Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/sfuZLqfGGiobaHm9M-RKYVMb28I.roa
File: sfuZLqfGGiobaHm9M-RKYVMb28I.roa (raw, json)
Hash identifier: LHIYmnwggH2533QeJqGQuM8bx2dKlPn+A+f24FkGh3U=
Subject key identifier: B1:FB:99:2E:A7:C6:1A:2A:1B:68:79:BD:33:E4:4A:61:53:1B:DB:C2
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 0751A3EE
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/sfuZLqfGGiobaHm9M-RKYVMb28I.roa
Signing time: Sun 22 May 2022 03:37:29 +0000
ROA not before: Sun 22 May 2022 03:37:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 17660
IP address blocks: 151.216.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122790894 (0x751a3ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: May 22 03:37:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b1fb992ea7c61a2a1b6879bd33e44a61531bdbc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:38:81:8c:c2:5f:55:5c:c7:5f:ae:8d:1a:2e:
ab:3e:b8:75:1f:14:0d:2e:65:b0:22:13:0c:18:6d:
b7:87:90:53:0d:85:4e:9f:f3:46:38:21:18:c8:f8:
f6:d2:da:35:17:c9:ab:d0:06:8b:c4:98:82:d6:15:
06:f0:a9:ce:1a:1c:39:3d:91:22:e9:28:6d:8b:2a:
a4:88:02:36:b6:d3:a8:aa:0b:6f:c8:ba:b3:33:ea:
d1:67:f4:6d:95:bc:47:1d:70:9d:10:88:45:05:ed:
16:81:5a:f9:b2:32:d5:7c:58:ca:cd:ac:04:83:b5:
d1:c2:f0:15:36:98:c1:40:e6:18:2b:93:5f:85:84:
9a:08:3c:6d:36:0d:d7:99:3b:29:52:2f:0e:eb:49:
0d:54:cb:7e:da:d1:86:9e:7b:8e:ee:b1:a3:25:3e:
dc:7a:39:2d:4b:d6:41:9d:b6:ea:e2:0e:aa:36:38:
38:0f:90:63:a3:ea:ea:04:43:1b:bc:12:3a:ae:a5:
31:db:cd:2d:1d:05:c3:29:ce:16:43:e2:66:67:df:
6a:c6:92:9e:dd:01:cb:40:94:21:61:b1:61:ee:c7:
be:d6:a3:b1:e4:aa:44:c9:b2:5b:9c:3d:a1:5e:dd:
9d:b4:b2:72:dd:13:69:58:8e:5c:bc:49:77:ec:ba:
38:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:FB:99:2E:A7:C6:1A:2A:1B:68:79:BD:33:E4:4A:61:53:1B:DB:C2
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/sfuZLqfGGiobaHm9M-RKYVMb28I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.34.0/24
Signature Algorithm: sha256WithRSAEncryption
89:dc:55:da:cb:0a:41:3d:2c:e9:ca:7e:ca:ed:52:7d:0d:fc:
2e:b2:18:db:e5:d6:c9:a9:df:fd:6c:d3:6e:47:47:98:b6:6b:
9a:30:cd:7b:7e:76:5f:8f:ea:3e:ce:39:48:ee:79:73:ce:d9:
8d:63:f0:0e:93:f0:5e:35:98:53:6f:51:4f:b3:8b:db:fd:69:
c5:21:db:ab:80:c3:5f:2a:3c:6e:f9:af:be:59:55:59:41:69:
cd:e7:34:e8:14:5f:55:52:b3:53:ea:7e:33:b6:9e:74:71:3a:
0e:90:c9:e6:b3:35:ae:65:80:a2:00:b7:5a:e6:b7:45:2b:b8:
cf:8b:19:fd:e5:cd:38:5b:81:e5:c8:bb:72:61:01:07:9a:6a:
09:49:ad:13:33:fa:ab:d7:e7:d1:80:9b:8e:ab:1d:29:16:34:
8e:ea:8d:65:e2:4d:b3:5c:ad:61:de:95:1a:b0:3b:58:e6:27:
aa:ba:97:78:84:a4:84:a0:d8:6e:a1:cb:3a:7e:ff:52:2e:43:
02:ec:91:a0:7f:ad:8a:09:d6:52:a8:6f:cd:d1:f3:7a:5f:51:
6d:aa:27:a2:6d:d1:8a:fb:88:ba:46:b6:f4:c6:1a:fe:2e:a2:
53:95:dc:87:93:08:c3:7c:2e:d7:af:4d:93:29:42:6a:9a:55:
40:96:1c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:11 2025 by rpki-client