Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/lULcz68gojkuK2R31VajAiLwtdU.roa
File: lULcz68gojkuK2R31VajAiLwtdU.roa (raw, json)
Hash identifier: N084dn+zp8QP8zWrXUVG/+TmN9yZfmOVt38c9xngkfM=
Subject key identifier: 95:42:DC:CF:AF:20:A2:39:2E:2B:64:77:D5:56:A3:02:22:F0:B5:D5
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 08F529CD
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/lULcz68gojkuK2R31VajAiLwtdU.roa
Signing time: Thu 23 Jun 2022 05:18:16 +0000
ROA not before: Thu 23 Jun 2022 05:18:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 17660
IP address blocks: 151.216.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150284749 (0x8f529cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 23 05:18:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9542dccfaf20a2392e2b6477d556a30222f0b5d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:50:c6:c1:c2:1e:03:23:91:ba:63:85:b4:e3:
16:6c:46:a6:10:7a:c3:aa:0e:bb:79:48:ee:79:5a:
a7:88:d3:10:7d:f9:55:a0:f3:4c:c8:7c:92:c9:17:
81:80:24:fe:4b:cd:38:0c:b8:bf:dc:51:fc:87:76:
9a:d6:49:eb:fc:5c:6b:43:16:13:62:92:39:95:b3:
58:8b:6d:21:71:6e:74:0c:cd:68:dd:e8:58:8b:05:
45:fb:79:9b:09:33:ad:5a:69:64:02:78:e3:0e:23:
9e:a0:e2:d1:e2:04:2e:1f:68:41:2c:ef:a9:5e:8a:
3d:9a:53:2a:ff:9f:42:9e:32:61:a1:83:15:ec:c7:
5c:5c:4e:cf:1e:43:fe:b3:43:ba:f5:7a:6c:f5:a5:
13:d5:ad:fb:a0:3c:c5:5c:e9:a0:4b:56:6f:be:5e:
f1:9a:0a:e8:64:3a:47:8b:1b:e8:b6:a5:43:25:69:
59:4f:e9:5f:d7:75:ea:86:9c:a5:b0:ee:1d:4b:1b:
43:a6:fa:eb:4e:41:3d:26:cd:c9:b2:6d:1c:d9:65:
23:e3:a9:28:e9:15:12:67:84:86:b9:28:88:32:66:
ee:0a:2f:dd:4e:d2:20:3f:9b:e1:85:8f:38:fe:a8:
cd:0c:1c:b0:16:e1:d6:63:a0:88:c7:58:3b:5b:ec:
70:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:42:DC:CF:AF:20:A2:39:2E:2B:64:77:D5:56:A3:02:22:F0:B5:D5
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/lULcz68gojkuK2R31VajAiLwtdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.34.0/24
Signature Algorithm: sha256WithRSAEncryption
37:48:8d:76:82:9d:b0:54:87:13:49:a8:f8:46:6d:5b:26:13:
09:da:43:c6:2e:d2:30:ae:73:af:e9:56:99:6d:1e:29:82:be:
a2:1b:05:c8:b2:4f:1f:1a:ea:75:bf:fc:c9:4f:73:8b:37:d5:
07:b1:55:9e:b3:c8:2f:d1:d6:f1:bf:32:54:90:2f:09:9a:9c:
36:87:47:9b:78:9f:ef:dc:2c:c1:65:b7:67:79:dd:42:be:b0:
40:5f:3a:f7:29:7c:ef:ed:d3:ae:f0:64:94:2f:58:a1:e5:59:
02:3e:97:04:9c:2d:6c:da:c3:64:b6:da:7f:e4:a6:3d:73:93:
8a:e8:19:a3:0b:1d:d8:5d:eb:02:f1:74:3b:ef:88:ef:65:b5:
f0:cf:7e:17:ac:cd:b9:0d:ec:0d:dd:83:a7:4e:e0:f1:50:60:
e4:01:2e:f7:c0:60:7e:10:dd:50:e6:2a:2c:8e:d4:62:14:e4:
63:64:81:c6:4b:35:a8:f2:34:b8:05:85:f7:67:9c:08:e2:f8:
60:21:69:30:c3:b2:ca:ba:bb:61:3c:43:f5:d9:af:a9:cd:c0:
d6:a2:95:c1:b0:46:b0:16:bd:8e:de:97:c4:d6:a0:66:19:c4:
0e:e2:67:70:5d:23:7e:3a:a9:e3:f3:be:65:74:ce:e7:d9:78:
f4:8b:14:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:07 2025 by rpki-client