Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/gT50ChUIfsVXOf0kjvW2unARras.roa
File: gT50ChUIfsVXOf0kjvW2unARras.roa (raw, json)
Hash identifier: fSwVZ7edkHBqh7IHMdiwYnIfOernvGRK7LTjdNT9/84=
Subject key identifier: 81:3E:74:0A:15:08:7E:C5:57:39:FD:24:8E:F5:B6:BA:70:11:AD:AB
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 099B82CA
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/gT50ChUIfsVXOf0kjvW2unARras.roa
Signing time: Tue 05 Jul 2022 02:28:25 +0000
ROA not before: Tue 05 Jul 2022 02:28:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 17660
IP address blocks: 151.216.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161186506 (0x99b82ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jul 5 02:28:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=813e740a15087ec55739fd248ef5b6ba7011adab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fb:25:00:c6:a7:c0:ed:cd:d5:7a:0e:d9:e9:
5b:f5:62:91:1e:ec:d5:69:23:34:6f:60:5b:62:ac:
39:73:fa:b3:7d:8a:92:4f:4f:d9:e3:4d:b1:5e:72:
48:23:a4:cc:6f:bb:cb:92:2a:89:fe:4f:a3:36:a5:
9c:c3:8a:bf:fa:05:01:6d:60:24:5b:7b:82:56:ce:
c2:be:c8:28:e2:03:35:1a:c3:54:fd:23:ea:63:6a:
c9:f4:9f:9a:60:6c:b0:78:65:35:56:f2:8c:81:98:
cc:8e:e7:fb:2d:c8:45:cd:40:10:9b:b4:9d:99:48:
24:e2:03:5f:90:63:81:72:74:66:0a:54:24:59:18:
d0:d4:5f:7a:de:1c:04:b4:b4:e8:e7:43:68:8b:66:
b2:56:58:5f:0f:5d:17:33:f0:da:b4:04:ff:0e:03:
84:eb:c2:3f:aa:9e:df:f6:9d:ed:36:5d:83:27:12:
1b:56:ef:36:77:b2:14:11:e5:5a:ea:5a:ce:c8:64:
31:e1:f8:9c:3b:29:6c:a5:c9:5e:6e:b1:e2:cb:28:
97:df:e1:63:ef:2c:9b:3f:f8:c3:be:fd:d5:e0:bd:
a7:00:1a:76:eb:c3:ee:2e:ce:2e:97:d4:bd:ce:79:
01:67:47:d7:51:a9:07:bf:01:fa:a5:b4:74:0a:50:
45:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:3E:74:0A:15:08:7E:C5:57:39:FD:24:8E:F5:B6:BA:70:11:AD:AB
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/gT50ChUIfsVXOf0kjvW2unARras.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.34.0/24
Signature Algorithm: sha256WithRSAEncryption
08:8c:1b:6e:31:94:e8:7d:67:35:bc:86:c9:4e:94:14:79:0b:
c5:9e:dc:d0:28:25:24:d0:bd:31:9d:6a:1d:d4:90:20:e8:88:
84:aa:66:a1:52:50:1d:f3:b4:ef:32:ca:5f:a0:dd:d2:0a:b2:
11:f4:4e:90:d4:05:7f:93:d3:4c:60:9f:24:b5:8c:4e:de:a9:
1c:b5:a1:73:5a:33:5f:e9:5f:78:84:f2:d8:c7:8a:e6:71:4d:
f2:aa:69:fa:2b:64:ab:42:9a:2d:f3:46:a4:b2:ee:88:79:b9:
3e:5a:91:34:3a:94:06:6f:76:00:bd:68:e2:ad:13:77:5b:b7:
66:c9:3f:b0:bd:a7:d8:77:5b:a5:0c:c9:f9:6a:02:4a:77:c2:
05:cf:cf:76:91:51:32:08:4c:58:74:d0:ca:89:fb:cc:69:69:
71:45:0f:a6:ff:0c:81:1a:2d:01:e1:bf:1e:48:13:90:18:dd:
3c:77:fd:78:a7:c3:7d:5d:31:60:57:dd:d2:8a:f7:9d:e4:1b:
c5:ca:93:9b:7e:a7:fe:95:d0:a7:19:db:d6:90:9a:e9:c1:35:
01:51:a5:66:ad:27:0f:33:0d:6e:ca:4f:b5:c4:41:ff:4d:10:
03:56:69:a1:47:67:63:5b:91:18:2e:70:44:60:f0:7c:70:12:
9e:82:00:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:47 2023 by rpki-client on console-ams.rpki-client.org