Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/1LQ4OnCmzwxhF9Z1gd3IibSs1gI.roa
File: 1LQ4OnCmzwxhF9Z1gd3IibSs1gI.roa (raw, json)
Hash identifier: w6tyq1UkkQg+7RGU3XY+WuOkRe1NhiKAx2HD+YrLMwM=
Subject key identifier: D4:B4:38:3A:70:A6:CF:0C:61:17:D6:75:81:DD:C8:89:B4:AC:D6:02
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 05F34921
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/1LQ4OnCmzwxhF9Z1gd3IibSs1gI.roa
Signing time: Sat 16 Apr 2022 10:35:23 +0000
ROA not before: Sat 16 Apr 2022 10:35:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99830049 (0x5f34921)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Apr 16 10:35:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d4b4383a70a6cf0c6117d67581ddc889b4acd602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9b:1d:0e:fa:78:a0:35:b8:61:b6:f2:23:50:
54:fe:ec:d6:79:b5:08:0e:43:c2:53:21:79:4d:84:
e9:2e:d4:76:c6:6e:65:89:b9:3f:70:82:89:dd:68:
23:c3:3a:58:60:d5:03:76:58:ee:fb:7a:63:fe:b8:
9d:c7:81:eb:bf:4c:8b:7b:95:26:c0:b6:0f:da:72:
be:fd:cc:29:bc:2f:44:91:64:7d:3c:01:b2:bf:64:
5b:3b:3a:9b:fa:a3:ee:fe:d6:c3:56:4b:44:a0:f9:
e9:ff:86:cf:95:7a:14:4f:10:8b:62:3a:2b:2c:35:
71:1b:cd:0a:40:5a:0c:50:20:27:e9:a9:0d:89:bc:
7f:0b:21:88:96:45:20:dd:43:a4:bb:e7:de:98:1c:
07:b4:89:10:cb:b4:24:da:b8:fe:12:18:51:23:04:
96:58:c1:0f:19:49:a2:2c:83:ea:d6:25:46:53:4e:
b6:e7:db:da:65:30:b3:44:c4:a6:83:b3:6e:8c:09:
c4:83:78:46:0f:93:e6:e7:09:11:08:d4:fe:17:28:
66:49:6e:2b:6d:38:2b:e1:96:09:21:16:d5:3e:0c:
4e:55:9f:fb:79:cd:97:8e:58:01:09:81:5a:cd:3c:
b8:bd:f9:ba:5d:ae:cb:c5:0c:c8:4b:b5:49:92:c1:
33:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B4:38:3A:70:A6:CF:0C:61:17:D6:75:81:DD:C8:89:B4:AC:D6:02
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/1LQ4OnCmzwxhF9Z1gd3IibSs1gI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
a6:4b:7d:1d:1e:9b:af:f8:3c:fb:97:14:05:61:ec:c3:1b:4d:
99:81:49:79:7f:dd:ef:39:c5:d8:e7:96:5c:34:e9:1a:5e:83:
c7:46:ea:72:fa:87:62:9e:46:e0:f2:2b:7e:93:ae:bd:73:7d:
b2:54:fb:5c:e5:5f:6e:4c:73:e1:19:c5:d3:55:53:a3:9e:48:
2d:12:d8:6b:d8:ca:31:a8:a1:80:c0:2b:16:6f:2e:95:cf:8e:
a1:1d:f2:49:ff:e3:79:05:7a:f0:7f:73:ed:01:a2:07:c3:2a:
9d:ec:88:dd:ca:d6:22:00:80:48:05:f1:a0:90:9a:d3:54:a6:
b9:34:5a:23:be:8d:40:3f:fd:46:de:9a:62:99:bd:d0:46:06:
71:05:ce:96:1a:e5:be:5f:5b:b9:6d:a4:99:d4:4c:9b:88:0a:
69:93:8e:01:3d:0f:2c:da:8a:65:3c:ba:d7:54:ac:95:20:3a:
d1:81:1c:bc:3c:e6:b9:b9:8c:b6:6e:73:91:39:f5:c4:00:b6:
8d:fb:b6:bb:9a:9b:c1:f1:e0:d0:1e:88:e2:dc:ce:34:63:73:
94:23:35:ab:31:9d:8b:68:8f:de:82:6e:63:c9:e8:1e:a1:9d:
39:84:28:3a:78:08:54:3f:43:5f:7f:76:e6:9e:ce:16:25:bb:
e9:ae:33:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:27 2024 by rpki-client on console-fra.rpki-client.org