Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/ztJzy49jqaNPYbWOKVytZ4A5f_E.roa
File: ztJzy49jqaNPYbWOKVytZ4A5f_E.roa (raw, json)
Hash identifier: PJ5FpUqaKPkJkVpGQJt8nlhm+6gwGSYBbPkDmw/PC78=
Subject key identifier: CE:D2:73:CB:8F:63:A9:A3:4F:61:B5:8E:29:5C:AD:67:80:39:7F:F1
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 098E42A8
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/ztJzy49jqaNPYbWOKVytZ4A5f_E.roa
Signing time: Mon 04 Jul 2022 04:15:25 +0000
ROA not before: Mon 04 Jul 2022 04:15:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 55722
IP address blocks: 151.216.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160318120 (0x98e42a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jul 4 04:15:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ced273cb8f63a9a34f61b58e295cad6780397ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:29:6f:d9:d8:dd:88:fe:41:96:93:82:c9:0e:
bd:74:f5:3a:3e:66:aa:6c:c8:ed:66:83:c6:24:16:
bc:37:f1:f0:a7:54:c1:a9:16:7b:13:44:58:27:61:
03:36:f8:50:1d:a7:0f:d5:60:60:15:8e:0a:6b:a8:
cd:08:ae:45:8f:1f:c7:b9:b9:9d:01:46:71:50:93:
59:8e:c5:ea:67:13:22:f8:56:c9:6a:00:48:44:f9:
72:4e:2d:b7:09:1e:fe:29:b5:23:4e:3b:a3:2e:56:
68:58:81:11:16:4d:b9:1f:1a:b8:e7:96:af:aa:e7:
00:98:bd:20:19:7a:f7:7e:ee:ed:67:cb:c3:89:cf:
6c:4c:fa:3a:bd:49:ca:b7:79:df:d2:64:86:b4:49:
f9:f0:6d:22:5c:f1:cc:85:02:3c:29:2d:8c:e3:dd:
d7:b4:ac:14:a0:d8:c5:f8:2e:1d:cd:a3:29:b0:c9:
3b:72:c6:29:81:1e:55:d0:00:c5:7b:8f:45:e2:bc:
8b:d7:5b:ee:55:bf:92:5f:84:01:b7:b7:80:04:43:
f0:80:b8:57:51:7e:3a:65:60:58:39:cc:b9:e1:6a:
4a:91:2c:7f:0e:74:47:c0:96:1b:d1:89:28:09:b5:
25:3f:4d:7f:87:55:20:9f:47:c5:0e:a7:d6:21:87:
c2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D2:73:CB:8F:63:A9:A3:4F:61:B5:8E:29:5C:AD:67:80:39:7F:F1
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/ztJzy49jqaNPYbWOKVytZ4A5f_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.33.0/24
Signature Algorithm: sha256WithRSAEncryption
86:f9:7b:66:98:53:45:af:eb:0d:3b:e8:c5:90:36:db:87:e1:
64:ef:c2:7f:e4:22:d8:88:fd:cd:88:3b:fa:1d:10:81:ae:cb:
d8:1d:d4:64:1a:48:bd:60:d2:59:1e:b6:03:43:27:f9:02:e9:
c5:33:73:11:2a:a4:f0:c7:7c:aa:80:2f:a2:06:35:fb:39:7d:
cd:3b:59:f0:8f:16:36:b3:fc:0b:97:21:a3:11:35:9c:46:e8:
25:ed:6f:9b:4c:69:66:b7:76:5b:ee:d6:c9:2f:6f:19:22:36:
1f:25:82:58:9e:f7:ad:6b:fa:11:33:f3:fd:16:bb:90:ef:6a:
b5:b4:34:ae:7f:81:3a:8c:1b:23:fa:a0:0c:f1:52:b7:f5:f2:
98:7b:91:1a:7e:51:11:bf:ea:07:3b:9e:a9:80:07:0d:c4:58:
66:46:82:01:fe:79:54:f7:90:38:03:a5:01:76:7d:81:bd:27:
6d:ae:9c:f8:c0:36:6c:b0:b9:84:b2:1e:ed:65:13:4e:ec:7f:
72:54:b8:5a:c0:c4:df:dd:a8:66:31:f0:da:d9:bc:eb:a9:97:
3d:05:69:d7:1a:7c:aa:3f:d0:c2:df:4a:54:62:e8:0d:d4:12:
f6:56:82:c6:00:17:15:3d:0a:e4:91:bc:59:b9:eb:42:68:36:
a9:29:7e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:55 2024 by rpki-client on console-ams.rpki-client.org