Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/wdTr2kXqSEZK4zFXd-CT5Qoc40c.roa
File: wdTr2kXqSEZK4zFXd-CT5Qoc40c.roa (raw, json)
Hash identifier: TePGu/0HS7c/qIuYjSyOpQyd5eev3bMPRGvbdXmLxrY=
Subject key identifier: C1:D4:EB:DA:45:EA:48:46:4A:E3:31:57:77:E0:93:E5:0A:1C:E3:47
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 08F06629
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/wdTr2kXqSEZK4zFXd-CT5Qoc40c.roa
Signing time: Thu 23 Jun 2022 00:31:32 +0000
ROA not before: Thu 23 Jun 2022 00:31:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 55722
IP address blocks: 151.216.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149972521 (0x8f06629)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 23 00:31:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c1d4ebda45ea48464ae3315777e093e50a1ce347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a7:e4:c7:b6:29:81:e4:c9:c9:b4:a7:6a:8b:
f5:c8:b2:66:63:b9:55:77:bb:24:b6:8a:26:1c:f2:
c5:af:d9:29:d6:53:06:cb:19:69:3b:da:44:ab:ff:
30:c1:50:c7:1b:6f:db:f7:60:59:fe:90:ac:96:8e:
6e:ae:b7:43:f8:55:30:a9:eb:44:0b:87:3e:05:e4:
b1:61:f0:22:7b:71:1c:1f:20:3e:96:14:b0:ac:c5:
2f:b8:02:79:d5:20:04:99:13:4b:e4:bf:96:a1:b6:
b5:b7:0e:8b:1d:8b:bb:82:c9:4c:35:6d:7c:fb:56:
67:fe:c6:7c:c8:b2:e6:ff:d7:50:f9:06:ab:af:63:
d5:57:ea:55:a1:31:76:ea:10:00:c8:05:e2:af:87:
c1:46:6d:56:ac:8e:f6:51:9f:77:7a:3d:a9:df:0d:
a0:8e:b7:e5:82:77:f5:4a:b1:14:71:9a:c7:9f:ef:
48:26:94:3e:c4:07:39:c1:6e:99:7d:c9:29:fd:c5:
db:e2:41:7b:b4:df:f2:d0:57:37:3f:40:2b:8a:31:
17:33:71:14:77:28:06:28:71:c0:09:29:c7:50:81:
7d:14:bf:4f:53:2b:f7:d3:ef:30:36:af:f5:6f:76:
8c:7b:22:1c:85:53:55:23:19:7c:e0:cf:d9:b4:1d:
2b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D4:EB:DA:45:EA:48:46:4A:E3:31:57:77:E0:93:E5:0A:1C:E3:47
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/wdTr2kXqSEZK4zFXd-CT5Qoc40c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.33.0/24
Signature Algorithm: sha256WithRSAEncryption
11:85:a1:0c:ab:98:7a:20:54:e4:81:b5:5f:7e:13:75:71:ce:
d3:ee:c6:e1:4a:86:73:21:c1:95:70:7e:92:42:00:b8:ee:a1:
e2:ee:2a:39:bb:6f:e2:d3:9b:94:a0:41:3d:d8:6b:4b:af:29:
b3:58:a6:1b:d1:d1:f3:e1:95:6d:5e:11:1a:dc:9f:fe:a5:62:
bb:52:43:6c:bf:5c:77:99:02:62:72:14:39:c2:97:0c:72:ed:
3d:83:54:21:94:e5:e7:b3:34:bc:66:e3:c3:3a:eb:52:69:6b:
42:ab:cc:5a:10:bc:61:a0:8d:db:5f:ef:f0:d1:41:39:48:38:
33:2b:42:d0:f5:69:7c:ac:aa:de:32:00:cc:52:3d:66:55:32:
5b:6b:b5:d9:1f:fa:f0:18:2d:c4:41:08:b1:c8:70:3e:bd:48:
5e:cf:e3:d3:8d:ba:b8:31:ae:39:64:ed:06:d9:17:37:76:02:
3a:af:e5:b8:19:bf:30:9f:83:af:b9:97:fc:cb:e6:ef:18:dc:
1e:a5:f8:e3:cb:76:5a:b3:3f:37:f2:b2:6f:39:1c:f9:7f:85:
f1:fa:96:d7:c5:16:51:6d:d0:30:cd:91:1a:d2:98:d2:29:d1:
b4:9c:d0:20:a6:25:55:29:b7:49:e3:9d:30:a3:7c:c7:f5:8c:
51:e7:7f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:47 2023 by rpki-client on console-ams.rpki-client.org