Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/iBjgx-eUl5e3SGvGpnHu05JXtiY.roa
File: iBjgx-eUl5e3SGvGpnHu05JXtiY.roa (raw, json)
Hash identifier: IW6KkV53kiOCNWyLyDKxxYTrQVJ7DZt++FwFn6UZERk=
Subject key identifier: 88:18:E0:C7:E7:94:97:97:B7:48:6B:C6:A6:71:EE:D3:92:57:B6:26
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 0181EB16B38988238D24BE1ADC4CB3DE2AE9
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/iBjgx-eUl5e3SGvGpnHu05JXtiY.roa
Signing time: Mon 11 Jul 2022 02:29:02 +0000
ROA not before: Mon 11 Jul 2022 02:29:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 55722
IP address blocks: 151.216.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:eb:16:b3:89:88:23:8d:24:be:1a:dc:4c:b3:de:2a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jul 11 02:29:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8818e0c7e7949797b7486bc6a671eed39257b626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8a:7d:68:2b:9e:dc:e0:78:51:17:21:8a:f0:
c0:a8:7e:b8:ad:fd:c6:60:6a:8b:6d:ed:fe:75:b9:
ec:03:47:ec:18:52:81:b2:66:ca:e7:61:0f:d5:00:
2a:2a:d2:6e:91:4e:30:fc:bf:93:c3:b4:9e:6f:24:
c7:12:ee:22:45:b7:59:d4:46:97:f0:9e:3c:55:8b:
67:8b:df:4e:05:41:0c:1d:e1:54:46:77:4f:d7:93:
75:cb:11:04:48:6c:c0:1b:30:83:77:88:8f:b0:82:
6e:60:90:3a:67:b2:bb:6b:fd:4e:3a:bc:f6:9b:f6:
4d:57:1a:c3:c4:e0:7b:e2:e5:80:f7:d6:2b:01:b1:
ba:c2:ae:37:cf:3f:cf:28:22:a8:2f:78:c2:ea:7a:
f5:8f:c3:a6:a1:16:dd:28:57:eb:23:c7:ef:c9:84:
73:76:59:8f:71:07:16:19:94:f4:8f:a6:57:f5:b9:
20:73:fe:67:b2:c0:92:c8:f6:c2:ae:0b:d1:45:12:
ed:ab:1f:1f:bb:6c:51:e6:d6:28:ec:51:c5:54:fc:
3a:12:6f:be:1b:b6:67:b1:88:f6:bc:15:ca:2a:b0:
0e:db:f7:14:1c:e7:34:a7:b3:1b:f5:1e:2b:5a:71:
9b:1a:c9:4f:58:f5:7d:cd:b6:73:e5:15:86:a3:71:
2b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:18:E0:C7:E7:94:97:97:B7:48:6B:C6:A6:71:EE:D3:92:57:B6:26
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/iBjgx-eUl5e3SGvGpnHu05JXtiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.33.0/24
Signature Algorithm: sha256WithRSAEncryption
52:bb:80:80:83:15:8b:5f:e4:27:24:05:83:74:17:75:d2:cb:
20:10:3d:4d:b8:9d:80:5d:72:28:10:0f:69:ce:24:75:19:b4:
1c:00:d7:25:53:df:a9:19:61:b1:8b:c5:3c:e2:d4:34:da:59:
3e:db:8a:e3:92:43:a9:3d:03:4d:93:e6:02:48:e3:3c:c2:2a:
45:ba:71:42:69:90:c6:92:8a:02:34:32:e5:4d:6b:dd:0e:48:
8b:5f:df:da:85:7b:20:72:5c:7e:f2:8b:a1:06:6b:88:d4:45:
bd:b8:e8:f0:c2:b4:5b:ff:86:d5:ca:71:1d:98:a5:dc:60:48:
f7:49:e6:83:b2:24:77:f8:d3:e8:0e:e4:ed:d6:bb:5d:33:0e:
27:a9:9a:8d:95:87:11:da:9d:bd:f8:b9:5c:ca:c0:b4:ea:55:
77:50:16:e7:fa:7e:44:57:f9:7c:f5:bb:ab:aa:69:b1:c1:bc:
9c:a1:ff:36:a0:fa:f1:17:0d:de:6f:3b:6e:9d:3e:ee:2e:63:
f2:b1:37:98:06:62:ff:51:b4:f9:e7:34:44:8d:ba:a1:66:39:
f4:89:4d:59:d4:bc:16:f2:54:f9:c7:f9:08:93:81:87:4b:cb:
1e:8d:11:9d:04:49:fb:6c:6b:bb:df:87:3e:1b:10:87:e0:cf:
f9:48:1d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:57 2023 by rpki-client on console-fra.rpki-client.org