Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/3Lv9hejiPHrQINhLELiLHq25rfs.roa
File: 3Lv9hejiPHrQINhLELiLHq25rfs.roa (raw, json)
Hash identifier: mGyqKrrWs9NOZ6f5zE4BwcGTtU/M+fQ4lFrPsvokUN8=
Subject key identifier: DC:BB:FD:85:E8:E2:3C:7A:D0:20:D8:4B:10:B8:8B:1E:AD:B9:AD:FB
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 05410BB6
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/3Lv9hejiPHrQINhLELiLHq25rfs.roa
Signing time: Tue 22 Mar 2022 05:51:58 +0000
ROA not before: Tue 22 Mar 2022 05:51:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88148918 (0x5410bb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Mar 22 05:51:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dcbbfd85e8e23c7ad020d84b10b88b1eadb9adfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:f5:d3:a3:bc:60:8a:1d:f4:41:25:d5:52:6c:
59:e7:e3:c4:85:26:21:a9:0b:da:f9:90:e5:2f:4f:
22:56:d8:54:1f:08:9d:6d:03:9d:7a:0f:7c:a3:08:
06:76:46:a5:a6:20:42:fb:42:17:5f:9e:e9:93:e7:
25:6a:0d:55:4f:3f:e4:6f:80:53:9c:dd:33:00:2f:
ae:68:c5:32:38:c1:41:7c:09:8b:fe:42:3e:ae:0f:
1f:cc:9b:53:b8:44:2c:c5:ae:fa:66:a3:c6:ce:ef:
02:52:08:3f:c1:85:8e:8b:b8:8f:5a:01:df:47:a0:
54:f9:93:15:86:a7:42:cd:88:42:65:6c:3a:73:17:
1e:b0:a1:35:35:d2:f9:df:21:23:33:b9:0d:33:30:
2e:7c:d4:c9:33:06:dc:d5:1c:d4:4c:69:9e:f3:7d:
c1:94:f7:a4:7d:20:aa:65:af:c7:43:c0:b4:89:57:
97:fe:25:0a:72:d2:cd:07:fa:98:e3:43:b9:06:42:
60:4f:94:15:77:80:a7:c3:ae:09:cf:49:63:fc:06:
ec:6b:21:f1:fe:07:06:ac:9c:7b:2e:6c:04:9e:f9:
ab:ac:95:79:a9:83:1c:0d:7a:6b:c4:71:8c:6f:1a:
be:a5:ef:47:43:ca:5a:39:8b:8d:f4:19:15:e4:06:
bf:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:BB:FD:85:E8:E2:3C:7A:D0:20:D8:4B:10:B8:8B:1E:AD:B9:AD:FB
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/3Lv9hejiPHrQINhLELiLHq25rfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
32:83:c1:2d:eb:57:be:c3:82:83:b8:b4:0c:d4:4c:e5:37:b4:
17:32:a3:67:65:22:a6:80:85:63:75:b2:64:03:27:c9:a3:d6:
ba:4f:fa:75:b3:8d:6f:23:88:31:61:23:65:01:cc:9b:4b:e9:
6b:de:2f:0a:55:42:93:e1:45:68:01:3d:39:41:cd:49:03:86:
2e:30:cc:f5:a8:3f:a8:5a:84:bb:3e:0a:e4:eb:6d:8e:dc:ae:
8f:57:d6:93:7b:04:9f:74:1e:7e:d8:6a:e7:40:28:61:36:c5:
fa:8d:96:1a:38:17:3e:b2:45:69:00:d2:e2:c6:0e:0c:ab:51:
8d:4e:f2:ae:0c:fe:74:39:eb:79:24:55:85:5b:33:69:41:94:
5f:64:ed:27:e8:fd:fe:04:67:49:3a:4b:42:0c:90:66:60:e9:
13:eb:ea:34:13:39:4a:1a:ed:dc:ae:ff:b5:df:e9:e8:d5:19:
fa:0b:e9:cc:8f:e7:59:e8:c1:cf:63:b4:16:40:a3:7d:c2:5a:
53:95:9e:dd:eb:1b:66:4c:dc:a7:0f:7a:f5:fe:57:d0:79:f9:
18:47:44:f4:1e:26:0b:f1:7e:01:52:2f:3a:89:e0:d4:63:8f:
14:1e:f3:4d:c0:76:53:ac:7f:2a:8b:8b:a3:67:43:a6:89:52:
79:58:20:94
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEBUELtjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDMy
MjA1NTE1OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGNiYmZkODVlOGUy
M2M3YWQwMjBkODRiMTBiODhiMWVhZGI5YWRmYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPL106O8YIod9EEl1VJsWefjxIUmIakL2vmQ5S9PIlbYVB8I
nW0DnXoPfKMIBnZGpaYgQvtCF1+e6ZPnJWoNVU8/5G+AU5zdMwAvrmjFMjjBQXwJ
i/5CPq4PH8ybU7hELMWu+majxs7vAlIIP8GFjou4j1oB30egVPmTFYanQs2IQmVs
OnMXHrChNTXS+d8hIzO5DTMwLnzUyTMG3NUc1ExpnvN9wZT3pH0gqmWvx0PAtIlX
l/4lCnLSzQf6mONDuQZCYE+UFXeAp8OuCc9JY/wG7Gsh8f4HBqycey5sBJ75q6yV
eamDHA16a8RxjG8avqXvR0PKWjmLjfQZFeQGv+ECAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBTcu/2F6OI8etAg2EsQuIserbmt+zAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
LzNMdjloZWppUEhyUUlOaExFTGlMSHEyNXJmcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAZfYBDAPBAIAAjAJAwcBIAEH/AAC
MA0GCSqGSIb3DQEBCwUAA4IBAQAyg8Et61e+w4KDuLQM1EzlN7QXMqNnZSKmgIVj
dbJkAyfJo9a6T/p1s41vI4gxYSNlAcybS+lr3i8KVUKT4UVoAT05Qc1JA4YuMMz1
qD+oWoS7Pgrk622O3K6PV9aTewSfdB5+2GrnQChhNsX6jZYaOBc+skVpANLixg4M
q1GNTvKuDP50Oet5JFWFWzNpQZRfZO0n6P3+BGdJOktCDJBmYOkT6+o0EzlKGu3c
rv+13+no1Rn6C+nMj+dZ6MHPY7QWQKN9wlpTlZ7d6xtmTNynD3r1/lfQefkYR0T0
HiYL8X4BUi86ieDUY48UHvNNwHZTrH8qi4ujZ0OmiVJ5WCCU
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:45 2023 by rpki-client on console-ams.rpki-client.org