Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/nqBRrzb2NYj-S5FHvVaOrG-y8X8.roa
File: nqBRrzb2NYj-S5FHvVaOrG-y8X8.roa (raw, json)
Hash identifier: dv76QG2PE+um5/CBNio/JeWZ0vF1ygfLLPWoHb+kebY=
Subject key identifier: 9E:A0:51:AF:36:F6:35:88:FE:4B:91:47:BD:56:8E:AC:6F:B2:F1:7F
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 0181DC0069D8BA2D46CF18D25DD138080D42
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/nqBRrzb2NYj-S5FHvVaOrG-y8X8.roa
Signing time: Fri 08 Jul 2022 04:10:23 +0000
ROA not before: Fri 08 Jul 2022 04:10:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 17660
IP address blocks: 151.216.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:dc:00:69:d8:ba:2d:46:cf:18:d2:5d:d1:38:08:0d:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jul 8 04:10:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9ea051af36f63588fe4b9147bd568eac6fb2f17f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:88:0b:54:75:13:64:38:57:6c:67:a7:3b:e7:
1f:c4:09:4f:6a:aa:74:64:93:5e:58:1c:a7:68:dd:
6c:6e:51:6a:7f:19:6c:7a:d8:20:f8:ee:10:e4:e7:
63:92:e3:c5:6f:44:36:49:6b:e5:af:1d:4d:02:a2:
fc:17:42:ba:53:9d:c2:11:dd:6d:eb:2c:6b:d7:9a:
7c:28:6c:60:f0:cc:3f:2c:fd:94:63:34:a5:71:48:
18:04:0e:e8:65:ee:e5:bd:e1:b6:83:e8:48:e4:6e:
f5:d0:f4:88:82:da:65:55:3b:8e:d1:cf:04:2b:23:
c8:59:f7:7d:d7:74:0f:ee:09:19:f3:56:4a:18:71:
36:20:dd:42:47:59:c4:23:2c:6c:08:ef:ed:6d:c2:
a8:a5:fa:4e:3a:c1:f0:6c:48:f3:8a:43:5c:8e:a5:
56:cd:f4:5b:85:b1:fa:75:c5:a6:b3:88:ec:57:d4:
41:b0:01:a2:3a:96:05:a3:5f:f1:c2:db:7a:cb:57:
24:ad:a5:8a:f8:7f:35:4b:33:e2:90:56:83:e1:2e:
bc:40:4f:d7:fb:3a:c9:17:f9:34:c0:88:c7:f6:8b:
e9:54:7b:4e:10:6d:ca:09:76:8a:04:5f:1e:b9:6a:
f3:09:2d:ae:56:be:8f:5c:b1:9a:11:bf:9f:76:41:
59:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A0:51:AF:36:F6:35:88:FE:4B:91:47:BD:56:8E:AC:6F:B2:F1:7F
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/nqBRrzb2NYj-S5FHvVaOrG-y8X8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.34.0/24
Signature Algorithm: sha256WithRSAEncryption
08:18:19:37:6b:6f:06:06:c0:84:ca:5d:d2:56:19:96:ba:ec:
89:75:a3:d7:da:60:35:19:a4:d7:8d:ee:2a:30:d3:fd:fc:71:
2d:dc:b0:d3:6e:86:db:c1:71:c6:5a:92:e9:f8:6c:4c:35:a9:
36:94:7c:bf:97:76:d0:fb:c4:7e:4e:c9:6c:b8:c0:24:71:08:
62:84:73:e5:c6:fb:0f:93:76:92:ca:8d:73:1b:0e:f9:42:eb:
48:ca:bb:bd:68:ac:91:69:93:b2:01:8a:f5:fb:41:7f:a4:24:
a6:29:8e:ac:67:eb:d5:f4:7b:f9:26:53:bf:e0:fa:20:14:9e:
7b:4c:fc:4e:17:93:69:c4:ac:ce:74:9e:cc:7d:2a:18:c5:86:
88:a9:8e:cb:6c:2c:d3:c0:1f:7a:eb:35:3f:ba:88:49:32:61:
6e:67:06:80:03:df:3b:a9:6f:2a:f3:68:02:30:9b:84:92:31:
11:74:36:9e:6c:53:1b:1b:fd:52:27:9c:21:de:ab:bf:c1:2f:
fb:cc:72:c3:14:99:73:81:70:fe:c2:f1:67:02:fe:46:82:39:
f9:3b:3e:a2:c6:76:ba:03:79:14:69:9c:c8:ae:59:8b:8c:d1:
aa:d2:71:ee:e3:1d:4a:b4:f8:4d:55:ed:71:bb:1c:25:95:b1:
2c:60:38:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:47 2023 by rpki-client on console-ams.rpki-client.org