Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/vAeloAHgX6geqvyvBVwqE5V8VDc.roa
File: vAeloAHgX6geqvyvBVwqE5V8VDc.roa (raw, json)
Hash identifier: jZ/OBi5MTtRnjz4AevJxyCD8ytWiWfLT7gHRMwEYlTU=
Subject key identifier: BC:07:A5:A0:01:E0:5F:A8:1E:AA:FC:AF:05:5C:2A:13:95:7C:54:37
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 07C23D24
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/vAeloAHgX6geqvyvBVwqE5V8VDc.roa
Signing time: Tue 31 May 2022 00:05:15 +0000
ROA not before: Tue 31 May 2022 00:05:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 17660
IP address blocks: 151.216.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130170148 (0x7c23d24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: May 31 00:05:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc07a5a001e05fa81eaafcaf055c2a13957c5437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a5:f0:de:14:8e:56:62:76:31:10:7b:95:23:
fc:97:5d:83:ee:d3:58:59:01:08:c7:de:df:ae:79:
f9:13:c2:04:3f:a2:0a:22:e0:48:9c:39:fb:f0:a3:
b8:5f:8a:7a:be:07:75:33:3f:0e:f2:56:53:8d:a7:
22:f6:b2:c3:ae:6b:51:d4:85:ff:b8:f9:30:fb:c6:
a5:7a:f6:98:05:a9:52:db:17:cc:c8:ed:e9:38:5a:
09:d5:bd:19:08:79:5c:fe:b6:f9:b2:15:54:38:ba:
53:c1:d8:8f:11:78:77:58:e2:d0:e2:1c:cd:02:df:
20:fe:88:4b:d9:5c:e2:a6:25:c9:7f:1e:5a:df:76:
2d:16:8b:16:12:3e:e5:5e:1d:3c:d6:7a:63:70:7a:
39:35:a0:e5:f7:69:a8:6e:86:43:de:5c:91:7b:01:
a2:0b:9c:92:92:02:3e:6b:c3:5f:e9:be:f7:bb:c9:
23:e6:d5:2f:63:5c:b2:0e:8f:b4:89:17:8d:e8:5b:
22:68:6f:42:9b:bd:14:f0:8b:38:66:d1:c0:c7:4f:
2f:e6:35:15:9a:14:de:02:eb:39:2c:88:95:2c:a9:
78:85:6e:fe:ad:fb:4c:2e:6c:ca:d9:3e:0d:9d:95:
fe:25:e0:32:0c:75:ea:28:02:7b:c3:40:a5:09:c7:
30:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:07:A5:A0:01:E0:5F:A8:1E:AA:FC:AF:05:5C:2A:13:95:7C:54:37
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/vAeloAHgX6geqvyvBVwqE5V8VDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.34.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:27:3f:78:66:45:88:ca:da:78:fe:d1:e3:f1:b1:79:21:e1:
1f:10:28:b5:28:e1:a9:96:bb:19:db:61:07:90:62:66:5e:af:
5e:27:18:03:d8:3f:79:14:a2:ef:ae:81:eb:1f:5b:c6:7a:d1:
d3:13:e2:8c:dd:79:01:15:a7:1e:3a:5f:da:00:dd:cf:56:33:
49:fc:9e:62:a5:88:c6:88:c5:c6:45:72:e5:67:fb:9a:8f:1c:
fd:45:08:b4:d0:86:64:b4:20:ac:f9:56:f9:67:cd:a5:7e:df:
ca:74:c5:94:1a:61:fb:0f:7d:17:e7:dc:21:b7:95:b5:1b:f4:
50:b2:23:fb:e1:aa:a4:e3:7b:e3:34:f3:0d:e6:74:35:ac:93:
6c:7e:81:8c:82:f1:1d:a9:ea:7b:99:65:02:ae:11:a0:ac:1d:
94:cf:e9:92:45:d1:34:f6:b0:b8:c3:f5:80:8f:0f:44:33:fb:
96:50:c7:16:e9:7d:4e:78:a3:24:f6:94:8e:52:db:31:7c:c1:
60:9e:5c:e5:d1:df:c9:61:00:cf:81:44:ed:7d:e8:ea:28:98:
e9:ab:f8:09:ba:e4:8f:56:33:d2:15:c6:b5:ee:52:7a:b4:bc:
8d:2c:d8:91:bc:b6:32:41:cf:1a:ae:60:5a:42:2e:1b:95:b3:
78:c6:c7:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:59 2025 by rpki-client