Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/ABx2rhtjwTWrmDpuMANGgApX0NM.roa
File: ABx2rhtjwTWrmDpuMANGgApX0NM.roa (raw, json)
Hash identifier: yjlqhGtxrOTxOjofiM1oqd1m38g98HcwU1eiFQAuHpM=
Subject key identifier: 00:1C:76:AE:1B:63:C1:35:AB:98:3A:6E:30:03:46:80:0A:57:D0:D3
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 06A4A35A
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/ABx2rhtjwTWrmDpuMANGgApX0NM.roa
Signing time: Mon 09 May 2022 03:09:33 +0000
ROA not before: Mon 09 May 2022 03:09:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111453018 (0x6a4a35a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: May 9 03:09:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=001c76ae1b63c135ab983a6e300346800a57d0d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:55:5e:2b:e2:65:cb:28:64:0a:99:38:c6:be:
68:68:96:0d:01:b2:78:ff:d2:9f:dd:20:0c:b1:ac:
7f:94:28:b8:79:f9:b5:0a:e9:f0:61:84:1f:0d:c8:
09:3c:f8:2c:13:bf:cd:86:76:aa:4e:1c:40:ea:5f:
cf:68:32:48:84:d9:4e:a3:7f:0c:a3:48:ee:6e:ca:
23:ce:c8:d5:73:16:4e:2f:bf:cf:df:40:a2:85:b6:
b3:7d:e3:24:95:57:f7:db:b6:b0:19:b4:d2:19:f4:
2b:e6:c4:80:c1:f5:4b:7e:47:19:4b:58:3b:8d:b3:
8d:e5:11:09:9c:cc:73:09:87:6d:30:c1:45:ab:d5:
c8:f4:48:34:9a:cd:c7:84:aa:9c:75:63:95:15:e2:
0e:0b:16:f4:96:6a:f4:95:5b:0c:fb:e7:e0:2d:aa:
bb:3c:53:77:b9:17:22:3b:2a:d7:6c:00:28:6d:5c:
a5:b5:55:24:87:e5:13:25:af:6e:43:be:7a:87:30:
33:dc:4d:af:9f:6c:5e:65:bc:11:f1:fb:f9:18:5d:
76:ba:54:f7:91:e9:58:34:d1:e8:91:1d:f8:42:5c:
48:c0:f6:8c:76:aa:fb:99:33:f1:bb:20:74:20:67:
22:59:dc:9f:55:61:cc:b4:a7:86:71:ed:4c:07:6c:
de:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:1C:76:AE:1B:63:C1:35:AB:98:3A:6E:30:03:46:80:0A:57:D0:D3
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/ABx2rhtjwTWrmDpuMANGgApX0NM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
80:3a:0b:73:49:78:70:fc:bb:c4:c4:44:26:2f:48:f7:71:8a:
88:4b:1f:45:29:4d:df:11:fe:31:1f:a5:3b:9e:ed:42:b9:3e:
72:bf:01:f6:b3:ed:9b:e6:8a:53:1a:0c:d7:2d:72:57:fd:78:
f4:09:a7:1d:6a:fa:28:16:bd:09:2d:78:e0:fc:51:38:6b:4e:
53:9c:7c:78:60:98:a0:46:92:e5:e9:b0:89:db:0f:23:70:7f:
c8:3e:d2:90:2a:76:d9:4b:3a:7a:bb:16:e6:10:0e:14:79:85:
b2:ca:b6:1b:70:d7:cb:ed:4d:59:19:3a:cc:5e:3c:55:ce:17:
31:b0:7c:70:55:5d:78:0f:05:08:c7:75:9c:52:d6:0b:2c:4a:
54:26:d1:fe:4a:9d:f4:75:1b:fd:60:08:74:3d:3f:4d:40:77:
a2:0f:12:cf:fc:b8:e3:9d:59:f2:fa:62:d2:d7:2a:78:36:b5:
67:8c:e7:93:89:7e:df:3e:7b:b7:04:70:fb:79:3d:cf:7c:8a:
13:0b:f4:32:7e:e1:96:c2:04:88:75:51:2a:9a:f0:da:16:50:
a6:83:68:95:98:24:04:44:98:14:19:69:f7:ab:ff:05:18:61:
5d:5c:53:b8:5a:1c:2b:6d:22:ab:3c:be:b2:8f:73:36:32:35:
c2:9d:da:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:46 2023 by rpki-client on console-ams.rpki-client.org