Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/tj5aW1iOwTQfHQ8T-ClGXVGIdPo.roa
File: tj5aW1iOwTQfHQ8T-ClGXVGIdPo.roa (raw, json)
Hash identifier: o9t7QFJHQiWrfJ1iiJ2+fclRSa+nbmB0aDNON4GnJOU=
Subject key identifier: B6:3E:5A:5B:58:8E:C1:34:1F:1D:0F:13:F8:29:46:5D:51:88:74:FA
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 07AB8EA7
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/tj5aW1iOwTQfHQ8T-ClGXVGIdPo.roa
Signing time: Sun 29 May 2022 03:38:13 +0000
ROA not before: Sun 29 May 2022 03:38:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 23676
IP address blocks: 151.216.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128683687 (0x7ab8ea7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: May 29 03:38:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b63e5a5b588ec1341f1d0f13f829465d518874fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:58:af:2b:d8:6a:48:d5:7e:73:2f:4f:01:8f:
b4:83:76:d7:8a:cb:a5:cd:19:44:a7:87:63:e5:03:
6c:60:82:66:de:2f:0d:fb:e3:75:89:99:38:ad:11:
8f:0a:30:56:36:33:b7:7d:9d:89:6f:5b:df:2f:46:
69:79:47:7d:40:b6:cb:94:45:02:8d:36:a2:a3:75:
df:26:65:82:2f:04:2b:a5:86:3b:85:4b:f6:d6:89:
fc:8a:66:6b:46:a6:82:81:c9:99:58:5e:fa:a3:0e:
67:9c:6f:fc:b0:d5:1a:f5:9e:d7:1a:89:8e:36:55:
45:1b:ef:49:d7:c4:69:92:f5:2f:bd:b7:4b:55:98:
7e:7e:86:54:fd:48:53:14:a1:3a:7c:29:ae:db:3d:
3d:58:8b:f5:aa:36:73:f9:83:09:ad:bf:f6:46:b2:
63:2e:39:99:7a:34:a4:5d:f7:ce:43:d2:d3:ce:98:
ef:e8:aa:d4:5e:31:60:8b:95:04:03:59:df:05:60:
ce:d8:77:72:af:4f:88:3c:32:b3:02:39:ba:6c:55:
42:fb:f4:6a:32:ca:fd:d8:82:56:e3:4a:99:04:e9:
1e:50:92:fc:5e:6e:cb:74:18:17:1f:78:dd:75:fe:
33:1b:95:82:7d:a6:b6:74:4a:6e:41:2e:20:4f:2a:
ef:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:3E:5A:5B:58:8E:C1:34:1F:1D:0F:13:F8:29:46:5D:51:88:74:FA
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/tj5aW1iOwTQfHQ8T-ClGXVGIdPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.32.0/24
Signature Algorithm: sha256WithRSAEncryption
72:f8:70:45:21:6d:ed:04:e0:e0:d3:6f:30:9b:94:70:67:39:
98:37:6a:6c:ff:fc:fc:1c:d5:77:35:fc:32:59:a5:5e:3c:03:
9d:fe:0a:0e:7a:e9:31:31:4b:ad:d4:ca:4c:1d:39:a7:04:e3:
80:e4:8e:d9:a1:d6:39:0c:d3:b1:19:dd:ea:31:fe:54:cb:8a:
1e:01:06:a2:bf:a1:28:58:90:f9:ae:3d:65:91:da:35:45:0c:
15:b8:fd:f1:fe:92:1c:90:ad:5d:b9:98:51:4b:18:0a:b5:9b:
04:db:7c:62:f8:44:4a:1f:ad:96:64:5d:b7:a1:13:e0:f6:19:
95:41:7d:27:1c:b4:55:65:78:05:43:6d:8f:3e:19:72:ee:2a:
f6:27:a1:b7:5c:79:95:97:e2:3a:fe:20:83:5a:61:d2:10:cb:
3f:06:d0:00:40:a8:50:97:ac:eb:76:c0:25:21:94:ad:20:4b:
28:40:b9:bb:95:2f:49:ab:8a:6b:9b:b3:a7:f6:73:b1:d4:56:
b2:1d:ff:37:ad:5a:e7:0a:90:e4:9a:38:a5:f9:48:e9:2d:76:
2e:e1:87:45:9f:f1:a8:fa:51:e4:ec:f6:0f:6c:90:35:ae:60:
43:05:fc:fe:dd:35:8f:20:8a:cc:33:9f:c2:4c:18:0b:58:da:
0b:0a:87:e1
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEB6uOpzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDUy
OTAzMzgxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjYzZTVhNWI1ODhl
YzEzNDFmMWQwZjEzZjgyOTQ2NWQ1MTg4NzRmYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALlYryvYakjVfnMvTwGPtIN214rLpc0ZRKeHY+UDbGCCZt4v
DfvjdYmZOK0RjwowVjYzt32diW9b3y9GaXlHfUC2y5RFAo02oqN13yZlgi8EK6WG
O4VL9taJ/Ipma0amgoHJmVhe+qMOZ5xv/LDVGvWe1xqJjjZVRRvvSdfEaZL1L723
S1WYfn6GVP1IUxShOnwprts9PViL9ao2c/mDCa2/9kayYy45mXo0pF33zkPS086Y
7+iq1F4xYIuVBANZ3wVgzth3cq9PiDwyswI5umxVQvv0ajLK/diCVuNKmQTpHlCS
/F5uy3QYFx943XX+MxuVgn2mtnRKbkEuIE8q798CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS2PlpbWI7BNB8dDxP4KUZdUYh0+jAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L3RqNWFXMWlPd1RRZkhROFQtQ2xHWFZHSWRQby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJfYIDANBgkqhkiG9w0BAQsFAAOC
AQEAcvhwRSFt7QTg4NNvMJuUcGc5mDdqbP/8/BzVdzX8MlmlXjwDnf4KDnrpMTFL
rdTKTB05pwTjgOSO2aHWOQzTsRnd6jH+VMuKHgEGor+hKFiQ+a49ZZHaNUUMFbj9
8f6SHJCtXbmYUUsYCrWbBNt8YvhESh+tlmRdt6ET4PYZlUF9Jxy0VWV4BUNtjz4Z
cu4q9ieht1x5lZfiOv4gg1ph0hDLPwbQAECoUJes63bAJSGUrSBLKEC5u5UvSauK
a5uzp/ZzsdRWsh3/N61a5wqQ5Jo4pflI6S12LuGHRZ/xqPpR5Oz2D2yQNa5gQwX8
/t01jyCKzDOfwkwYC1jaCwqH4Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:55 2024 by rpki-client on console-ams.rpki-client.org