Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/n00k5pE92qXzpyDmA4eBO_FTi_Y.roa
File: n00k5pE92qXzpyDmA4eBO_FTi_Y.roa (raw, json)
Hash identifier: lMw6cMKlpgi63ORfDMGKf13PkR//lJTGNU4hFBrEekk=
Subject key identifier: 9F:4D:24:E6:91:3D:DA:A5:F3:A7:20:E6:03:87:81:3B:F1:53:8B:F6
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 0181D686D1EF56D0DE30B91D06B899202846
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/n00k5pE92qXzpyDmA4eBO_FTi_Y.roa
Signing time: Thu 07 Jul 2022 02:39:28 +0000
ROA not before: Thu 07 Jul 2022 02:39:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 55722
IP address blocks: 151.216.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d6:86:d1:ef:56:d0:de:30:b9:1d:06:b8:99:20:28:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jul 7 02:39:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9f4d24e6913ddaa5f3a720e60387813bf1538bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:27:78:79:61:7a:dc:56:bb:52:c9:ff:f5:bb:
b1:47:55:bb:b3:05:a9:d9:a6:05:c6:cf:cf:9d:3d:
58:79:b1:af:63:cb:08:1d:ff:dd:a3:c9:4f:f0:04:
88:11:3f:2f:66:c2:a8:84:42:21:88:b9:bc:e2:af:
42:ab:0f:6c:2f:40:29:89:20:e3:25:b1:e4:0c:c2:
2b:bc:60:7e:be:b1:2c:0c:4f:6d:e3:9f:a5:e9:dc:
43:82:ce:c5:c4:2b:6d:65:19:6f:bc:c5:f4:27:47:
93:6d:59:1e:b0:1e:76:d4:a2:e3:7a:c5:44:9d:7e:
ec:3a:c6:90:ad:7b:e5:d5:08:1d:1b:8f:eb:dd:30:
bb:9b:75:60:a2:7a:af:fc:d7:3e:7e:b5:63:62:6e:
a5:40:33:9e:c4:34:64:61:55:96:95:a4:b8:0b:43:
5a:65:82:b7:05:97:8e:17:25:2a:86:fc:e6:02:39:
a0:18:d4:b3:4f:ad:71:ec:4e:5d:02:ac:26:04:55:
08:34:a3:01:cf:33:6c:66:ab:ae:25:28:0a:f7:bb:
2e:16:b2:ce:9e:7d:90:ea:6c:a3:1d:ec:40:17:70:
48:b1:66:74:bc:58:0d:83:40:ce:be:68:f6:18:04:
58:6e:46:fa:6a:9f:56:46:ad:bf:ce:db:8d:06:0f:
95:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:4D:24:E6:91:3D:DA:A5:F3:A7:20:E6:03:87:81:3B:F1:53:8B:F6
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/n00k5pE92qXzpyDmA4eBO_FTi_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.33.0/24
Signature Algorithm: sha256WithRSAEncryption
24:09:68:34:42:19:5b:33:3b:bf:b0:70:35:b3:3b:fd:87:a7:
2b:19:e1:5d:20:10:23:83:36:94:74:2e:5a:51:d2:b7:9e:b7:
89:5a:33:40:8d:27:1e:b7:f8:3e:9f:79:57:a1:cc:a7:1e:21:
32:d7:47:21:23:4b:d0:91:b1:65:5c:6d:98:60:9e:92:34:c1:
a4:f7:c7:70:35:fc:4b:d3:65:81:89:b2:37:98:23:2c:32:ed:
4c:9c:8c:2a:f0:a7:b9:c0:d6:48:2a:7a:50:20:e3:e6:84:8b:
22:e3:0d:13:96:66:b4:31:ad:7d:43:27:66:1a:90:c9:0c:03:
c0:82:e0:90:6f:a2:3c:26:29:a7:3c:05:ca:c1:b3:21:d9:4d:
f1:aa:6c:b2:a3:71:cb:69:c3:9b:ab:6f:5f:84:0a:1b:be:d5:
13:b3:d2:a0:c5:f1:a9:a0:cb:86:1a:2c:79:68:ea:66:27:a6:
be:0d:0c:f1:42:69:09:2b:fd:fb:3b:2f:81:ba:19:b7:77:8c:
84:33:ea:90:7c:21:94:d5:b1:bd:57:f2:73:aa:26:a0:5f:fa:
a9:21:f4:91:b1:78:5d:51:3f:14:47:1f:5f:54:54:73:a6:4f:
99:d8:6a:b1:ed:dd:7c:6b:b5:82:5a:3f:84:8a:6e:fc:80:c3:
7f:e2:3b:04
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYHWhtHvVtDeMLkdBriZIChGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiM2RhNmU5OWM2NjY1MTNhMmNlZTVmMGUwZDNhYjc0NWYx
NjdkYzMwHhcNMjIwNzA3MDIzOTI4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjRkMjRlNjkxM2RkYWE1ZjNhNzIwZTYwMzg3ODEzYmYxNTM4YmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuid4eWF63Fa7Usn/9buxR1W7swWp
2aYFxs/PnT1YebGvY8sIHf/do8lP8ASIET8vZsKohEIhiLm84q9Cqw9sL0ApiSDj
JbHkDMIrvGB+vrEsDE9t45+l6dxDgs7FxCttZRlvvMX0J0eTbVkesB521KLjesVE
nX7sOsaQrXvl1QgdG4/r3TC7m3Vgonqv/Nc+frVjYm6lQDOexDRkYVWWlaS4C0Na
ZYK3BZeOFyUqhvzmAjmgGNSzT61x7E5dAqwmBFUINKMBzzNsZquuJSgK97suFrLO
nn2Q6myjHexAF3BIsWZ0vFgNg0DOvmj2GARYbkb6ap9WRq2/ztuNBg+VgQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ9NJOaRPdql86cg5gOHgTvxU4v2MB8GA1UdIwQY
MBaAFEs9pumcZmUTos7l8ODTq3RfFn3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3oybTZaeG1aUk9penVYdzROT3JkRjhXZmNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82ZjIzMmUtMjI3NS00NGU5LTkxYzAt
YzczOTdhMjY2OWE5LzEvbjAwazVwRTkycVh6cHlEbUE0ZUJPX0ZUaV9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi82ZjIzMmUtMjI3NS00NGU5LTkxYzAtYzczOTdhMjY2OWE5
LzEvU3oybTZaeG1aUk9penVYdzROT3JkRjhXZmNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl9ghMA0G
CSqGSIb3DQEBCwUAA4IBAQAkCWg0QhlbMzu/sHA1szv9h6crGeFdIBAjgzaUdC5a
UdK3nreJWjNAjScet/g+n3lXocynHiEy10chI0vQkbFlXG2YYJ6SNMGk98dwNfxL
02WBibI3mCMsMu1MnIwq8Ke5wNZIKnpQIOPmhIsi4w0Tlma0Ma19QydmGpDJDAPA
guCQb6I8JimnPAXKwbMh2U3xqmyyo3HLacObq29fhAobvtUTs9KgxfGpoMuGGix5
aOpmJ6a+DQzxQmkJK/37Oy+Buhm3d4yEM+qQfCGU1bG9V/JzqiagX/qpIfSRsXhd
UT8URx9fVFRzpk+Z2Gqx7d18a7WCWj+Eim78gMN/4jsE
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:47 2023 by rpki-client on console-ams.rpki-client.org