Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/72Oks9YcD1567OlLuRYBbiEG1ZU.roa
File: 72Oks9YcD1567OlLuRYBbiEG1ZU.roa (raw, json)
Hash identifier: frUi/15JdSoCgdWAlRkKJshhY5Kc4zWTOgJk0Mnslag=
Subject key identifier: EF:63:A4:B3:D6:1C:0F:5E:7A:EC:E9:4B:B9:16:01:6E:21:06:D5:95
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 059878D2
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/72Oks9YcD1567OlLuRYBbiEG1ZU.roa
Signing time: Mon 04 Apr 2022 03:21:35 +0000
ROA not before: Mon 04 Apr 2022 03:21:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93878482 (0x59878d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Apr 4 03:21:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ef63a4b3d61c0f5e7aece94bb916016e2106d595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7b:47:bf:d6:fa:62:68:91:2f:c3:41:de:ae:
84:1a:fa:e6:f8:33:e6:c3:dc:a7:03:c4:28:54:e4:
f5:07:ec:56:fc:1c:86:02:9b:a1:ff:cd:ed:c0:91:
91:4f:12:05:33:1a:b3:5d:f9:be:1c:30:c9:4d:b8:
21:ae:f5:fe:1e:15:50:d9:f9:d1:6b:4d:4b:2d:66:
c2:8a:b6:db:a9:63:93:e1:a7:dd:bc:56:c9:6e:aa:
cf:79:ef:3e:0e:b4:cd:c1:ed:c7:6f:54:f1:ae:cf:
56:21:e3:b7:bd:dd:b2:2f:08:fc:04:2e:12:24:a3:
98:31:d2:af:a2:a7:c4:ad:60:9a:eb:d9:eb:71:3e:
a4:f7:a4:94:53:84:5f:75:e2:f9:e1:ae:89:45:76:
0f:39:3a:f5:31:5d:ad:a3:7c:9a:fa:29:f5:97:7c:
ea:d2:b5:f0:3a:03:30:23:eb:df:dc:fb:7a:f1:fc:
30:33:ac:af:b8:c8:2a:37:4c:8c:f3:bc:50:86:94:
b2:67:11:66:40:7f:9e:bb:b3:bd:96:cd:59:68:2d:
17:ad:37:80:1e:30:0c:b4:c2:7d:98:69:e1:98:31:
38:2a:b0:4a:18:33:4f:7e:e7:bf:8b:2f:04:c3:4e:
88:9e:90:c3:80:4d:e1:45:aa:74:a9:2c:4e:3d:08:
a9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:63:A4:B3:D6:1C:0F:5E:7A:EC:E9:4B:B9:16:01:6E:21:06:D5:95
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/72Oks9YcD1567OlLuRYBbiEG1ZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
13:4b:c8:c4:7b:40:60:1c:9a:a1:af:46:dc:eb:03:87:2a:d3:
75:79:65:26:f5:27:1c:88:90:32:df:d9:48:2a:22:05:bb:37:
67:38:b2:0d:7e:ad:4c:ff:58:b3:7a:32:3c:c9:8d:3c:ac:8c:
bd:e4:82:cc:13:ee:9d:c3:17:58:53:1c:b5:d8:6c:29:59:68:
e8:39:f6:6a:93:7d:c6:2c:c7:bc:57:88:f6:20:a3:7f:80:8c:
93:e4:58:d0:06:57:cd:32:08:ee:54:4e:2d:4a:ff:a2:cd:84:
02:ff:df:6a:23:e0:b8:d7:3b:c3:bb:33:2c:06:29:8f:9e:a6:
28:4e:68:98:a3:dc:8a:e9:5a:de:59:ea:34:01:b9:17:67:c2:
80:e3:70:03:95:49:ff:11:01:8f:03:6d:31:e4:81:98:b3:12:
0c:30:e0:51:04:42:0f:f6:64:34:d7:3d:54:7c:11:f0:c8:f5:
d0:c3:4d:ca:48:e8:a0:68:33:8c:cd:0f:f6:c2:a1:4e:95:93:
6a:c9:31:fc:0c:f4:8e:5d:af:99:26:f5:2b:54:d7:08:55:7d:
68:cf:d1:94:d1:ed:26:9b:42:10:63:13:1b:50:c7:bb:3d:ab:
cb:71:1a:a9:59:08:f9:32:a7:f6:71:01:a0:d2:2a:df:ab:2e:
89:ea:86:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:28 2024 by rpki-client on console-fra.rpki-client.org