Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/XhLAY-FGARPRGn2HHVcsyQU3nSk.roa
File: XhLAY-FGARPRGn2HHVcsyQU3nSk.roa (raw, json)
Hash identifier: tdUgIP/P4crgJ2Uy2pK4G0/s+vUDOaX6XUeswlanrPE=
Subject key identifier: 5E:12:C0:63:E1:46:01:13:D1:1A:7D:87:1D:57:2C:C9:05:37:9D:29
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 095D7BF2
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/XhLAY-FGARPRGn2HHVcsyQU3nSk.roa
Signing time: Fri 01 Jul 2022 00:19:52 +0000
ROA not before: Fri 01 Jul 2022 00:19:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 55722
IP address blocks: 151.216.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157121522 (0x95d7bf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jul 1 00:19:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5e12c063e1460113d11a7d871d572cc905379d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:65:6e:98:06:9a:bf:a2:f5:7a:44:89:d2:04:
05:be:20:a9:75:4a:49:3c:eb:25:3c:c7:46:2f:a9:
3c:ce:44:98:68:b0:77:4c:ff:9d:9f:9e:44:3b:ad:
45:c5:42:22:b0:6e:8a:b4:1a:d1:80:3e:1a:e9:b7:
e8:f6:3d:c0:e5:6b:38:c9:23:e4:1f:7c:62:b4:80:
55:f1:3f:7b:c8:89:15:be:96:81:e9:24:25:c9:69:
be:77:df:1f:c4:50:f0:46:b4:81:30:cc:53:22:eb:
28:e3:ee:1d:78:24:5e:13:e1:8a:2f:2c:d8:48:64:
7e:52:f6:07:43:0b:43:a2:e7:f7:06:73:2b:71:45:
73:90:aa:e0:c3:bd:b6:12:f5:03:8f:a1:2f:40:05:
ff:aa:9d:77:c1:52:60:84:4e:46:d8:b1:a9:fe:02:
4d:d8:97:c5:01:48:1e:98:b7:a6:be:8a:60:96:fe:
10:25:dd:e7:63:0b:6c:07:0a:1d:96:3a:7e:c5:03:
9d:6f:f3:9c:16:29:9e:2a:f2:0a:6a:7b:1b:45:8d:
36:53:1b:86:88:93:93:dd:7a:8c:ba:05:1f:60:e4:
7c:7d:b1:f4:6d:da:e2:a1:0f:ae:ed:ca:65:cc:55:
4e:1d:72:0c:7e:63:2d:9c:07:8c:eb:e8:e8:3b:05:
ee:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:12:C0:63:E1:46:01:13:D1:1A:7D:87:1D:57:2C:C9:05:37:9D:29
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/XhLAY-FGARPRGn2HHVcsyQU3nSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.33.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:d9:a1:e6:89:83:f2:07:48:6b:4f:80:da:09:b0:64:87:14:
00:9c:41:83:4c:e5:20:60:29:b5:f5:bd:12:f6:e6:31:3b:01:
e5:76:d8:30:c4:f3:ec:87:94:ea:72:ac:da:cd:16:fa:60:0a:
84:57:0b:c2:02:9a:ff:3c:43:10:b6:d1:7b:4b:ea:3c:16:6b:
1a:0a:29:49:1a:5a:10:b7:43:9c:67:e6:5d:f3:18:91:1a:bc:
f9:21:fd:cb:e4:d4:2d:82:cd:72:94:78:c9:25:3f:b2:2d:c4:
8d:f1:8f:a7:1a:7e:49:dc:e0:78:e4:b4:64:58:fd:72:fa:d2:
9d:ca:0e:bb:3e:05:7e:55:f2:01:e4:e6:af:e6:07:b3:84:b8:
94:f6:2f:fd:80:f5:91:cb:ab:5f:5d:b3:b5:b3:26:17:49:e8:
e6:a1:56:01:bf:97:b9:89:e1:7c:6f:df:39:f8:b5:fc:d3:65:
6e:5f:49:fd:5f:01:ff:8d:b1:fb:20:2a:bb:3e:00:21:8e:74:
ad:ab:50:96:2d:43:da:ac:5d:5e:57:f6:a9:e7:d2:c9:49:33:
b2:76:01:fa:f4:31:99:96:02:cc:8e:67:44:e9:52:aa:3b:95:
19:67:e3:16:30:6e:55:4e:bf:f7:7a:62:ff:80:f0:f0:89:95:
46:51:db:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:49 2023 by rpki-client on console.sobornost.net