Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/ixoG3nBGm9Qhctn_Bfo7qqFbI74.roa
File: ixoG3nBGm9Qhctn_Bfo7qqFbI74.roa (raw, json)
Hash identifier: ceI1l6tN8vqb++G99QJ0kqOES3sc2tWptGkwyF0Modw=
Subject key identifier: 8B:1A:06:DE:70:46:9B:D4:21:72:D9:FF:05:FA:3B:AA:A1:5B:23:BE
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 06C5DDB0
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/ixoG3nBGm9Qhctn_Bfo7qqFbI74.roa
Signing time: Wed 11 May 2022 05:09:51 +0000
ROA not before: Wed 11 May 2022 05:09:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 55722
IP address blocks: 151.216.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113630640 (0x6c5ddb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: May 11 05:09:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b1a06de70469bd42172d9ff05fa3baaa15b23be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e4:df:56:67:d7:db:31:3e:af:e7:59:e9:75:
5f:60:b2:e5:68:1f:d0:8b:15:f4:30:ba:34:52:e3:
0d:51:6a:b8:e9:02:23:e0:15:80:b1:c4:ff:d1:12:
0c:0e:cc:b2:b5:71:6f:ed:47:6f:c6:42:96:1d:2a:
d1:ca:15:93:8d:84:b1:24:d1:8f:d5:0c:e9:f7:2f:
65:96:6a:c7:d0:b5:6d:64:6c:69:6c:9f:03:08:62:
0a:9b:a0:c0:9e:06:cd:53:8f:59:da:b4:33:cd:16:
b9:73:97:69:fb:05:ec:3e:06:ce:46:c7:c1:4c:59:
f9:2f:bd:bf:ee:4b:27:fe:ef:49:67:91:00:ae:47:
a3:c5:7a:87:cb:18:81:69:33:8f:3e:c2:ed:43:0e:
1f:9c:28:a3:09:bd:00:ea:5c:b2:bb:60:23:88:c2:
94:24:b5:fb:23:21:fd:e6:17:f1:27:d2:d0:11:9d:
26:2c:23:22:ef:6e:9b:c8:27:bd:39:2a:39:dc:74:
c6:98:7c:5d:47:dd:f5:50:ba:5d:22:61:bc:1a:33:
7c:f3:0e:37:f5:18:22:b4:2e:bb:7c:5d:c9:f0:0e:
28:3b:1a:13:7c:9b:4d:99:06:83:4b:8a:43:89:2a:
d5:3e:02:29:2d:c0:fd:06:07:4b:8d:dd:86:4d:0f:
60:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:1A:06:DE:70:46:9B:D4:21:72:D9:FF:05:FA:3B:AA:A1:5B:23:BE
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/ixoG3nBGm9Qhctn_Bfo7qqFbI74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.33.0/24
Signature Algorithm: sha256WithRSAEncryption
11:b6:f0:24:d6:22:b7:c3:12:61:4b:2f:d5:03:3a:c0:3f:f8:
21:1c:19:88:09:83:b9:e4:52:15:04:9a:13:b7:74:ab:7c:8f:
b6:e4:47:20:30:68:02:aa:d1:63:e0:65:32:b6:be:42:8d:7c:
39:15:e7:b9:25:09:34:21:3b:a4:43:d5:2f:18:56:26:45:54:
0a:f8:0c:59:3e:05:69:53:37:5d:20:87:16:29:72:ac:0c:55:
bd:f4:94:9b:0c:5a:a5:07:99:51:bb:c1:1a:d2:97:4a:f0:af:
fe:14:46:72:a4:55:fe:b5:26:2f:23:ff:b0:cb:ed:a1:cc:5f:
46:7c:5e:67:b6:c2:0a:3e:b6:c6:05:44:52:4b:1d:68:4b:5b:
cf:90:19:9f:a1:99:5a:8f:b8:54:3f:26:ce:38:2e:88:34:94:
d9:d8:67:bb:70:07:e2:5d:73:15:1a:91:22:67:65:f9:02:bd:
36:38:90:4c:b0:dc:1b:17:19:9f:03:a6:c7:28:61:fb:fb:f2:
02:9c:7a:91:ac:f1:cb:6b:5d:55:e3:30:ac:6b:ac:5e:bd:a6:
d1:fb:27:32:18:2b:34:d0:9f:3d:49:ca:1d:84:28:04:1a:de:
b0:47:56:e0:4b:c6:85:88:a7:10:49:cd:05:d4:71:b7:80:54:
68:a3:34:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:26 2025 by rpki-client