Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/yTL3H2YVQkpL0_IC2wUeXFkMM-A.roa
File: yTL3H2YVQkpL0_IC2wUeXFkMM-A.roa (raw, json)
Hash identifier: BY7yv2l32s2DcWPEN97Xr4FCe9ahhW80+KdaLWk4p/A=
Subject key identifier: C9:32:F7:1F:66:15:42:4A:4B:D3:F2:02:DB:05:1E:5C:59:0C:33:E0
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 097DF8C4
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/yTL3H2YVQkpL0_IC2wUeXFkMM-A.roa
Signing time: Sun 03 Jul 2022 03:37:25 +0000
ROA not before: Sun 03 Jul 2022 03:37:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 55722
IP address blocks: 151.216.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159250628 (0x97df8c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jul 3 03:37:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c932f71f6615424a4bd3f202db051e5c590c33e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f2:fd:dc:3f:4d:a5:f7:ae:31:bd:8c:cb:c7:
ed:99:7f:91:de:3b:57:da:fb:63:f1:22:73:24:e5:
55:60:42:0a:da:3e:5e:a6:03:28:d8:dd:d1:69:c0:
e2:53:de:87:c5:01:63:39:1c:c1:f9:3d:6c:d4:0d:
17:d0:8f:dc:9d:fc:93:47:8a:85:0f:95:ef:3b:6d:
c0:37:ab:a9:dd:14:0f:8b:80:f6:3b:95:03:4e:16:
da:b6:bf:9e:f7:46:17:11:d9:2e:00:97:55:15:33:
31:9f:d9:f9:5e:23:46:c8:80:3e:a9:1c:25:60:50:
21:ae:c6:f1:23:60:2c:e8:c4:a8:10:65:9e:d6:7e:
56:51:25:f1:11:ac:96:ef:4d:85:cf:4d:ad:bc:6d:
15:91:0a:72:7e:4e:a8:58:7e:c4:39:53:73:7e:bc:
5d:42:e3:0f:81:3a:0d:62:60:4c:5c:3b:ee:1d:6d:
a8:a2:56:c4:ea:d0:62:db:ee:73:9f:d7:61:9a:fe:
5c:02:9b:fe:9c:b8:67:40:22:14:db:ea:29:f6:6d:
c8:2f:0c:55:9b:c8:9c:3d:a5:fe:6c:fe:11:83:c1:
94:06:c6:23:44:bb:49:29:35:58:0c:86:71:85:ba:
49:87:3a:69:a2:41:8b:e2:53:f0:ce:82:76:9b:12:
c1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:32:F7:1F:66:15:42:4A:4B:D3:F2:02:DB:05:1E:5C:59:0C:33:E0
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/yTL3H2YVQkpL0_IC2wUeXFkMM-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.33.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:c4:55:af:cc:2f:b6:75:3e:3e:e3:4c:15:f1:3a:5e:14:49:
2c:2e:a7:c2:ef:ca:e0:09:33:32:10:df:e8:ea:63:10:b1:b0:
a9:47:56:be:23:1c:24:36:3d:7b:8f:42:7a:de:0b:a9:d8:57:
fc:81:fd:26:70:28:13:93:1f:e8:e0:a7:5c:64:d6:27:76:1b:
c5:29:16:24:70:5b:2c:cc:d1:80:d6:39:29:2f:71:f1:24:f9:
eb:74:87:a5:b2:3c:86:dc:ab:ce:71:ed:fd:55:26:b2:b6:53:
a4:01:14:f9:e4:68:65:85:70:5f:7b:a4:23:30:84:d3:cd:f0:
6c:cc:3c:9a:d3:78:3b:86:f5:fc:28:4f:b4:b4:1a:2b:4c:c2:
f3:5d:56:87:16:a3:89:98:1f:85:ca:b8:d4:72:79:62:54:18:
4e:74:f8:8e:e7:e7:72:e2:6e:f8:9f:71:2c:42:73:bb:39:c0:
f9:33:92:04:6c:b6:ca:8c:ba:d4:bd:a3:0d:0c:93:1b:d2:ce:
aa:6c:d2:92:63:4d:4b:78:6f:80:f8:b1:d2:84:47:23:38:da:
80:c0:b2:d0:da:76:b0:73:f2:e5:d0:58:10:3b:91:88:c5:2c:
74:41:72:65:71:f7:a3:45:44:10:11:34:9d:dd:4a:70:78:c8:
89:4a:fb:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:57 2023 by rpki-client on console-fra.rpki-client.org