Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/9V1Jkh76eV4xB9HNfSpfT256MQk.roa
File: 9V1Jkh76eV4xB9HNfSpfT256MQk.roa (raw, json)
Hash identifier: tqWRvYXU7W/uqSCMZyq7xNChUWYFMiTkkCJw+aIFj1A=
Subject key identifier: F5:5D:49:92:1E:FA:79:5E:31:07:D1:CD:7D:2A:5F:4F:6E:7A:31:09
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 04594E8D
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/9V1Jkh76eV4xB9HNfSpfT256MQk.roa
Signing time: Sun 20 Feb 2022 01:00:12 +0000
ROA not before: Sun 20 Feb 2022 01:00:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72961677 (0x4594e8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Feb 20 01:00:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f55d49921efa795e3107d1cd7d2a5f4f6e7a3109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5b:0b:ab:36:27:24:6f:1b:9d:7b:3c:54:42:
d8:0d:e7:49:5a:71:c8:be:96:f8:ab:60:3d:98:72:
05:76:5d:a4:c0:49:45:f2:97:15:86:8f:aa:fd:26:
ac:94:d3:cd:2a:b3:6f:02:b0:22:fd:f1:19:fd:d5:
ff:59:5a:c4:71:9b:37:b4:32:a9:ed:c3:d0:3c:af:
5e:f0:ee:99:6d:d7:95:a8:7f:4a:ca:07:ff:0b:5c:
2b:98:48:41:ab:9e:5c:b1:d6:48:a0:f7:5a:eb:ae:
36:d5:c9:e9:8f:6a:bf:d3:fc:b5:d9:5a:e9:a1:16:
0c:00:97:aa:58:42:0b:7f:c9:26:37:70:74:90:96:
c9:3a:8c:ad:d3:95:40:8f:c1:73:96:31:97:57:5a:
b9:85:d6:36:a8:5b:4a:16:c6:21:a1:d9:93:51:67:
4b:cf:3c:0e:ba:0e:9a:06:1b:95:b7:a4:cf:21:29:
90:a6:ba:84:76:86:8d:4a:fd:bc:1d:f7:26:6d:9f:
f5:cd:03:c9:01:b7:ee:dc:6e:0d:33:a6:63:57:a9:
a7:ef:b0:8b:45:0b:19:d9:21:d2:c6:3e:0a:69:d8:
7b:7f:74:31:ae:e4:ac:c7:dd:56:bc:96:ab:81:15:
4b:cc:13:9f:ba:93:e5:2b:55:cc:82:b8:2d:52:8c:
96:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:5D:49:92:1E:FA:79:5E:31:07:D1:CD:7D:2A:5F:4F:6E:7A:31:09
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/9V1Jkh76eV4xB9HNfSpfT256MQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
94:1a:ca:a2:d8:0c:2c:6f:07:90:47:cf:4c:50:c9:50:1f:a7:
c8:66:b2:2a:e6:41:b7:51:bc:cd:35:9c:62:f4:40:12:a3:54:
73:b1:64:92:be:14:c1:6a:64:27:44:33:2d:d9:01:c8:86:22:
62:ef:b7:56:b6:c4:62:d4:2b:77:36:82:2d:c7:a7:23:9e:b3:
24:d2:38:62:36:75:af:0f:e3:58:97:23:e7:dd:89:f9:7a:81:
f6:ca:01:79:b4:17:10:71:1b:11:53:b9:00:e3:5c:a2:ff:23:
10:8e:8f:9f:4e:c6:3b:87:5a:03:81:9a:e1:68:28:52:4f:82:
76:aa:e5:80:5f:13:2a:c5:87:a9:2f:55:5f:9b:0b:be:03:74:
2a:84:9f:6e:4a:de:9b:de:1a:b7:63:f6:94:e4:40:be:04:b6:
6e:4e:c6:d9:f2:68:fa:4e:cb:45:6f:6d:4f:83:dc:e5:7f:03:
e2:af:47:02:09:75:97:0b:88:af:ea:41:b7:b2:65:7b:15:c6:
90:6d:5e:23:63:39:91:b8:38:05:f3:1e:27:56:cd:21:bc:e6:
f1:f0:de:01:ca:74:3c:9c:5d:53:ef:40:48:ad:93:51:81:cf:
6c:13:ca:33:79:dd:6a:f8:f5:90:83:15:c6:b4:5e:81:00:6f:
5c:6c:c3:68
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEBFlOjTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDIy
MDAxMDAxMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjU1ZDQ5OTIxZWZh
Nzk1ZTMxMDdkMWNkN2QyYTVmNGY2ZTdhMzEwOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL1bC6s2JyRvG517PFRC2A3nSVpxyL6W+KtgPZhyBXZdpMBJ
RfKXFYaPqv0mrJTTzSqzbwKwIv3xGf3V/1laxHGbN7Qyqe3D0DyvXvDumW3Xlah/
SsoH/wtcK5hIQaueXLHWSKD3WuuuNtXJ6Y9qv9P8tdla6aEWDACXqlhCC3/JJjdw
dJCWyTqMrdOVQI/Bc5Yxl1dauYXWNqhbShbGIaHZk1FnS888DroOmgYblbekzyEp
kKa6hHaGjUr9vB33Jm2f9c0DyQG37txuDTOmY1epp++wi0ULGdkh0sY+CmnYe390
Ma7krMfdVryWq4EVS8wTn7qT5StVzIK4LVKMlqECAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBT1XUmSHvp5XjEH0c19Kl9PbnoxCTAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
LzlWMUpraDc2ZVY0eEI5SE5mU3BmVDI1Nk1Ray5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAZfYBDAPBAIAAjAJAwcAIAEH/AAC
MA0GCSqGSIb3DQEBCwUAA4IBAQCUGsqi2AwsbweQR89MUMlQH6fIZrIq5kG3UbzN
NZxi9EASo1RzsWSSvhTBamQnRDMt2QHIhiJi77dWtsRi1Ct3NoItx6cjnrMk0jhi
NnWvD+NYlyPn3Yn5eoH2ygF5tBcQcRsRU7kA41yi/yMQjo+fTsY7h1oDgZrhaChS
T4J2quWAXxMqxYepL1Vfmwu+A3QqhJ9uSt6b3hq3Y/aU5EC+BLZuTsbZ8mj6TstF
b21Pg9zlfwPir0cCCXWXC4iv6kG3smV7FcaQbV4jYzmRuDgF8x4nVs0hvObx8N4B
ynQ8nF1T70BIrZNRgc9sE8ozed1q+PWQgxXGtF6BAG9cbMNo
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:54 2024 by rpki-client on console-ams.rpki-client.org