Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/3eX4YDURZNOqDg_RWOjLPzNdTrc.roa
File: 3eX4YDURZNOqDg_RWOjLPzNdTrc.roa (raw, json)
Hash identifier: XJQ8+tPW6QUdczKze1Gq2LXRMgExXAMq//YpxMDoyTc=
Subject key identifier: DD:E5:F8:60:35:11:64:D3:AA:0E:0F:D1:58:E8:CB:3F:33:5D:4E:B7
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 05FC3F98
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/3eX4YDURZNOqDg_RWOjLPzNdTrc.roa
Signing time: Sun 17 Apr 2022 11:44:14 +0000
ROA not before: Sun 17 Apr 2022 11:44:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100417432 (0x5fc3f98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Apr 17 11:44:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dde5f860351164d3aa0e0fd158e8cb3f335d4eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e8:64:70:15:0e:e3:ae:a7:09:28:54:d2:68:
e8:ad:79:53:ee:3e:54:bd:25:88:27:c8:61:c1:52:
dc:71:66:37:a7:94:4b:56:06:e1:65:34:8e:88:6b:
f6:3a:ea:60:37:b5:e2:e6:41:59:87:49:e7:ee:81:
f7:1a:8e:ea:c3:22:61:b1:de:ac:d8:83:f4:69:76:
1e:2f:b7:65:ba:35:60:ed:82:86:0c:5f:3e:1d:cf:
9e:0a:06:87:0d:a2:42:93:99:74:c1:f0:40:ad:69:
f2:b1:84:c6:10:b9:b9:78:19:09:9a:28:bb:8a:1e:
87:1a:12:42:94:cf:29:28:05:5c:30:3a:9c:0e:31:
96:6b:17:73:fb:b4:e4:82:7d:c8:3a:35:53:c2:58:
43:6a:43:a4:b9:91:a0:fe:88:4f:87:e1:e3:58:9a:
b1:9a:cc:62:58:5c:1a:ac:46:e1:4b:cd:b1:28:19:
d7:17:31:82:83:68:9e:88:f2:f9:b0:79:ab:1f:16:
32:d1:11:65:35:d3:6c:8c:17:2e:6e:1f:cc:3c:6c:
14:db:b4:40:a1:b6:c1:f4:10:e2:d8:0f:07:e5:07:
f0:b8:d3:b9:29:96:42:a1:92:e3:cf:64:dc:19:a5:
22:84:1c:28:0a:8e:1f:3a:d6:2c:1e:ea:23:f6:f5:
5f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E5:F8:60:35:11:64:D3:AA:0E:0F:D1:58:E8:CB:3F:33:5D:4E:B7
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/3eX4YDURZNOqDg_RWOjLPzNdTrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
87:e0:76:62:ca:f1:ec:71:74:8d:a2:e5:26:69:fa:cf:97:7c:
2a:3d:f3:7b:d8:31:d3:dd:37:3f:26:30:b4:e1:0d:24:21:a7:
f2:46:f1:1b:6f:c9:4d:bd:6a:88:55:bb:9c:01:e7:5a:ef:b1:
62:c6:4e:5c:a5:ea:01:0f:f0:23:20:72:ae:aa:60:d8:a3:97:
e5:ae:c4:ce:c1:bc:8a:8a:38:cf:24:56:4a:d4:8a:42:72:75:
40:8c:e8:85:9f:0d:1f:26:1a:4a:cb:01:75:7f:7b:7f:96:cd:
52:3f:43:b4:d6:1f:24:cb:5a:00:b7:d8:c7:6b:a0:d7:17:b8:
fe:d5:71:f8:ec:b3:4b:fd:b7:31:87:9e:a3:9b:ac:e8:1c:5b:
eb:90:71:38:24:c8:87:b2:26:c4:7c:bb:20:00:21:50:08:92:
ea:77:17:ca:c0:15:9e:23:02:6e:39:cc:6b:34:47:31:5d:de:
ba:06:c5:1b:b7:8a:4d:eb:f4:9e:98:65:1f:da:c8:2f:66:b7:
b1:31:01:96:0f:58:f5:cd:3e:84:f9:f9:d1:6e:83:22:af:5c:
77:05:2e:54:05:88:fc:a3:29:fc:59:10:ae:a6:0f:b4:b0:2b:
99:b4:da:a5:aa:bf:c7:08:6d:b9:a8:51:5c:49:04:7b:ea:90:
4e:0c:f9:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:53 2024 by rpki-client on console-ams.rpki-client.org