Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/vHAuo1h1D5SZoKS1-zkzibCNH40.roa
File: vHAuo1h1D5SZoKS1-zkzibCNH40.roa (raw, json)
Hash identifier: wu/QfPkwx4QuP1lryOzFLr14gTdipOOTz68gv4qeEuU=
Subject key identifier: BC:70:2E:A3:58:75:0F:94:99:A0:A4:B5:FB:39:33:89:B0:8D:1F:8D
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 0181E17A15529A6497AB5DBCA0196D771B5D
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/vHAuo1h1D5SZoKS1-zkzibCNH40.roa
Signing time: Sat 09 Jul 2022 05:41:23 +0000
ROA not before: Sat 09 Jul 2022 05:41:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 23676
IP address blocks: 151.216.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:e1:7a:15:52:9a:64:97:ab:5d:bc:a0:19:6d:77:1b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jul 9 05:41:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc702ea358750f9499a0a4b5fb393389b08d1f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6e:78:29:24:4c:71:24:2c:6b:ca:c1:1a:0d:
c7:54:f4:fd:8f:bd:1e:3d:05:c4:d4:ef:65:61:d3:
f6:6c:64:76:f2:90:c6:40:04:a3:da:0c:ba:6a:0e:
96:ba:64:31:14:e7:1d:34:50:56:bc:56:4b:72:24:
7c:18:8c:33:6f:07:55:86:1e:2e:28:e8:bf:27:84:
02:84:8f:60:b1:6b:60:8b:62:00:b0:97:5f:00:82:
ce:d7:c2:58:c7:17:50:fc:d3:88:32:51:fa:6b:aa:
eb:58:02:4a:9b:0e:dd:ee:8e:67:83:b1:ea:02:95:
2a:5d:d3:44:05:c3:aa:12:5d:72:a4:68:60:dc:90:
e8:bf:cc:bb:7f:eb:0f:2d:f0:2b:7b:36:e1:98:af:
12:33:25:e5:6d:db:54:cd:ae:93:e6:4e:7a:0c:22:
2c:63:47:5a:e0:26:ea:aa:ac:ac:df:af:e4:7c:0a:
a8:12:ef:af:c4:ce:91:c8:96:f4:15:47:b5:96:e4:
3a:4e:69:b8:10:5f:52:84:85:06:27:f6:80:9a:76:
62:9a:b9:dc:fd:ed:19:3d:53:e7:a0:3c:2f:6d:dc:
e9:c9:c0:0c:ae:e5:20:b1:80:e8:23:00:b2:37:9b:
28:89:9c:40:0a:5f:ba:82:a9:03:1d:84:94:1d:3d:
bc:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:70:2E:A3:58:75:0F:94:99:A0:A4:B5:FB:39:33:89:B0:8D:1F:8D
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/vHAuo1h1D5SZoKS1-zkzibCNH40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.32.0/24
Signature Algorithm: sha256WithRSAEncryption
23:c2:57:08:cd:dc:2a:74:c6:66:1c:0f:21:c8:83:9e:bc:11:
4b:64:1b:ab:0a:64:cb:41:72:92:7c:58:66:c4:cd:3a:38:87:
36:4d:63:43:4b:12:2f:2f:57:fb:c1:97:20:20:17:b2:ee:17:
ba:ef:24:77:cc:4d:4d:c4:9b:a3:28:e5:e8:d7:7b:98:22:44:
2b:36:43:e3:a6:61:af:cf:d2:21:a2:e7:f7:f8:a3:e3:0c:13:
93:f6:e4:ed:b1:d4:63:4c:32:de:ad:30:f6:be:f1:e0:51:e7:
a7:ce:d9:5d:6f:66:71:83:a5:59:63:3f:9a:30:ca:34:05:b3:
98:ce:36:70:a1:60:e6:fb:39:c3:af:b4:f2:3e:15:f6:e2:5b:
62:ed:00:15:d0:a3:e6:c0:9d:02:4b:4e:7a:1f:59:7f:84:21:
f6:7f:b5:39:38:be:6d:d0:ed:25:74:87:4e:30:aa:54:ec:1a:
45:b8:89:1a:f0:4a:b0:93:e3:7c:74:05:56:e8:2f:91:c8:82:
62:5d:1c:c5:5c:fc:e5:55:50:b4:37:50:6c:9e:61:fa:7a:62:
f2:3c:d8:a0:82:d8:b5:d2:ac:33:f3:5f:11:8f:8e:da:78:3e:
a2:96:e3:49:64:97:b8:01:29:ea:6f:32:70:85:69:38:7d:2e:
c5:a7:37:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net