Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/yD54Iqbrdu1N38jgQNPzfoY4y10.roa
File: yD54Iqbrdu1N38jgQNPzfoY4y10.roa (raw, json)
Hash identifier: lk6uGSrlPBKxQmMv5xykqFgYzLJViMN32qrYtcpLwjo=
Subject key identifier: C8:3E:78:22:A6:EB:76:ED:4D:DF:C8:E0:40:D3:F3:7E:86:38:CB:5D
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 087B21EB
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/yD54Iqbrdu1N38jgQNPzfoY4y10.roa
Signing time: Tue 14 Jun 2022 03:39:44 +0000
ROA not before: Tue 14 Jun 2022 03:39:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 23676
IP address blocks: 151.216.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142287339 (0x87b21eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 14 03:39:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c83e7822a6eb76ed4ddfc8e040d3f37e8638cb5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7a:d8:7b:90:8d:90:49:a9:dd:c8:87:7a:9e:
b1:d9:d4:ca:30:25:60:e1:fe:6e:76:b0:82:89:91:
1b:79:c9:85:64:78:31:e8:e8:cd:68:e1:df:4e:14:
41:d2:96:c7:16:b6:e8:91:4c:ef:89:46:de:fc:37:
72:2f:a7:2d:4c:fc:e1:11:87:08:33:5d:e7:00:00:
57:57:4e:6d:38:81:ed:58:23:89:a2:5b:46:40:2e:
11:fc:bc:85:6b:38:c2:6f:36:81:5a:cd:92:05:b8:
b1:4a:64:0d:5c:c3:e1:3e:0d:4a:aa:15:29:f1:09:
de:9f:60:ed:08:c0:3c:b3:37:01:38:90:9a:96:00:
98:d2:39:4f:a8:67:f5:a8:b7:ac:32:33:07:ff:c7:
31:fe:5b:bf:1e:ca:cf:9d:22:e5:56:0b:47:a3:d4:
a0:dd:8d:04:3d:74:a8:ac:e3:dc:75:1f:4c:ea:23:
be:51:4b:67:7c:20:f7:02:c4:a2:6f:1f:9a:21:f7:
54:bb:c9:55:98:62:2b:00:6b:0c:ba:0e:af:3d:3d:
73:18:ef:3e:60:a3:bd:f4:7b:75:bd:56:e5:15:6f:
4f:97:7f:f5:bc:a6:86:47:2d:7f:64:59:45:8c:de:
6c:54:1d:d6:71:c8:65:39:4a:5b:af:86:7a:d2:e3:
3a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:3E:78:22:A6:EB:76:ED:4D:DF:C8:E0:40:D3:F3:7E:86:38:CB:5D
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/yD54Iqbrdu1N38jgQNPzfoY4y10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.32.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:d0:b1:3c:81:9a:34:2a:3d:65:aa:9c:05:9b:a0:5c:c8:92:
86:d6:a1:1b:fd:b6:65:65:9d:7e:e7:53:8b:1b:6a:0d:af:2a:
e7:10:48:25:b7:81:70:52:5b:ee:2d:45:cd:31:22:d7:0d:6b:
32:0b:a5:2b:d6:8a:b9:41:6c:c6:39:41:cf:c9:08:bf:b8:1d:
05:fb:b9:d6:e8:12:62:ef:ee:fa:61:c0:8e:4e:a0:ae:e5:a1:
61:e3:e9:b3:26:ad:cf:17:d7:34:37:28:11:81:6a:66:45:76:
22:4d:09:42:54:e4:28:1b:09:30:76:76:cb:43:b7:f0:d4:81:
1e:07:43:1c:ed:98:1f:b0:4c:71:1f:64:d2:ea:32:7d:58:0a:
6b:25:76:5f:a7:d1:59:89:4c:1f:93:4b:f4:c9:5b:79:29:2d:
b0:51:0d:c1:0c:91:08:97:2c:db:11:0c:3f:e7:44:1c:70:61:
05:c1:a0:10:6f:e2:ee:81:f7:e4:c6:bb:35:3f:00:58:d2:5c:
40:18:94:61:8d:54:0f:d8:de:79:3a:63:73:4e:11:9a:66:be:
c8:61:cc:7c:ec:0d:79:67:6f:36:36:f6:a4:f6:2e:67:0a:45:
cb:61:9c:a6:79:c7:18:66:b1:f0:61:59:b4:2f:70:e9:86:03:
d2:41:7e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:55 2024 by rpki-client on console-ams.rpki-client.org