Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/3XRz4A8mkUzL0aloZ-uE-fpLVjw.roa
File: 3XRz4A8mkUzL0aloZ-uE-fpLVjw.roa (raw, json)
Hash identifier: JnWwEIQ+pyO65t7GlgAMhAdG3aqoRJRiiENdP5/LbOw=
Subject key identifier: DD:74:73:E0:0F:26:91:4C:CB:D1:A9:68:67:EB:84:F9:FA:4B:56:3C
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 0707FB33
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/3XRz4A8mkUzL0aloZ-uE-fpLVjw.roa
Signing time: Tue 17 May 2022 01:44:29 +0000
ROA not before: Tue 17 May 2022 01:44:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117963571 (0x707fb33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: May 17 01:44:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dd7473e00f26914ccbd1a96867eb84f9fa4b563c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:23:de:4f:cd:31:c8:fc:3a:82:bd:98:f4:a2:
67:4a:6a:95:90:9c:d2:5e:96:68:69:84:c0:25:44:
e4:22:92:ea:3f:0a:6d:c9:08:81:37:b4:42:e2:19:
d8:0d:b5:b1:97:4e:63:78:49:8a:bc:16:d8:d2:2c:
af:c4:c5:82:ea:d1:7c:0f:83:c4:16:88:b3:e5:39:
16:ac:65:f9:37:dc:ff:52:89:13:e1:b7:8c:21:89:
e1:a3:3e:d6:71:20:79:14:e6:ed:b4:7c:9c:ea:fb:
1f:68:1e:d5:e7:a2:c8:96:6b:ca:9c:f5:c8:e5:7c:
11:5b:6b:14:1e:2c:d4:15:30:4c:02:f3:5a:6a:0f:
67:4d:d4:06:2c:57:9d:aa:93:4e:9f:b0:76:78:6e:
6f:02:9a:10:74:7a:90:a2:0b:d7:a4:df:13:05:d7:
ec:1f:40:21:93:a8:d6:e9:c3:e9:38:b3:be:ab:94:
69:c0:5a:b5:82:27:c7:db:0b:87:b6:f2:48:76:83:
da:60:03:7e:cb:5b:80:06:1d:42:8a:74:c3:9c:11:
99:fa:ce:ed:1d:01:d5:04:4b:e5:29:37:12:4e:dc:
f4:45:a1:89:e9:4f:74:fa:3c:51:b3:98:d3:67:44:
f1:3b:e7:a0:cd:ab:31:81:2d:fd:53:ae:99:d0:7e:
96:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:74:73:E0:0F:26:91:4C:CB:D1:A9:68:67:EB:84:F9:FA:4B:56:3C
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/3XRz4A8mkUzL0aloZ-uE-fpLVjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
81:66:01:75:af:37:d7:cf:4e:a6:16:20:c2:67:51:42:40:00:
1c:78:81:d2:f5:46:dd:2a:a0:fb:21:57:a0:76:4f:a7:78:9c:
7e:51:1a:16:ec:19:88:b5:3e:33:57:ce:8c:0f:dc:58:0e:a2:
e9:09:df:89:55:54:5a:74:77:cd:e3:b0:ac:d0:9e:00:a7:12:
31:ed:f7:1b:78:5b:b2:75:2d:7a:8d:6f:f6:bf:6d:d9:97:3b:
12:00:d7:2c:8e:6a:7c:c9:dd:d5:65:8f:45:33:f9:67:b5:e2:
e9:f8:f9:0b:e8:ea:cb:73:e9:56:65:85:70:02:e1:fe:8b:81:
f2:d4:79:b0:ef:47:b3:32:a6:0b:ab:34:d6:e0:e3:54:c0:44:
16:0f:10:03:9b:4f:28:d9:be:e3:8e:e9:43:6d:98:ed:82:a8:
84:09:0a:10:02:7d:d0:95:99:27:ea:70:85:55:ab:e9:04:41:
91:af:0d:e8:1d:98:b7:c4:5d:68:23:09:1b:e9:22:1b:75:ab:
d1:e7:68:cd:23:0d:c0:a3:36:0a:fa:a9:42:e2:1b:92:0f:95:
9a:30:c4:22:31:16:70:ce:70:00:fd:c5:85:2b:98:2d:af:90:
10:f2:35:60:a8:7d:49:f3:f2:ad:04:69:85:a3:19:8d:cc:d3:
8a:13:ae:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:28 2024 by rpki-client on console-fra.rpki-client.org