Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/oeZsBWCQFgAZyl97KhQjVBU1oKk.roa
File: oeZsBWCQFgAZyl97KhQjVBU1oKk.roa (raw, json)
Hash identifier: ivhPr5JycXBVh5YYeqsHKxfW5eStG1KxXBJEpIolFn0=
Subject key identifier: A1:E6:6C:05:60:90:16:00:19:CA:5F:7B:2A:14:23:54:15:35:A0:A9
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 083FE4EA
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/oeZsBWCQFgAZyl97KhQjVBU1oKk.roa
Signing time: Thu 09 Jun 2022 05:46:04 +0000
ROA not before: Thu 09 Jun 2022 05:46:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 17660
IP address blocks: 151.216.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138405098 (0x83fe4ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 9 05:46:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a1e66c056090160019ca5f7b2a1423541535a0a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:25:b9:cd:ef:0c:4f:ac:93:38:73:34:5c:23:
c7:4d:48:17:63:2d:63:ad:a0:87:ca:76:3d:bc:c1:
65:fc:74:c4:36:09:d7:fa:73:42:3a:bc:e8:c5:d6:
ae:d3:ae:39:9e:97:27:a9:39:6c:88:35:a5:65:1d:
2e:b9:6f:2d:44:e8:3f:93:6c:36:ba:99:b9:41:aa:
21:38:e0:6d:77:24:39:64:02:c3:ec:76:b1:dc:d3:
a6:c4:f9:86:13:bd:d9:be:46:b8:ca:0b:09:36:ba:
06:a9:28:b4:81:96:c9:a5:9a:8d:06:29:9f:13:35:
87:cd:07:ff:41:93:e4:a0:5e:dc:24:ee:e0:f2:2f:
22:00:f8:af:68:5d:31:e6:60:db:2a:4b:c3:27:92:
dc:07:4a:fb:e3:1d:33:8f:49:16:f5:3e:4b:4f:11:
44:58:4d:a7:9d:f5:12:f8:7d:a6:45:67:6b:0d:bc:
5f:64:a9:e8:a5:73:66:1d:1e:f4:d3:ef:13:e4:29:
40:76:d5:db:82:1d:e6:a4:a6:52:3a:19:cd:d5:12:
79:8e:85:0b:57:e5:22:bc:46:c0:5c:92:81:a0:42:
9e:c2:e1:56:92:20:d0:de:f9:6f:e7:fd:89:c0:86:
8f:4d:61:5d:bc:a1:31:00:05:0d:0d:db:2e:08:ad:
2f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E6:6C:05:60:90:16:00:19:CA:5F:7B:2A:14:23:54:15:35:A0:A9
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/oeZsBWCQFgAZyl97KhQjVBU1oKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.34.0/24
Signature Algorithm: sha256WithRSAEncryption
48:db:d7:c8:93:a8:4a:6f:29:7e:25:75:78:01:63:88:bb:aa:
d7:fd:d4:ab:5b:2d:3e:7d:37:86:86:df:ca:0e:91:30:88:c7:
b3:72:cd:61:d1:ce:b3:0e:ad:ff:9a:08:28:aa:9c:4f:c3:82:
a4:b9:88:6a:fd:4f:6d:9f:8f:41:bc:cf:a2:45:d5:3f:19:a1:
9e:77:f7:07:6c:aa:68:07:cd:0a:cf:71:fa:de:50:c6:10:b6:
39:67:ab:3e:9f:27:28:0c:49:28:70:6f:4f:3b:71:86:c2:66:
69:3c:09:54:b0:3b:0e:7b:49:9f:01:7e:f3:5b:f3:41:c6:d3:
e8:6d:ad:ed:73:51:6c:bf:b2:e0:67:6e:85:c9:61:d2:71:ba:
11:f2:3f:06:82:a2:f8:5a:42:8f:07:94:27:2d:12:64:e2:66:
3d:1b:10:2c:76:af:c8:8b:65:3f:4a:d1:9a:e8:54:54:b0:85:
b8:d3:57:44:70:b8:48:0a:00:a6:e0:6d:d9:f9:bf:10:17:d7:
6c:f3:66:9d:01:54:52:12:ae:73:ce:42:69:5b:1b:15:53:e0:
55:05:cc:6d:41:35:3d:89:39:93:6e:b5:66:55:52:ec:9a:8b:
9a:a3:12:28:43:a2:8f:eb:4b:b3:b9:fb:69:05:78:a5:19:cd:
f7:86:1d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:57 2023 by rpki-client on console-fra.rpki-client.org