Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/6nGQp7Jv7eE1JkV47AdY2NtDUnw.roa
File: 6nGQp7Jv7eE1JkV47AdY2NtDUnw.roa (raw, json)
Hash identifier: b44tbXfe/BaE0ljMNGujtKc2SUs+vbRcLfmKnB/vr4M=
Subject key identifier: EA:71:90:A7:B2:6F:ED:E1:35:26:45:78:EC:07:58:D8:DB:43:52:7C
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 04D3A6C8
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/6nGQp7Jv7eE1JkV47AdY2NtDUnw.roa
Signing time: Tue 08 Mar 2022 05:19:21 +0000
ROA not before: Tue 08 Mar 2022 05:19:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80979656 (0x4d3a6c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Mar 8 05:19:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea7190a7b26fede135264578ec0758d8db43527c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d2:0c:91:9b:fd:c0:f6:c0:29:4f:d6:81:a0:
43:fd:7b:a5:2b:bf:37:ba:5a:a7:c1:83:48:c8:cc:
35:36:5c:2b:70:4d:ff:d4:6a:7e:fb:e5:c5:73:1e:
37:fb:1f:c9:36:bc:7c:ab:89:09:84:86:b6:32:59:
7c:70:99:f1:39:7c:9f:b2:db:0c:95:b2:cb:0a:28:
88:64:a2:42:3a:a9:49:ba:f4:cf:0b:f1:02:39:cc:
66:71:86:35:3f:96:8e:5c:41:1a:f1:d7:3e:00:c4:
46:77:d1:9a:7d:25:4c:0c:24:ff:d4:2a:a4:50:a8:
e8:c6:b9:33:c5:20:ff:fe:8a:89:2a:91:a6:67:79:
03:e1:12:73:ad:08:e4:15:f6:1f:0e:fa:5d:c7:e3:
78:34:9b:2b:f6:7b:6b:d5:ba:8e:95:fb:6b:ff:d8:
13:71:1b:6d:e5:7f:4a:be:d3:b4:55:70:4e:38:26:
17:ff:88:4e:b2:67:9d:93:ff:32:de:45:d5:9a:40:
d3:74:9b:ed:59:f8:80:d0:bd:20:19:de:98:ce:4e:
c5:08:b5:25:09:19:5e:8d:df:33:3d:fc:6b:8e:6a:
fb:3d:9d:ee:43:35:4a:74:67:ef:1e:b3:cf:aa:1e:
9b:5d:bb:a7:c7:f4:1b:80:17:2a:b1:c4:8c:30:17:
6e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:71:90:A7:B2:6F:ED:E1:35:26:45:78:EC:07:58:D8:DB:43:52:7C
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/6nGQp7Jv7eE1JkV47AdY2NtDUnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
5a:b7:99:13:af:29:2c:c1:40:34:b3:5d:5e:7d:df:7d:bf:53:
bf:e4:df:f7:01:31:34:a7:af:a7:8d:46:71:c7:57:fa:32:a5:
d2:47:82:6b:56:c3:e5:5e:83:e6:a4:6a:01:38:cf:23:3c:2d:
91:54:65:fc:8f:4c:33:30:3c:fd:d0:3f:02:5c:bd:71:c8:8a:
46:cf:ae:dd:72:65:95:38:c3:a8:70:51:90:69:88:2d:18:c7:
0f:10:4c:a6:ed:d7:23:23:58:1b:6a:e8:d8:af:79:89:b0:4a:
59:12:20:ee:97:8c:02:b1:86:87:99:db:3f:f1:bb:d2:aa:6b:
2e:be:e4:ce:e8:4e:c8:36:ab:94:8c:93:09:f7:4b:4a:16:f5:
37:36:65:bc:d6:b9:42:f2:1b:7f:7e:79:40:ab:cf:41:e3:39:
bb:88:cc:49:86:a4:9e:3e:73:5a:f2:b9:42:c0:3f:22:66:9e:
17:db:b3:ee:2b:25:51:97:b3:3b:cd:dd:0c:73:9d:0a:b3:d7:
06:be:24:ba:58:b4:66:73:96:d4:bc:2e:2d:75:03:d5:c4:66:
85:95:e9:07:c7:fa:15:d3:45:6c:c4:67:e5:b4:5d:7a:8c:27:
0a:c8:3b:66:1a:74:5b:4c:15:41:a1:6a:00:1e:d2:70:cc:90:
91:0d:99:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:45 2023 by rpki-client on console-ams.rpki-client.org