Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/6ZljlyNrA4dkSJnV0r11rsZJYKI.roa
File: 6ZljlyNrA4dkSJnV0r11rsZJYKI.roa (raw, json)
Hash identifier: Zsdb/TnB8C6++GxfzYJyrefg5Om0il2Kvhz0XizZNdU=
Subject key identifier: E9:99:63:97:23:6B:03:87:64:48:99:D5:D2:BD:75:AE:C6:49:60:A2
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 08B526AC
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/6ZljlyNrA4dkSJnV0r11rsZJYKI.roa
Signing time: Sat 18 Jun 2022 03:39:44 +0000
ROA not before: Sat 18 Jun 2022 03:39:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146089644 (0x8b526ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 18 03:39:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e9996397236b0387644899d5d2bd75aec64960a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c6:85:89:21:e0:78:f6:1f:8d:04:68:8f:d1:
1a:99:88:80:7a:8c:af:54:52:93:74:fc:f5:00:0c:
40:9c:65:9a:54:6c:22:45:5f:e8:e1:39:9b:6a:fe:
47:cd:52:33:9a:fa:01:c0:2d:3f:88:54:35:18:da:
7a:63:44:88:aa:97:64:45:f6:10:d5:73:2b:c7:4d:
c9:01:49:01:96:d4:9e:8a:d7:05:a8:ae:7d:a8:cd:
ca:e3:40:95:d5:87:2e:b0:8e:39:a6:fd:9a:45:7a:
2b:73:49:91:53:90:87:d2:53:a0:44:4f:83:b2:5e:
7c:66:df:52:27:69:72:3e:0a:a5:83:8a:60:ed:dc:
57:15:63:72:26:22:37:23:a9:ff:c9:76:6c:8f:ae:
7a:79:64:52:ea:3b:c0:7d:5e:bf:93:3c:ec:12:18:
f3:c3:2a:23:12:a0:fc:b6:fd:53:7f:d4:90:40:de:
4f:27:ce:b6:eb:bb:40:87:5d:89:41:3b:9e:04:ec:
9b:e5:8f:90:28:69:67:a6:74:42:29:cb:5a:a9:0f:
9d:24:7b:f1:3f:19:30:35:e6:81:c5:e2:ad:2e:39:
3b:c2:f3:cb:a6:7e:40:29:5d:27:43:95:9e:51:eb:
13:c7:f9:d3:3c:f8:a7:d4:7d:48:6d:0d:ed:83:81:
ce:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:99:63:97:23:6B:03:87:64:48:99:D5:D2:BD:75:AE:C6:49:60:A2
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/6ZljlyNrA4dkSJnV0r11rsZJYKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
4d:74:16:fa:35:3a:c2:60:a6:fd:0c:2e:f3:a6:25:8e:86:01:
4c:3b:ee:d1:70:08:00:a3:aa:51:b0:13:33:ad:e0:af:77:ef:
d9:27:31:46:2f:2e:39:f3:7d:61:16:af:f4:51:e8:d4:95:01:
39:ed:c4:fe:ef:2c:59:a1:4e:98:44:e2:b0:a1:e6:71:fa:04:
ba:b9:68:86:c9:70:5e:bd:bd:7f:ba:d3:3d:ac:0b:a1:cf:6d:
24:86:97:63:7d:2a:c3:79:f5:f5:dc:1d:46:f8:ad:e0:31:89:
d0:04:b4:22:b7:d5:a0:03:3e:e1:23:44:0a:ed:78:1f:58:31:
96:a3:97:7b:f6:11:65:3b:70:b2:ba:7a:97:af:d7:d3:a0:d9:
0d:1b:ca:9a:1a:ce:98:b9:ef:91:57:15:f9:f9:0d:3e:6b:3e:
fa:0d:7d:77:41:70:35:2b:c0:64:28:36:37:fc:99:ef:43:e3:
98:72:34:67:7b:ec:98:59:ca:92:b2:3b:5e:51:92:6d:1e:eb:
63:cd:c7:37:96:7f:dc:cf:08:c9:e6:9d:18:62:b9:d8:5b:5b:
54:d7:9f:6b:bf:50:f3:86:12:2c:75:dd:3d:f1:09:72:d0:28:
32:21:d9:18:59:15:0d:8b:26:9a:fa:e0:40:33:f2:32:32:9e:
d4:ed:a9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:55 2023 by rpki-client on console-fra.rpki-client.org