Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/AANX1xNnS401KsTAHRUTokhoM-Q.roa
File: AANX1xNnS401KsTAHRUTokhoM-Q.roa (raw, json)
Hash identifier: qql5Ha8va3E9Plris9Iij51HwHPwrmZxN+GykO0yJS8=
Subject key identifier: 00:03:57:D7:13:67:4B:8D:35:2A:C4:C0:1D:15:13:A2:48:68:33:E4
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 0181E0B9D2B4E4690519BE3D09C21437A172
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/AANX1xNnS401KsTAHRUTokhoM-Q.roa
Signing time: Sat 09 Jul 2022 02:11:23 +0000
ROA not before: Sat 09 Jul 2022 02:11:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:e0:b9:d2:b4:e4:69:05:19:be:3d:09:c2:14:37:a1:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jul 9 02:11:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=000357d713674b8d352ac4c01d1513a2486833e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:71:48:16:15:b7:e0:63:d4:81:39:f6:99:a4:
98:0b:c0:3e:d0:8e:82:b7:15:47:bb:17:02:09:1c:
09:bb:a6:66:b2:f4:e3:44:70:c4:ee:4d:95:c9:3a:
7a:e7:98:e5:f0:1e:24:28:01:e0:ee:59:37:f8:af:
ba:2a:df:a4:50:61:9a:a4:b0:61:5a:df:4e:87:2f:
04:fa:8a:98:8d:0b:4e:7d:a5:c3:b3:91:35:20:6d:
f8:c4:2c:ca:b6:8d:51:19:20:32:94:16:ae:6d:05:
5e:8f:fc:61:5c:e1:02:96:14:7c:72:4c:1f:85:5c:
2f:a1:58:30:0f:91:7a:d0:78:a0:be:1e:83:4f:1a:
e1:79:78:05:b4:34:a8:eb:72:a2:a8:b9:6a:f8:e4:
e6:9b:92:5e:b9:74:f3:e7:ff:91:f6:ca:8a:f1:44:
36:1e:6e:8c:02:6a:71:2c:c7:86:35:2d:14:90:8c:
93:7a:8b:58:1a:67:09:39:d4:e7:75:83:cf:50:3e:
db:a8:59:74:63:d4:63:37:d3:2f:89:d2:90:63:b6:
de:92:18:6a:af:62:00:01:7a:69:fd:1f:f2:49:63:
00:a3:6f:cb:84:6e:d0:f7:78:d7:46:eb:1d:6f:fc:
a9:ef:f7:14:db:23:03:57:6a:e0:60:02:1c:11:cb:
7b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:03:57:D7:13:67:4B:8D:35:2A:C4:C0:1D:15:13:A2:48:68:33:E4
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/AANX1xNnS401KsTAHRUTokhoM-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
15:b1:75:32:0f:99:99:1d:34:a4:40:7f:73:e3:e5:71:76:a9:
6c:86:1a:60:ce:d6:c5:4f:90:f6:c1:8b:4e:02:80:48:75:e2:
60:af:25:22:a3:ac:dc:c0:cb:59:30:9b:fe:ac:3d:f5:76:e3:
6d:05:5a:b1:32:b1:43:66:63:35:53:64:e8:65:0a:88:72:42:
26:47:91:2f:95:c7:01:a3:46:bf:6d:e9:91:9e:59:16:b5:e9:
ab:80:cd:22:94:38:87:b9:7d:45:d8:68:98:e9:17:fb:ac:cb:
73:c5:72:c4:e5:81:6c:8c:f9:4e:4f:f1:39:b8:8a:6a:d6:cb:
ba:bb:98:1b:c4:62:ee:59:b4:07:02:37:72:c5:d2:38:36:f7:
e7:fc:8c:72:21:4b:15:27:7b:33:3d:d6:e8:f9:a6:55:f4:05:
88:c1:22:68:91:a0:01:d3:1a:a1:45:2f:bf:5d:3c:17:00:34:
11:0b:3a:f7:72:87:95:8f:7a:10:92:63:05:a3:9a:7b:50:11:
1e:fe:81:96:45:3c:90:f7:cb:c6:44:ec:91:90:34:21:57:bd:
5d:da:6e:d5:f0:e2:07:9b:83:ac:97:40:f7:4d:83:f3:26:ce:
8d:55:bc:a5:0b:90:4b:f1:d8:f6:61:4c:c0:57:02:e3:65:c7:
ca:aa:12:53
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYHgudK05GkFGb49CcIUN6FyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiM2RhNmU5OWM2NjY1MTNhMmNlZTVmMGUwZDNhYjc0NWYx
NjdkYzMwHhcNMjIwNzA5MDIxMTIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDAzNTdkNzEzNjc0YjhkMzUyYWM0YzAxZDE1MTNhMjQ4NjgzM2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXFIFhW34GPUgTn2maSYC8A+0I6C
txVHuxcCCRwJu6ZmsvTjRHDE7k2VyTp655jl8B4kKAHg7lk3+K+6Kt+kUGGapLBh
Wt9Ohy8E+oqYjQtOfaXDs5E1IG34xCzKto1RGSAylBaubQVej/xhXOEClhR8ckwf
hVwvoVgwD5F60Higvh6DTxrheXgFtDSo63KiqLlq+OTmm5JeuXTz5/+R9sqK8UQ2
Hm6MAmpxLMeGNS0UkIyTeotYGmcJOdTndYPPUD7bqFl0Y9RjN9MvidKQY7bekhhq
r2IAAXpp/R/ySWMAo2/LhG7Q93jXRusdb/yp7/cU2yMDV2rgYAIcEct7iQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAADV9cTZ0uNNSrEwB0VE6JIaDPkMB8GA1UdIwQY
MBaAFEs9pumcZmUTos7l8ODTq3RfFn3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3oybTZaeG1aUk9penVYdzROT3JkRjhXZmNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82ZjIzMmUtMjI3NS00NGU5LTkxYzAt
YzczOTdhMjY2OWE5LzEvQUFOWDF4Tm5TNDAxS3NUQUhSVVRva2hvTS1RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi82ZjIzMmUtMjI3NS00NGU5LTkxYzAtYzczOTdhMjY2OWE5
LzEvU3oybTZaeG1aUk9penVYdzROT3JkRjhXZmNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBl9gEMA8E
AgACMAkDBwEgAQf8AAIwDQYJKoZIhvcNAQELBQADggEBABWxdTIPmZkdNKRAf3Pj
5XF2qWyGGmDO1sVPkPbBi04CgEh14mCvJSKjrNzAy1kwm/6sPfV2420FWrEysUNm
YzVTZOhlCohyQiZHkS+VxwGjRr9t6ZGeWRa16auAzSKUOIe5fUXYaJjpF/usy3PF
csTlgWyM+U5P8Tm4imrWy7q7mBvEYu5ZtAcCN3LF0jg29+f8jHIhSxUnezM91uj5
plX0BYjBImiRoAHTGqFFL79dPBcANBELOvdyh5WPehCSYwWjmntQER7+gZZFPJD3
y8ZE7JGQNCFXvV3abtXw4gebg6yXQPdNg/Mmzo1VvKULkEvx2PZhTMBXAuNlx8qq
ElM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:28 2024 by rpki-client on console-fra.rpki-client.org