Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/dLKXqPB1u8ln1bbn2JQvxAaKwEQ.roa
File: dLKXqPB1u8ln1bbn2JQvxAaKwEQ.roa (raw, json)
Hash identifier: aK7A3R98V6NUGO1nLmkm9QSEeGOHKXmxIWL7q27w51w=
Subject key identifier: 74:B2:97:A8:F0:75:BB:C9:67:D5:B6:E7:D8:94:2F:C4:06:8A:C0:44
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 076D9031
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/dLKXqPB1u8ln1bbn2JQvxAaKwEQ.roa
Signing time: Tue 24 May 2022 04:58:29 +0000
ROA not before: Tue 24 May 2022 04:58:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 23676
IP address blocks: 151.216.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124620849 (0x76d9031)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: May 24 04:58:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=74b297a8f075bbc967d5b6e7d8942fc4068ac044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:85:0c:39:85:c8:72:a8:35:b7:39:a3:80:aa:
9f:1b:5c:c9:69:bc:d0:75:36:58:18:56:00:a9:aa:
98:42:9a:7e:95:30:a2:f0:7d:ff:87:58:9a:dd:da:
c2:d7:6e:a5:fd:24:a7:2d:c6:49:77:d0:02:8e:78:
87:ac:d8:f8:1e:02:c0:8a:7a:e8:8f:67:4f:1f:3c:
22:ac:f0:da:7b:04:1e:b6:84:bb:08:91:3c:8b:7e:
b9:ec:9c:58:f2:1b:36:3f:0d:dc:78:59:5d:26:e9:
4f:53:51:51:e9:11:de:6f:ff:12:b2:7d:5b:02:d9:
d7:36:ad:1a:cc:30:bb:4b:f1:e0:bf:3b:1c:a0:44:
c8:c8:20:57:2b:03:30:67:90:71:07:cb:45:f4:4c:
02:cf:19:59:73:73:47:1f:d5:de:38:c1:86:df:a1:
8c:4c:46:c0:ae:91:79:c5:63:59:01:ce:e2:6a:18:
aa:b2:36:4d:c5:54:58:89:2f:78:cd:72:65:40:52:
2e:d7:c3:18:10:54:7d:f1:ea:71:61:74:65:ac:68:
bb:92:a2:6e:1b:0e:77:a5:7f:b1:e5:66:61:98:08:
be:e5:5a:4d:28:c8:7d:86:40:0d:52:9a:32:de:b3:
7b:cc:a1:7b:70:c2:98:77:e9:55:cb:f2:b2:9b:d4:
55:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B2:97:A8:F0:75:BB:C9:67:D5:B6:E7:D8:94:2F:C4:06:8A:C0:44
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/dLKXqPB1u8ln1bbn2JQvxAaKwEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.32.0/24
Signature Algorithm: sha256WithRSAEncryption
65:aa:7e:06:2b:6e:29:2c:53:f9:dc:8f:84:d6:33:84:08:35:
16:bf:bc:be:c0:bf:be:dd:86:ac:8a:1f:d7:87:74:ff:94:88:
2d:2d:a6:7b:ca:ef:38:62:11:37:ba:31:9c:6d:b8:4e:0d:3a:
22:1a:46:7e:a7:85:72:e5:9c:13:58:80:ef:9c:3b:b8:45:38:
2d:45:05:d3:5f:ca:8d:10:d3:6e:39:9b:93:ca:0f:e0:3b:76:
da:04:2a:3e:f6:89:f0:a4:de:5c:d0:dd:4a:b1:68:c5:f8:97:
55:97:1b:9d:04:cb:1c:c5:dc:e7:6b:0a:c8:cf:01:b7:76:0b:
9c:fe:b7:4b:14:3a:2b:f0:98:76:ad:4c:c7:df:8f:f6:c9:08:
15:a6:7c:a2:46:41:9b:2f:54:f7:ea:5e:4c:db:fb:9b:f3:4d:
88:fe:b7:3c:36:c1:2e:d3:46:91:43:e5:03:8e:41:7a:d7:d5:
50:70:6e:05:d9:47:81:82:57:2b:ff:70:7e:3e:87:28:f0:17:
47:31:5e:2c:2d:a4:17:86:14:86:2d:aa:9a:e1:2e:a7:af:d3:
c2:70:ce:c1:a4:0d:9e:b6:b8:4f:83:30:7e:5c:2b:5c:b5:26:
91:ba:df:dc:44:fa:02:44:7b:00:05:4c:83:cc:d2:ba:27:18:
84:26:fd:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:56 2023 by rpki-client on console-fra.rpki-client.org