Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/C1pN9skDO58xp5cjq3YGLkQSWDM.roa
File: C1pN9skDO58xp5cjq3YGLkQSWDM.roa (raw, json)
Hash identifier: gKttFJiQMqCzxpZpWAvQOrUA+ikJddlnM3s85ueazxQ=
Subject key identifier: 0B:5A:4D:F6:C9:03:3B:9F:31:A7:97:23:AB:76:06:2E:44:12:58:33
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 05077238
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/C1pN9skDO58xp5cjq3YGLkQSWDM.roa
Signing time: Mon 14 Mar 2022 05:38:10 +0000
ROA not before: Mon 14 Mar 2022 05:38:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84374072 (0x5077238)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Mar 14 05:38:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b5a4df6c9033b9f31a79723ab76062e44125833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:06:48:93:71:2f:07:54:ca:8e:be:0c:0c:1c:
fc:84:26:56:a7:4a:03:8f:50:80:36:e8:25:56:20:
7c:40:70:92:37:f7:0b:a0:f0:e8:46:f3:e2:c8:b3:
49:02:7b:18:07:54:b8:4f:01:0f:6a:17:a0:b6:50:
34:fe:b3:99:a7:c9:76:fe:f7:92:8c:6c:e8:c6:33:
46:09:aa:57:e2:16:4d:76:10:99:fb:4c:ed:8f:66:
84:78:8f:57:ff:fd:4a:02:80:de:02:a4:f8:c1:3f:
6e:3e:e7:f0:00:d7:51:79:13:39:aa:18:82:b6:c1:
76:f8:d0:30:a7:c2:02:ec:e4:4d:f1:dd:5a:e4:25:
70:20:a3:71:b2:9a:e0:45:b1:d4:fd:79:28:9b:01:
a0:56:2d:6e:22:72:b2:da:b6:fb:de:37:84:a5:91:
eb:52:31:52:02:30:5d:af:a1:36:74:d8:99:0d:99:
86:45:3e:9f:18:00:f9:55:ee:39:b0:7a:05:61:d0:
bf:23:b2:81:1e:c9:9d:b7:83:07:11:6c:d2:bf:4b:
d0:99:f2:0c:9e:90:e4:4b:26:c1:c9:21:8c:4b:de:
13:43:51:ba:c4:15:c5:42:ce:8b:99:fc:d5:59:1f:
31:7a:cd:77:b2:f3:73:8c:59:1a:6c:64:9d:0b:94:
a3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:5A:4D:F6:C9:03:3B:9F:31:A7:97:23:AB:76:06:2E:44:12:58:33
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/C1pN9skDO58xp5cjq3YGLkQSWDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
99:1c:5c:6b:93:2c:2b:2f:1b:9c:9f:64:52:fd:f3:b5:dd:9a:
76:8e:18:d2:ed:87:ca:ae:d9:27:3c:0d:03:8c:dc:ac:ef:ec:
72:cc:d5:ec:d9:a9:75:a6:cd:ec:49:f9:ef:5b:b7:8a:e8:2a:
53:26:52:61:b0:b6:07:da:93:7d:dd:69:04:d3:f0:50:19:47:
e7:76:7d:cb:69:86:b8:11:47:22:82:e0:bf:a5:c4:8d:97:c4:
25:8a:a3:e4:fc:f2:6d:f7:53:2f:e2:05:19:b9:1a:e7:0c:5b:
5d:bf:a5:cd:16:bd:8a:2a:70:80:2d:35:b3:6a:09:42:5e:30:
95:2a:39:47:c6:7d:e1:00:1e:53:01:6c:d2:d5:bf:c7:73:b9:
a7:89:bc:95:5e:61:83:a2:29:35:13:1d:97:2b:13:1e:19:54:
76:9e:43:01:5d:e0:e0:ca:16:63:d5:d9:fb:5a:0e:a5:98:2e:
29:c7:f2:95:a9:76:71:72:6e:08:25:93:31:f1:03:31:c5:50:
d5:47:14:e4:5c:5c:a1:a9:91:fe:1c:97:2c:7d:f4:04:12:01:
ca:d9:57:82:31:61:bc:54:c7:5c:0e:1f:d8:ef:5d:86:7b:49:
6e:68:06:cb:14:e5:9c:26:8a:95:6f:23:0d:e5:fb:aa:0f:03:
89:74:4b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:56 2023 by rpki-client on console-fra.rpki-client.org