:1d:7d:66:ec:ac:b3:ce:d0:a2:
a0:4a:c0:a5:b1:83:a0:98:9b:dc:5a:cb:1f:d0:ca:
85:e7:bb:47:8f:da:98:77:ae:56:a5:4f:ff:fb:38:
8d:10:7a:04:3c:e6:e5:70:fb:2d:e1:5c:da:96:79:
8e:72:0d:a0:6e:80:f7:b4:77:73:37:d1:a9:a3:b8:
9c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:05:6C:D6:F1:94:0A:DC:6B:2A:DC:8D:B4:DC:88:20:FA:CF:5F:D8
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/awVs1vGUCtxrKtyNtNyIIPrPX9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.33.0/24
Signature Algorithm: sha256WithRSAEncryption
95:7d:da:2c:6b:74:88:9b:f2:ed:69:d9:0e:09:3e:52:d7:40:
cc:d8:10:2e:60:f7:8e:3e:1d:9a:97:f0:a6:e6:a2:e4:39:15:
39:bf:9e:ad:d7:67:69:c3:46:ef:d7:b0:d3:be:27:8b:4b:9e:
b9:96:50:ed:bf:97:c8:0f:53:97:f2:4b:74:f9:70:0b:6b:ac:
a6:f3:d5:83:1e:b6:80:1a:6d:13:62:cc:0d:98:1f:05:e1:4f:
50:ad:53:c1:8a:5d:69:24:3c:a2:fd:c5:00:c1:b0:e2:82:53:
6c:ee:ef:be:14:a3:b7:cc:39:5b:62:de:04:c1:69:85:42:45:
66:a4:b5:d8:92:9f:b3:0b:4d:dc:f5:2e:0a:62:cf:24:30:52:
24:ee:91:30:2f:fd:ab:38:56:42:e3:c5:8c:36:e9:02:9b:bc:
ae:c3:61:79:57:8b:ce:e2:8d:b2:5b:58:45:a4:1f:60:a2:98:
98:2e:b5:7e:7e:45:1b:eb:eb:5e:3c:dc:a0:6e:81:be:64:41:
15:36:da:71:c6:48:3a:e9:88:51:d7:eb:96:86:37:51:63:0f:
55:0e:f5:ac:ff:48:76:a5:80:4f:bc:a5:31:fe:b9:04:94:16:
83:16:c3:36:d2:93:e1:1b:90:71:65:78:03:1c:fc:ec:5b:75:
87:cd:9e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:56 2023 by rpki-client on console-fra.rpki-client.org