Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/qb9dY8FZPZfL4xKv0829hu1MlfU.roa
File: qb9dY8FZPZfL4xKv0829hu1MlfU.roa (raw, json)
Hash identifier: K/+WIuj/uttWAkJ+FjQDan6DbAI55gWcq5ipWxld0as=
Subject key identifier: A9:BF:5D:63:C1:59:3D:97:CB:E3:12:AF:D3:CD:BD:86:ED:4C:95:F5
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 0181EB981CB430C75607C027433949ABEEC5
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/qb9dY8FZPZfL4xKv0829hu1MlfU.roa
Signing time: Mon 11 Jul 2022 04:50:23 +0000
ROA not before: Mon 11 Jul 2022 04:50:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 17660
IP address blocks: 151.216.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:eb:98:1c:b4:30:c7:56:07:c0:27:43:39:49:ab:ee:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jul 11 04:50:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a9bf5d63c1593d97cbe312afd3cdbd86ed4c95f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:67:0d:36:9f:54:8a:8a:ad:66:b8:7c:35:03:
ae:f7:fa:ef:75:b7:b1:46:0a:38:50:04:23:50:58:
0c:1a:ef:d3:66:f9:72:4c:03:dc:d7:6b:bf:b4:78:
ce:c3:a8:2c:25:59:25:a3:8b:bf:f3:30:87:b8:22:
95:78:5d:44:36:40:fc:f2:03:ce:2a:e0:3e:92:39:
12:d2:bc:87:7b:b0:e4:2c:2b:3b:e6:3e:b0:cf:81:
19:77:09:44:03:3c:5a:b2:c7:50:4c:70:d1:c5:67:
79:e8:c5:1e:f6:2b:2e:62:23:53:46:21:90:46:f1:
67:a2:3d:c2:cb:d7:e9:67:81:e9:28:3d:fe:1a:a9:
ed:c4:2d:51:3e:e1:9f:fa:24:5a:8b:d2:07:bb:9a:
c8:ab:ff:7f:72:9f:0a:b4:de:26:31:0f:31:dc:9c:
04:6f:81:c7:31:e3:28:a3:f0:82:1b:92:2c:7b:e5:
c7:ff:54:19:02:83:2d:42:78:8e:6e:13:ec:f9:7f:
71:e9:ff:7a:65:e2:f0:cf:43:91:d8:cf:5f:3f:8d:
14:d6:93:b8:8c:2e:62:9d:f4:54:f0:90:31:74:a2:
67:8e:4f:a7:a4:ee:c4:a6:7f:14:cb:13:97:aa:da:
b5:79:db:67:86:ad:85:25:c1:fd:ef:b8:63:b7:79:
63:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:BF:5D:63:C1:59:3D:97:CB:E3:12:AF:D3:CD:BD:86:ED:4C:95:F5
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/qb9dY8FZPZfL4xKv0829hu1MlfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.34.0/24
Signature Algorithm: sha256WithRSAEncryption
54:47:e1:91:f6:86:e8:d3:b8:b5:36:52:7b:5c:c9:d6:64:c6:
3d:91:00:b7:d5:4d:7f:f2:ce:c8:19:02:f1:ad:f8:ea:b2:bb:
ac:d3:e6:34:3e:4d:04:bd:89:ca:66:0b:c9:91:3e:a6:8a:16:
2d:07:20:27:fb:30:94:05:e9:23:5b:51:0b:ab:ce:e5:33:9d:
73:4d:11:1c:ba:22:85:7e:91:ec:7b:39:05:2b:46:a1:b2:f3:
97:9d:fb:a4:03:ae:c8:96:4e:72:7d:5c:ae:b1:d6:42:06:b8:
b4:1b:fa:51:cf:2d:e4:45:5f:02:9d:cc:90:15:41:eb:a9:ce:
41:d8:2a:2a:b8:fd:3e:93:9f:a4:e6:a2:63:6b:f2:00:9c:3b:
05:83:34:4b:06:20:d0:2b:1d:08:1c:37:bf:e9:1e:f3:52:5d:
a5:73:fa:0d:7e:72:19:a3:5d:4e:53:ab:6c:d8:f9:b3:b5:b7:
0a:97:65:7f:c5:a9:39:43:9d:20:dc:d0:92:fe:82:82:57:29:
93:04:95:49:0d:2a:5e:7d:4a:3c:54:a3:dc:fc:e6:dc:6d:46:
67:c8:0b:62:b7:e2:a7:da:e2:d7:35:ba:21:bd:5f:87:8d:7b:
c5:13:40:4c:45:97:8e:bd:66:28:d9:f4:42:1c:02:03:e8:d1:
ad:0d:f4:dd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYHrmBy0MMdWB8AnQzlJq+7FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiM2RhNmU5OWM2NjY1MTNhMmNlZTVmMGUwZDNhYjc0NWYx
NjdkYzMwHhcNMjIwNzExMDQ1MDIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOWJmNWQ2M2MxNTkzZDk3Y2JlMzEyYWZkM2NkYmQ4NmVkNGM5NWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWcNNp9UioqtZrh8NQOu9/rvdbex
Rgo4UAQjUFgMGu/TZvlyTAPc12u/tHjOw6gsJVklo4u/8zCHuCKVeF1ENkD88gPO
KuA+kjkS0ryHe7DkLCs75j6wz4EZdwlEAzxassdQTHDRxWd56MUe9isuYiNTRiGQ
RvFnoj3Cy9fpZ4HpKD3+GqntxC1RPuGf+iRai9IHu5rIq/9/cp8KtN4mMQ8x3JwE
b4HHMeMoo/CCG5Ise+XH/1QZAoMtQniObhPs+X9x6f96ZeLwz0OR2M9fP40U1pO4
jC5infRU8JAxdKJnjk+npO7Epn8UyxOXqtq1edtnhq2FJcH977hjt3ljmwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKm/XWPBWT2Xy+MSr9PNvYbtTJX1MB8GA1UdIwQY
MBaAFEs9pumcZmUTos7l8ODTq3RfFn3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3oybTZaeG1aUk9penVYdzROT3JkRjhXZmNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82ZjIzMmUtMjI3NS00NGU5LTkxYzAt
YzczOTdhMjY2OWE5LzEvcWI5ZFk4RlpQWmZMNHhLdjA4MjlodTFNbGZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi82ZjIzMmUtMjI3NS00NGU5LTkxYzAtYzczOTdhMjY2OWE5
LzEvU3oybTZaeG1aUk9penVYdzROT3JkRjhXZmNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl9giMA0G
CSqGSIb3DQEBCwUAA4IBAQBUR+GR9obo07i1NlJ7XMnWZMY9kQC31U1/8s7IGQLx
rfjqsrus0+Y0Pk0EvYnKZgvJkT6mihYtByAn+zCUBekjW1ELq87lM51zTREcuiKF
fpHsezkFK0ahsvOXnfukA67Ilk5yfVyusdZCBri0G/pRzy3kRV8CncyQFUHrqc5B
2CoquP0+k5+k5qJja/IAnDsFgzRLBiDQKx0IHDe/6R7zUl2lc/oNfnIZo11OU6ts
2PmztbcKl2V/xak5Q50g3NCS/oKCVymTBJVJDSpefUo8VKPc/ObcbUZnyAtit+Kn
2uLXNbohvV+HjXvFE0BMRZeOvWYo2fRCHAID6NGtDfTd
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:47 2023 by rpki-client on console-ams.rpki-client.org