Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/YhZuzJgD9LDg2wcysmjTTrPfeQc.roa
File: YhZuzJgD9LDg2wcysmjTTrPfeQc.roa (raw, json)
Hash identifier: CSzS8AzH2CNht2p2JbGvRlngdwSwSxL3kRQjG8bkDag=
Subject key identifier: 62:16:6E:CC:98:03:F4:B0:E0:DB:07:32:B2:68:D3:4E:B3:DF:79:07
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 0182E8859FC9EF02768F20008D30FAB034D2
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/YhZuzJgD9LDg2wcysmjTTrPfeQc.roa
Signing time: Mon 29 Aug 2022 07:34:07 +0000
ROA not before: Mon 29 Aug 2022 07:34:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 666
IP address blocks: 151.216.32.0/24 maxlen: 24
151.216.36.0/24 maxlen: 24
151.216.33.0/24 maxlen: 24
151.216.37.0/24 maxlen: 24
151.216.34.0/24 maxlen: 24
151.216.38.0/24 maxlen: 24
151.216.35.0/24 maxlen: 24
151.216.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:e8:85:9f:c9:ef:02:76:8f:20:00:8d:30:fa:b0:34:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Aug 29 07:34:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62166ecc9803f4b0e0db0732b268d34eb3df7907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d9:5d:97:7f:fd:23:66:a1:bf:5e:e1:62:5f:
96:76:1b:f2:fa:e5:43:53:52:f1:fb:4b:eb:e4:d9:
a6:99:db:af:36:16:8a:5f:80:6a:21:70:f0:08:64:
12:77:12:cb:51:e9:e2:97:36:31:ea:bf:9c:67:9a:
8b:db:08:7e:e4:22:c9:b2:6d:72:b6:65:d6:ee:5c:
d7:d1:1f:a0:4f:79:7e:47:b8:74:80:49:92:03:c9:
cc:9b:ac:c0:0c:d5:52:6a:f4:7c:8f:f0:3e:7d:33:
b8:8f:b1:c9:4f:1e:ac:65:18:0a:93:2e:99:64:f1:
a6:4b:26:cc:fa:d2:6d:3f:14:fb:ff:46:4c:d1:ac:
36:8d:1a:61:27:cf:7c:d3:d3:2e:a3:12:67:27:82:
23:67:52:7d:90:39:f7:0b:8f:61:af:1d:0b:51:49:
55:84:2b:c6:d4:36:5d:2d:a4:a6:e5:15:b7:55:30:
2f:ec:a6:97:8e:09:f0:c1:12:6c:fd:ff:24:f4:ec:
70:8a:e4:13:d3:96:96:cc:ee:46:bd:12:b3:21:e0:
13:3c:cd:4c:ab:0d:55:a5:31:0b:48:df:d0:15:c0:
8d:11:c0:ba:e3:e1:01:3b:d2:38:38:2e:f6:6c:ed:
14:d9:f5:2a:08:05:b4:dc:12:6a:6f:40:0d:19:49:
1d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:16:6E:CC:98:03:F4:B0:E0:DB:07:32:B2:68:D3:4E:B3:DF:79:07
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/YhZuzJgD9LDg2wcysmjTTrPfeQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.32.0/21
Signature Algorithm: sha256WithRSAEncryption
a7:c1:67:32:f5:21:3e:54:e2:e7:28:20:3e:84:a4:5a:85:9b:
05:3f:67:50:b6:d9:e6:d0:ad:fa:86:aa:8f:08:f8:5f:e8:85:
a5:aa:00:2f:fc:6d:13:f8:87:b7:00:f6:0d:c1:ff:fd:7e:b0:
ad:e9:6c:29:c0:c4:33:99:72:34:5b:61:2e:5c:8f:2b:48:e4:
09:32:f5:1f:66:86:db:4d:05:4c:00:f0:0f:30:80:84:50:e7:
05:9c:1f:8c:db:cb:ae:a9:5b:ef:d3:a3:18:69:46:73:21:72:
e6:79:88:02:34:0a:27:cc:2c:29:05:33:0f:38:2e:0c:41:05:
88:b2:65:25:1a:8b:2a:a3:21:8e:45:b6:0f:04:c1:60:4d:ef:
d3:24:bc:aa:d5:09:71:d3:36:43:a9:11:d2:dc:29:9b:db:d6:
8c:d9:d0:b9:68:5c:49:ab:82:bb:8f:a0:64:60:42:70:f1:73:
42:51:0a:87:4d:56:83:91:5d:d2:75:af:7e:16:3d:f7:d3:1f:
cb:e5:dc:98:38:b9:b8:8b:fa:3c:3b:86:46:ce:78:82:6b:11:
55:7e:90:e3:b5:ce:a8:96:58:d9:17:6e:ef:e2:44:ba:34:37:
87:ab:80:17:50:98:cd:50:70:8d:37:e6:22:60:26:16:8c:90:
73:39:00:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:49 2023 by rpki-client on console.sobornost.net