Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/_r-JjVcHfXt2ZwyBswPBaaRZglc.roa
File: _r-JjVcHfXt2ZwyBswPBaaRZglc.roa (raw, json)
Hash identifier: Ei/6PO6PdGOj+lpF4lNjba9n+4dx1tc1WdCUDeO+H+0=
Subject key identifier: FE:BF:89:8D:57:07:7D:7B:76:67:0C:81:B3:03:C1:69:A4:59:82:57
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 0185700B8A339BE475407DF70C45659D8F76
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/_r-JjVcHfXt2ZwyBswPBaaRZglc.roa
Signing time: Mon 02 Jan 2023 01:14:42 +0000
ROA not before: Mon 02 Jan 2023 01:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 23676
IP address blocks: 151.216.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:0b:8a:33:9b:e4:75:40:7d:f7:0c:45:65:9d:8f:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jan 2 01:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=febf898d57077d7b76670c81b303c169a4598257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a8:60:85:c6:86:2e:25:2d:85:46:28:19:2a:
46:61:af:bd:81:f6:cd:c7:6b:52:52:fb:8a:11:30:
51:b3:12:ac:b1:4c:ad:84:18:8c:f9:ec:c2:8e:08:
80:8f:f3:08:f3:2f:7c:65:4b:6f:54:f5:9c:58:c0:
0f:cc:e8:c9:65:68:91:44:76:e4:1b:c9:9e:a3:b1:
2d:8e:0b:69:91:c5:1c:73:74:4b:90:81:e8:08:23:
6d:34:9d:38:57:ee:2f:fe:d4:f2:c7:09:1c:ef:ff:
1b:2b:51:4a:e3:42:5d:b9:27:89:44:4b:26:bb:f3:
88:57:11:e9:b3:9d:89:e1:4d:16:12:eb:04:71:7f:
de:8b:be:43:90:56:db:6e:7d:1f:0e:33:8d:3d:0d:
b8:ef:3f:14:27:e5:6d:78:f6:08:fe:a9:dd:74:ee:
5b:73:7c:c7:90:d5:72:0f:56:59:60:ca:cf:b1:64:
77:85:c3:17:0c:7b:fc:37:8f:7c:c6:9a:4f:49:54:
4d:df:b1:75:57:61:22:02:c7:da:f3:67:6f:a9:72:
2d:fd:9a:d5:35:fb:85:65:6b:9a:86:ff:69:99:ea:
9d:e1:d1:35:6a:d5:94:d6:6a:8a:97:7f:cf:15:ef:
32:41:f7:e7:57:ad:c7:39:12:85:9d:34:e8:91:fc:
fd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:BF:89:8D:57:07:7D:7B:76:67:0C:81:B3:03:C1:69:A4:59:82:57
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/_r-JjVcHfXt2ZwyBswPBaaRZglc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.32.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:50:3f:01:aa:92:c8:a6:c0:fb:cf:ab:9a:2d:28:e2:98:5e:
ad:69:da:8c:c2:48:b7:bd:ce:bd:3e:b4:68:6f:36:a7:96:3e:
e0:b8:0b:65:79:28:d6:73:4b:8e:b6:11:1d:f8:d7:21:c8:79:
8e:63:04:ea:df:0c:06:dc:9e:ac:3e:79:47:c8:7f:2a:2b:a1:
c5:34:80:e3:ad:f1:5c:39:e9:78:cf:34:c1:ad:06:81:12:2a:
39:13:99:59:37:7f:9e:5f:f5:63:9c:e4:7c:0f:51:d1:8a:a3:
94:b7:21:bb:39:c8:16:96:05:31:18:b5:fd:52:12:f8:71:c9:
3c:f5:24:19:3f:f7:74:4b:a0:37:b6:07:da:13:2a:bd:28:dd:
fe:1b:01:93:0e:a7:c4:81:aa:ac:84:58:b9:8a:5b:10:7d:b7:
ea:24:c8:dd:cd:e1:ee:b1:7b:66:93:ff:c0:42:9f:33:12:b4:
92:0a:0a:c6:6f:c1:de:03:8e:00:05:95:02:a6:99:14:1c:b5:
6b:d6:ae:0b:2c:a9:34:2c:47:ac:bb:27:d4:61:c6:82:cd:bf:
de:28:77:d1:76:b9:fd:f4:6d:19:83:86:2e:36:be:4b:ea:e8:
7f:4b:b0:40:eb:98:91:00:49:c5:7d:01:a8:b4:b7:62:8c:04:
ef:84:3b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:49 2023 by rpki-client on console.sobornost.net