Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/CIoHvQB687_62jP9A-xPm3fHP-c.roa
File: CIoHvQB687_62jP9A-xPm3fHP-c.roa (raw, json)
Hash identifier: uSVQkMX2+a32efoOOhL3YLrddsrElrjEUxCImY7YxdQ=
Subject key identifier: 08:8A:07:BD:00:7A:F3:BF:FA:DA:33:FD:03:EC:4F:9B:77:C7:3F:E7
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 041AF0F3
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/CIoHvQB687_62jP9A-xPm3fHP-c.roa
Signing time: Sat 12 Feb 2022 12:21:38 +0000
ROA not before: Sat 12 Feb 2022 12:21:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68874483 (0x41af0f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Feb 12 12:21:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=088a07bd007af3bffada33fd03ec4f9b77c73fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:14:4e:bc:00:8e:96:30:8e:91:ef:e3:b5:bf:
f7:5b:f4:09:db:61:4f:6b:49:33:f8:f4:2b:e8:25:
7b:c5:d0:59:c4:44:8e:6e:9c:67:c3:29:58:13:86:
c0:8e:2a:2a:40:6e:94:0c:bf:14:ce:c2:7b:51:f9:
8e:f1:d0:a0:41:bf:7f:f2:61:a1:a0:c7:d9:10:52:
77:a6:fb:f1:ad:fa:b6:24:3d:f1:a8:f7:19:fd:47:
2d:07:e0:1a:c2:b4:bd:c5:39:3f:d7:40:e4:bc:ba:
6d:b3:6e:66:4c:d8:f7:36:a9:45:22:c5:f0:82:66:
1b:21:c9:6a:61:d8:c3:04:93:ab:20:19:ee:bc:76:
6c:bf:6a:33:f3:44:59:8e:ea:f8:09:70:56:8d:62:
49:96:07:f1:bb:27:41:a2:a7:6a:ca:00:ac:e0:44:
e7:bb:1d:f9:b0:c6:e7:a4:b2:a3:b1:52:31:b2:bb:
84:8a:e1:a2:69:2d:40:2c:13:63:ab:f1:7c:8d:08:
f0:b3:eb:b0:6b:74:fc:4a:12:04:e7:ee:ad:0f:ae:
c9:63:08:5b:d6:87:ad:53:55:86:14:e5:ed:25:50:
63:2e:32:dc:ac:88:fb:6c:e5:53:34:67:fa:19:36:
ed:b2:4b:a7:83:d8:08:cf:f8:ba:18:41:5e:e7:5f:
23:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:8A:07:BD:00:7A:F3:BF:FA:DA:33:FD:03:EC:4F:9B:77:C7:3F:E7
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/CIoHvQB687_62jP9A-xPm3fHP-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
1e:33:c9:a0:cc:e2:92:bd:40:4f:a9:57:75:2e:6f:77:2c:78:
55:3c:92:d9:89:6c:ea:a6:bd:95:e2:0d:c6:e7:e3:0d:da:58:
0c:92:29:03:77:d0:76:bc:4d:70:e6:90:21:62:3c:c6:c9:18:
78:34:7f:59:77:e6:48:f7:69:da:d0:60:61:34:01:80:a0:53:
1d:0f:1f:6c:82:96:f8:83:47:7c:9f:e2:9c:9b:ab:1c:10:9a:
e0:a5:1a:0b:78:a0:31:13:70:f9:94:90:a3:bf:4f:e5:45:ad:
cc:52:29:b4:f0:e5:27:84:71:e8:e2:93:67:2d:45:54:fe:9e:
83:eb:a3:25:02:7d:47:cb:e0:4e:2a:7a:9c:cc:1a:10:5c:33:
cb:29:dd:8b:26:e7:eb:d5:a3:49:5f:af:57:e3:8f:b8:8d:a2:
ec:0c:71:6f:e0:81:3e:54:c0:7c:9c:d5:11:3b:62:53:e2:ad:
db:7a:7a:72:00:75:84:0a:02:79:a6:53:64:0e:d0:95:b9:93:
22:72:1f:73:1e:15:a1:c0:c6:f2:a0:7b:78:7d:0d:7a:67:6f:
c9:42:1e:8f:49:96:5a:ca:5a:c8:a5:40:40:7c:12:2c:a5:d7:
d6:4b:d9:36:c6:f6:1d:ac:e2:b5:53:1e:cc:cb:d6:52:87:c9:
1f:cd:c4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:28 2024 by rpki-client on console-fra.rpki-client.org