Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/9xX7iqD0bQwbfbsbEYrJGLc0ffc.roa
File: 9xX7iqD0bQwbfbsbEYrJGLc0ffc.roa (raw, json)
Hash identifier: F22bJA7ghNK9clLDzFX/R2i/ULp++upFAmHxxm3EjfQ=
Subject key identifier: F7:15:FB:8A:A0:F4:6D:0C:1B:7D:BB:1B:11:8A:C9:18:B7:34:7D:F7
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 08818285
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/9xX7iqD0bQwbfbsbEYrJGLc0ffc.roa
Signing time: Tue 14 Jun 2022 15:20:44 +0000
ROA not before: Tue 14 Jun 2022 15:20:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142705285 (0x8818285)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 14 15:20:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f715fb8aa0f46d0c1b7dbb1b118ac918b7347df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:30:ec:5d:90:47:86:2d:74:36:be:51:e1:77:
76:2e:93:67:92:f9:b5:61:fd:6a:ca:d8:8e:c0:1f:
d0:b4:a3:d3:67:a6:a7:2b:07:b2:95:2a:76:0b:1f:
80:28:3a:f9:a1:bf:ed:72:f2:35:ef:66:b1:61:94:
7e:33:88:fb:72:77:ae:84:a3:f0:2e:3a:44:a3:6f:
4f:94:56:25:5e:fc:e8:8b:77:0b:93:69:d2:35:09:
07:44:ff:9b:86:56:c6:1a:79:8a:ff:60:6d:87:c8:
80:dd:74:86:cd:ed:5d:5e:9e:4d:5b:7f:1f:3c:17:
56:6c:cc:7a:53:d3:c1:1c:76:be:7d:69:39:59:7d:
c3:1f:23:d7:97:af:c9:53:48:23:8e:b4:da:fa:f1:
d3:97:9c:79:1d:51:02:ed:5d:13:7f:31:c7:81:39:
ba:0d:69:24:7c:04:b7:17:77:8c:4b:bc:d5:c6:cd:
49:fc:af:7b:78:85:35:9f:49:a7:07:a4:4d:a9:de:
71:44:8e:b2:82:27:b3:62:eb:57:e6:20:d2:5c:09:
4d:eb:00:ab:5b:46:f7:0a:20:01:23:b5:92:36:81:
42:8d:12:cd:ee:91:7c:01:49:22:85:b0:39:aa:68:
6f:cd:1f:7f:d2:fc:64:11:52:07:e0:cb:31:e1:2e:
79:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:15:FB:8A:A0:F4:6D:0C:1B:7D:BB:1B:11:8A:C9:18:B7:34:7D:F7
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/9xX7iqD0bQwbfbsbEYrJGLc0ffc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
7f:6d:87:8e:66:8c:ed:e9:74:ed:80:4f:ad:41:f7:96:2a:93:
f9:b5:32:0f:c6:ef:ec:7c:5b:71:e4:34:6c:0a:cb:d8:b3:0c:
a9:22:00:3c:a3:31:6d:68:39:0f:09:90:76:0f:95:ed:d9:23:
67:39:01:fc:89:9c:cb:40:01:57:4f:74:e6:40:fa:fc:55:07:
77:8c:e7:39:84:f5:95:74:98:b1:14:ff:9c:2f:7b:e7:db:ce:
0a:02:bb:c3:6e:38:d8:87:b2:5d:1e:4a:6e:30:f1:55:1e:90:
88:15:d1:51:f2:82:3f:15:2b:e3:aa:b6:f1:af:b3:04:53:bf:
5c:06:6a:c1:8d:f9:ce:c8:f6:14:30:25:86:7d:3b:7a:94:e2:
45:70:37:85:8d:6c:3d:97:03:84:73:11:fe:71:e6:b3:40:ad:
98:0d:20:ba:15:48:64:11:36:27:d8:11:e5:c5:0b:28:88:dd:
cb:9b:f0:61:f2:02:96:51:0e:08:b5:be:cc:21:a9:35:d8:3a:
77:55:6f:48:86:46:35:7f:23:2f:6c:8b:de:2e:f2:8c:7d:f9:
ba:bb:ec:f4:05:72:12:9e:b5:61:36:fd:a1:bc:f1:bd:4a:63:
e3:ed:7d:a6:02:d7:07:91:3d:06:fa:cb:ec:19:7b:db:c3:25:
91:54:20:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:28 2024 by rpki-client on console-fra.rpki-client.org