Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/cQPKJP4Yk90UG5R5ECDwLDuC-5Q.roa
File: cQPKJP4Yk90UG5R5ECDwLDuC-5Q.roa (raw, json)
Hash identifier: B0+TZ0H44RdYlYLr0htbEcWPGgrzHeXREG3HrOqU+Zk=
Subject key identifier: 71:03:CA:24:FE:18:93:DD:14:1B:94:79:10:20:F0:2C:3B:82:FB:94
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 08F72B9C
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/cQPKJP4Yk90UG5R5ECDwLDuC-5Q.roa
Signing time: Thu 23 Jun 2022 05:31:32 +0000
ROA not before: Thu 23 Jun 2022 05:31:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 23676
IP address blocks: 151.216.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150416284 (0x8f72b9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 23 05:31:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7103ca24fe1893dd141b94791020f02c3b82fb94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:be:10:9b:94:ef:51:0e:10:ec:28:ba:5f:03:
45:58:3f:dd:5e:73:ce:e7:0d:28:66:19:c8:f4:bd:
cd:8e:3f:2b:9c:a6:a0:95:2a:56:f3:75:3d:dd:3c:
24:21:19:28:28:50:a9:e1:d1:e1:0d:12:f9:28:6b:
3a:f7:32:09:56:b8:48:36:b2:77:cf:ae:d2:d3:3c:
20:f9:dd:c5:13:07:18:70:9d:e2:5e:9a:8e:f7:f2:
b3:19:98:35:dd:94:4f:a0:57:52:64:51:d8:23:d1:
1c:95:0d:5d:13:00:85:7f:46:13:93:17:df:52:2e:
ab:cc:fb:57:46:67:c6:c5:3e:40:6f:df:3f:b4:25:
7d:65:e4:29:c0:fa:36:86:e1:1d:89:2e:a4:b3:ef:
1a:15:9d:5e:78:11:5b:46:8c:23:13:b0:2f:32:82:
21:68:a2:c4:14:d3:c5:d5:ad:52:1b:b4:96:44:2f:
49:44:a9:24:7d:31:e8:55:44:e1:fa:9c:72:dd:2b:
ec:54:a8:16:9b:24:e5:06:14:d6:20:3e:68:c2:1c:
78:6b:f1:73:8f:d9:fa:ba:bb:76:88:ab:fb:c6:62:
b1:74:7d:e8:a1:ac:8a:a4:66:c7:41:2e:e7:28:60:
9f:1d:ca:1a:9a:49:97:14:ad:60:6b:53:dc:7e:8e:
8b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:03:CA:24:FE:18:93:DD:14:1B:94:79:10:20:F0:2C:3B:82:FB:94
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/cQPKJP4Yk90UG5R5ECDwLDuC-5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.32.0/24
Signature Algorithm: sha256WithRSAEncryption
13:6f:cb:80:cc:01:c4:c5:e0:61:11:f3:5e:26:75:b1:af:2b:
ed:b0:e8:29:a9:72:57:43:ea:3c:09:ce:88:15:29:a5:81:e2:
49:9d:09:04:2d:1e:be:61:d7:d4:91:fb:72:a6:36:78:f5:c5:
24:71:1e:1d:6b:61:b3:92:17:fc:c6:76:f9:fe:90:1f:96:12:
63:89:6f:2a:b9:5a:89:3f:47:f0:d9:71:3f:bc:af:e1:3b:61:
f8:e0:d5:16:fc:a2:b1:16:10:08:6b:a5:10:4b:79:bd:d7:34:
eb:43:f8:38:20:19:3e:89:3b:09:23:fb:25:13:b1:e7:70:be:
13:74:c6:9d:bb:18:15:3d:aa:99:5b:66:f9:64:9a:a6:ce:53:
ef:9e:2d:01:3e:71:35:6a:93:8d:cc:08:bb:f2:ea:54:02:77:
7d:cd:61:2b:59:42:8e:1a:5d:57:46:d9:2b:ad:12:45:be:cb:
45:a0:ab:9f:ed:5b:95:3e:6a:2e:f4:a4:fd:fe:12:1b:9c:53:
bc:cf:7d:93:7a:da:6d:04:27:59:e9:57:40:e6:b7:2a:97:80:
57:b5:e8:57:1f:bb:67:03:0a:59:82:3e:ab:e5:8e:2e:29:05:
77:ba:19:37:46:1e:d4:ec:8a:1d:a5:1d:b9:d5:f7:d0:15:0c:
b1:bd:0c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:47 2023 by rpki-client on console-ams.rpki-client.org