Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/1-tdnmxuV5H8BOsYSgJQF-Hj9p94.roa
File: 1-tdnmxuV5H8BOsYSgJQF-Hj9p94.roa (raw, json)
Hash identifier: WfYggO7Ficezs4i21v5dz2a6PBb6hnxvb465gmGl47Y=
Subject key identifier: FA:D7:67:9B:1B:95:E4:7F:01:3A:C6:12:80:94:05:F8:78:FD:A7:DE
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 04619E93
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/1-tdnmxuV5H8BOsYSgJQF-Hj9p94.roa
Signing time: Mon 21 Feb 2022 04:17:50 +0000
ROA not before: Mon 21 Feb 2022 04:17:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73506451 (0x4619e93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Feb 21 04:17:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fad7679b1b95e47f013ac612809405f878fda7de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8b:34:d2:7b:7c:84:f7:ba:0f:7e:03:90:17:
84:9d:2d:f7:f5:f0:3f:a7:03:2b:15:92:f8:e8:21:
5d:5e:04:33:44:e2:c3:e6:47:c1:37:a6:a3:cc:ec:
8f:f0:d5:7a:c3:c8:1f:3d:d1:a0:43:22:db:27:70:
b9:20:9c:0f:33:1e:ba:e1:ac:14:51:cc:18:b6:13:
be:26:e8:e5:e4:12:a6:77:04:bd:63:07:87:72:f1:
80:c7:06:a0:76:e2:13:bc:aa:35:e0:57:b2:1d:30:
22:28:a5:3f:d2:89:9b:00:2d:59:75:c8:88:c4:40:
d6:14:e5:a7:d8:34:b6:3e:0e:77:a6:0f:9b:4f:e2:
18:77:54:6f:1b:89:b6:d6:cf:bd:5d:a3:ea:c0:4b:
0f:05:b7:ce:c7:a4:49:19:01:ac:d0:c5:29:be:72:
51:57:8b:49:36:f7:12:4d:b7:61:bd:5c:e8:af:2f:
15:69:ce:1e:cf:a0:69:f9:98:c4:c7:b9:4f:d6:0e:
0e:0c:8d:c5:10:5e:55:8c:c6:a0:de:46:cd:93:3d:
05:fc:34:08:27:56:92:b2:bd:31:85:cc:a6:28:a8:
f4:84:bc:80:e7:89:e1:87:95:db:64:ff:89:9a:26:
6f:a8:80:aa:b8:8c:95:8d:d4:7b:be:30:2d:37:93:
3d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D7:67:9B:1B:95:E4:7F:01:3A:C6:12:80:94:05:F8:78:FD:A7:DE
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/1-tdnmxuV5H8BOsYSgJQF-Hj9p94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
13:e4:fa:5a:f0:29:f0:78:75:2b:24:bf:62:4c:dc:f1:61:64:
61:04:d9:a5:0f:dc:c5:ea:9c:27:45:97:b0:78:1c:85:c0:88:
fa:d7:e5:8b:3d:2c:d4:79:75:ca:c6:ac:d5:a3:f9:14:74:2d:
aa:5a:cb:9a:48:d5:d3:34:bc:1d:94:cf:90:d5:39:39:a2:01:
d9:fc:fd:72:fc:0c:39:23:22:d2:63:a2:09:4b:0f:b3:89:bb:
2b:6e:07:b0:38:7f:43:d1:c8:e2:aa:af:c4:78:d4:a4:2e:b7:
ec:ce:c5:00:86:b4:7a:31:05:00:a5:4b:7e:5c:f2:1d:20:e2:
9d:53:d2:ca:4a:22:07:c5:a1:1b:05:cc:a2:df:f8:c0:07:be:
c3:22:b7:99:50:83:14:b7:f3:a7:14:2e:8f:ae:1a:5b:1e:83:
65:6e:e1:a7:29:3b:71:c6:e7:df:52:1f:2e:0f:db:c8:3a:f3:
b2:c8:7b:ee:d3:24:de:34:f9:df:ce:93:1c:a6:86:0a:5a:b1:
d6:aa:5b:dd:17:48:a0:90:3b:4c:0e:70:60:10:4c:40:bb:dc:
c1:21:28:78:3b:65:8d:2f:2f:07:91:d9:5a:92:22:33:32:f8:
c5:45:f3:03:55:af:a0:1e:85:a1:51:aa:12:fe:6d:94:bf:e1:
9f:65:76:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:45 2023 by rpki-client on console-ams.rpki-client.org