Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/c4q7s6WiomE61LRt8Q2Su97TJaM.roa
File: c4q7s6WiomE61LRt8Q2Su97TJaM.roa (raw, json)
Hash identifier: b6jeYoxzYU3c0CqNdOo0sb34uehjEI+NYqTybVsp7aM=
Subject key identifier: 73:8A:BB:B3:A5:A2:A2:61:3A:D4:B4:6D:F1:0D:92:BB:DE:D3:25:A3
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 06A14552
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/c4q7s6WiomE61LRt8Q2Su97TJaM.roa
Signing time: Mon 09 May 2022 00:51:11 +0000
ROA not before: Mon 09 May 2022 00:51:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 23676
IP address blocks: 151.216.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111232338 (0x6a14552)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: May 9 00:51:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=738abbb3a5a2a2613ad4b46df10d92bbded325a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e5:cf:13:6d:b4:ad:c9:93:6d:58:ec:ce:2c:
c9:a8:64:a8:0a:82:df:30:2b:f6:3e:24:43:be:ce:
30:89:f5:78:47:dc:cc:44:e6:a0:fc:7e:48:5b:ca:
b5:25:76:94:94:b3:0c:d9:e9:46:57:ae:34:5e:ce:
27:86:b7:22:5e:bc:86:05:da:13:f6:57:df:fa:ff:
07:07:dc:31:93:1f:5f:48:c1:40:44:fd:c1:b1:f3:
c1:ad:fc:8d:ee:b4:8f:b0:b0:ef:80:3e:96:bb:19:
e6:ae:75:d3:db:ce:a4:2b:27:70:a8:66:f3:3e:0f:
7a:a6:10:5a:ce:7a:2f:7b:a1:0b:1b:6c:75:28:37:
4e:69:49:f8:32:cf:78:95:23:31:a2:47:f6:86:3f:
08:02:1f:cc:ae:f5:94:b4:44:42:6b:c9:3c:5d:f1:
54:ad:0b:b6:2c:60:ba:97:1e:8a:e9:92:9a:44:87:
e1:ab:19:ea:13:47:1d:8a:b7:1a:a8:f6:8e:cc:90:
e6:9e:c0:bd:e1:12:6c:51:57:63:6c:cc:f6:c0:a6:
5b:ab:d6:af:02:b0:50:1f:ce:52:6a:23:16:05:7b:
90:08:95:21:89:f7:bf:fd:18:0d:57:90:a2:06:bd:
62:d4:01:82:3c:03:d6:ed:ed:70:9a:03:6a:77:98:
f8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8A:BB:B3:A5:A2:A2:61:3A:D4:B4:6D:F1:0D:92:BB:DE:D3:25:A3
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/c4q7s6WiomE61LRt8Q2Su97TJaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.32.0/24
Signature Algorithm: sha256WithRSAEncryption
52:a3:0e:07:a0:7d:60:5c:dc:5b:ce:50:13:2e:99:5c:44:a3:
b2:66:4c:c2:76:3d:4f:4f:b6:74:25:ba:e0:58:d3:b3:2e:80:
33:63:1c:34:e1:d5:c8:fd:05:b0:1a:d2:20:d7:72:91:59:51:
d5:2c:67:6b:c9:fb:02:94:d6:59:64:55:87:48:ea:35:f8:69:
6f:e7:64:76:14:9e:c6:0a:b1:d5:e2:4b:de:2f:a2:d9:37:3a:
3d:09:ae:c1:3b:0a:de:c7:90:91:c5:e0:d0:bd:4d:cb:39:fa:
d5:a2:80:65:87:af:3c:7c:c7:b1:b7:39:e5:6a:8a:3f:fc:0f:
f3:1a:6e:16:b1:3d:ea:4e:66:44:7d:cf:11:41:a2:f9:25:5e:
69:17:ae:ee:e1:28:62:7e:ff:8c:14:9f:38:bc:ea:9e:a2:08:
77:94:83:82:d9:df:d2:cb:17:a5:ab:fa:13:12:85:65:e8:39:
7a:ee:ce:d1:ce:f0:79:51:0c:16:cc:4e:53:69:ab:e7:83:85:
34:63:84:e3:54:68:0e:6e:e6:f4:de:1e:77:19:51:72:94:2a:
ba:ab:4d:55:03:3e:36:ee:07:41:08:6c:80:7f:c1:80:f6:a3:
2f:7e:6e:d4:09:b0:4a:36:ba:32:5b:93:13:7d:39:84:7f:17:
fb:84:92:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:35 2025 by rpki-client