Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/rh24frduF6rg-s9hiRzpf93tKEM.roa
File: rh24frduF6rg-s9hiRzpf93tKEM.roa (raw, json)
Hash identifier: y6CwmJ8fTphU9aLgqAXOMs3Zn3Vqg1SwZ2BHs0PFgPA=
Subject key identifier: AE:1D:B8:7E:B7:6E:17:AA:E0:FA:CF:61:89:1C:E9:7F:DD:ED:28:43
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 08CF9604
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/rh24frduF6rg-s9hiRzpf93tKEM.roa
Signing time: Mon 20 Jun 2022 02:42:44 +0000
ROA not before: Mon 20 Jun 2022 02:42:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 23676
IP address blocks: 151.216.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147822084 (0x8cf9604)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 20 02:42:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ae1db87eb76e17aae0facf61891ce97fdded2843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:74:25:84:21:b1:d6:d8:93:f1:54:a0:e9:d7:
fa:ec:c5:be:45:ed:a5:ae:6f:a2:ad:15:30:b4:be:
db:ad:52:26:f1:d7:3a:be:e8:a6:72:e2:12:2f:4a:
4c:ef:d9:fb:7b:9a:d1:08:82:b6:ab:82:31:f4:80:
2a:b3:36:78:ee:8c:dd:3b:9b:15:8c:97:f6:6e:3f:
c0:9a:2c:3f:03:da:f1:d9:5c:e6:0c:83:79:23:62:
92:13:74:5e:74:3e:bc:11:85:73:6f:e5:a1:47:d2:
5b:32:8b:d3:ad:88:6f:ea:ca:02:31:d6:c8:ed:5b:
fd:fa:a0:ea:8e:12:53:ae:e8:c2:55:dd:40:44:7b:
d2:94:d4:ba:da:38:5b:ac:b4:45:3d:2f:80:02:5b:
33:fb:0c:47:ad:a1:dd:85:26:f7:09:7b:65:05:d4:
87:9f:5f:ac:9f:c6:b8:6a:6b:21:c1:70:b2:e5:82:
15:da:cd:72:8c:ae:b6:6a:c3:bd:0d:8a:9f:91:1b:
c3:0f:2f:9d:df:2f:02:4b:52:75:a5:96:7b:07:31:
fa:f1:e4:6b:e8:8b:55:20:da:6b:81:81:7d:c4:e7:
62:dd:02:0c:59:0e:77:2c:61:99:bb:2e:44:d4:8b:
54:6c:31:50:85:a8:c5:11:0c:ef:3e:9c:c9:e8:7b:
75:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:1D:B8:7E:B7:6E:17:AA:E0:FA:CF:61:89:1C:E9:7F:DD:ED:28:43
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/rh24frduF6rg-s9hiRzpf93tKEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.32.0/24
Signature Algorithm: sha256WithRSAEncryption
35:bf:e0:ec:77:a2:db:e6:55:e7:1f:81:63:63:17:16:88:97:
f2:90:5b:72:dd:b5:23:e9:63:c9:50:ca:9a:6f:31:74:b7:9b:
15:39:3b:06:4e:c7:cc:8e:26:ec:2b:a0:c9:fa:90:9f:ad:99:
43:00:d6:8e:f6:5a:33:04:c0:bc:3d:a3:f1:0e:39:7e:6c:e0:
53:7d:3e:04:72:3d:fd:66:97:7d:c7:f1:17:58:d3:f9:b6:c5:
b0:08:0f:0e:f2:7e:c4:81:7a:b3:69:fd:8f:19:73:d3:9a:a5:
15:5a:94:50:da:8f:ae:74:40:e8:77:64:d9:ba:8b:fa:5e:ca:
81:05:d8:ec:e3:89:70:b3:ca:18:f0:19:84:67:c5:58:66:a5:
04:22:c5:a0:a2:3b:e6:35:51:c4:f5:c5:10:31:04:0f:85:67:
da:78:f0:61:01:a1:de:50:89:94:c2:c4:6a:d9:3f:f4:09:cc:
e0:77:d9:d8:49:23:ad:da:46:9e:ae:cf:6f:3c:4e:9f:d6:f3:
b5:16:e4:dd:68:52:60:ff:ef:49:56:d0:c6:1d:7e:c5:54:46:
21:72:bf:18:78:dd:b9:4e:4d:96:61:ae:d1:84:19:97:fa:ea:
00:b6:be:aa:d0:3a:d7:8f:f6:0a:ca:03:a8:0e:e1:e2:4b:a3:
83:4f:10:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:40:18 2025 by rpki-client