Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/606820-7e11-4896-8360-fc0e1d100650/1/4x_C-SpEdSVsh0nqb_PzjCV5Brs.roa
File: 4x_C-SpEdSVsh0nqb_PzjCV5Brs.roa (raw, json)
Hash identifier: XjSO1yeYtRRovJxnlkYIUhs3aAVwhRkfIfbci/GP2EE=
Subject key identifier: E3:1F:C2:F9:2A:44:75:25:6C:87:49:EA:6F:F3:F3:8C:25:79:06:BB
Certificate issuer: /CN=2d9f4c904316a6e3672ac071e42324f2198344b5
Certificate serial: 0185E998579455A1B186DAC3BEDEE6394A32
Authority key identifier: 2D:9F:4C:90:43:16:A6:E3:67:2A:C0:71:E4:23:24:F2:19:83:44:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LZ9MkEMWpuNnKsBx5CMk8hmDRLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/606820-7e11-4896-8360-fc0e1d100650/1/4x_C-SpEdSVsh0nqb_PzjCV5Brs.roa
Signing time: Wed 25 Jan 2023 15:42:33 +0000
ROA not before: Wed 25 Jan 2023 15:42:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51964
IP address blocks: 149.238.64.0/19 maxlen: 24
149.238.96.0/19 maxlen: 24
149.238.128.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e9:98:57:94:55:a1:b1:86:da:c3:be:de:e6:39:4a:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d9f4c904316a6e3672ac071e42324f2198344b5
Validity
Not Before: Jan 25 15:42:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e31fc2f92a4475256c8749ea6ff3f38c257906bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1a:b4:bd:cb:ce:7e:d3:bf:be:18:9a:3c:0b:
b5:5e:1f:30:a2:07:29:ea:98:64:b4:0a:00:e1:f1:
b9:31:d4:39:44:b1:9f:38:2f:21:74:83:b7:16:b5:
5c:2b:91:87:78:4b:a8:31:5c:b9:b3:37:87:93:1f:
8c:77:c7:c0:a9:cf:c6:3e:9a:82:29:4d:b6:e0:94:
a3:82:54:af:c9:40:60:dd:cd:df:f8:66:8a:e0:6a:
c3:05:ce:e2:f8:d4:af:a2:33:e4:26:7f:1b:0d:9a:
b9:1c:52:ca:00:9d:52:6f:95:f0:dc:b0:ff:6a:2a:
3a:6e:0c:74:b0:8b:71:62:f5:eb:94:6f:16:39:de:
63:2f:87:4b:bf:d0:15:76:56:67:5a:0a:04:ba:29:
d8:59:db:c7:4c:27:63:2f:e8:12:41:74:1c:ac:fb:
0b:88:07:f0:cb:cd:bc:cc:65:21:65:6d:0e:42:4a:
ca:72:ac:08:b3:a7:20:bd:11:36:15:e7:27:51:aa:
9c:00:82:46:5d:94:ae:7d:d9:eb:69:69:8e:c7:f8:
98:65:e7:93:e7:35:c4:27:4f:73:df:68:54:1e:d4:
e0:3c:c8:46:68:b2:bc:91:3d:2e:6a:60:ed:bb:69:
7c:af:f8:78:8c:12:c4:fd:72:0d:6d:80:7e:49:98:
26:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:1F:C2:F9:2A:44:75:25:6C:87:49:EA:6F:F3:F3:8C:25:79:06:BB
X509v3 Authority Key Identifier:
keyid:2D:9F:4C:90:43:16:A6:E3:67:2A:C0:71:E4:23:24:F2:19:83:44:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LZ9MkEMWpuNnKsBx5CMk8hmDRLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/606820-7e11-4896-8360-fc0e1d100650/1/4x_C-SpEdSVsh0nqb_PzjCV5Brs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/606820-7e11-4896-8360-fc0e1d100650/1/LZ9MkEMWpuNnKsBx5CMk8hmDRLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.238.64.0-149.238.159.255
Signature Algorithm: sha256WithRSAEncryption
16:48:ca:af:4a:3a:51:7f:4d:ea:e4:80:17:09:7f:7f:ca:0d:
40:da:82:b1:d6:18:ef:ce:dd:e8:83:a3:ad:cd:a4:b6:70:57:
90:d8:4d:5d:bf:6d:40:99:44:2c:40:b3:e8:76:de:af:f7:7b:
25:d7:21:54:74:74:9c:bb:42:c7:0c:9b:ec:21:40:b2:5e:41:
ad:67:d3:ce:0d:04:66:97:50:23:1b:0e:c3:10:0e:8d:4a:99:
86:99:50:ad:47:17:bf:44:7b:1b:7d:df:b2:71:24:2f:0b:b5:
da:c8:77:71:17:74:cb:cd:63:65:4b:89:5a:e4:51:85:d3:f5:
eb:45:6f:d1:99:6c:a8:9a:96:6e:0a:4b:80:8d:a1:94:0b:af:
48:90:c4:41:9c:73:f5:f5:7a:0c:14:9b:31:8a:2d:9c:62:8c:
44:28:4e:fd:27:54:72:c2:68:92:a5:b3:7f:9c:50:5b:a8:a3:
06:c0:d0:55:5c:91:22:25:b1:f9:2c:7b:0b:49:d1:1e:9d:92:
42:78:53:ab:fe:f9:85:f6:5a:0a:eb:dd:5c:27:0d:72:1a:e1:
a7:2a:67:f7:aa:a3:57:0a:4a:b1:0e:5b:84:3c:9d:10:a0:37:
65:68:68:cc:b4:02:8f:96:84:3e:96:fb:3c:82:9e:cf:25:b0:
ad:5c:e5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:08 2024 by rpki-client on console-fra.rpki-client.org