Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Cgcgsc_NVDUIcexh-1PwlwVdwbs.roa
File: Cgcgsc_NVDUIcexh-1PwlwVdwbs.roa (raw, json)
Hash identifier: zr/xt2nMw2fnnDGl+0lULneShWdsfd6Hkw9so8yUoQE=
Subject key identifier: 0A:07:20:B1:CF:CD:54:35:08:71:EC:61:FB:53:F0:97:05:5D:C1:BB
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 042B018E
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Cgcgsc_NVDUIcexh-1PwlwVdwbs.roa
Signing time: Mon 14 Feb 2022 04:21:53 +0000
ROA not before: Mon 14 Feb 2022 04:21:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69927310 (0x42b018e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Feb 14 04:21:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a0720b1cfcd54350871ec61fb53f097055dc1bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fb:57:c0:69:64:41:4a:15:43:99:d2:df:79:
07:c2:40:66:69:08:4d:4e:da:8e:44:0e:e8:68:0d:
59:c6:fd:5c:03:67:6f:73:28:b0:8c:b2:5c:8b:89:
da:43:29:7f:58:eb:9c:c7:97:03:9c:82:18:06:d7:
01:96:27:3e:80:1b:b5:68:27:12:59:bd:9f:2b:f6:
fc:45:44:03:47:ae:ca:0d:bc:83:68:33:dc:07:7d:
19:a9:ca:6f:f1:78:2b:4a:ce:db:28:56:3d:e7:db:
0d:67:1f:b8:c2:65:2a:f4:44:68:58:72:bc:1a:73:
2e:b1:20:a7:55:26:77:01:5d:77:55:18:d6:d0:fa:
6a:98:eb:10:e2:31:bc:9c:11:08:fc:1d:0e:f8:ae:
32:03:78:d7:04:82:f3:1e:25:56:de:cd:44:b8:74:
5d:ff:e2:cf:ea:d7:f6:d8:cb:a9:af:1b:c3:17:f7:
50:25:fb:72:46:12:3a:4d:30:59:14:ad:6c:29:fa:
3c:b2:cb:7e:24:3b:c1:c9:32:ba:69:49:d3:a0:b5:
42:ac:db:e3:0d:cd:9f:a2:f1:7d:ea:7c:eb:e6:78:
ba:ca:7b:3f:a8:ae:8e:dd:a6:ad:4c:4c:af:45:05:
be:e9:99:73:f2:51:f5:ec:ec:38:67:10:92:91:05:
1f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:07:20:B1:CF:CD:54:35:08:71:EC:61:FB:53:F0:97:05:5D:C1:BB
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Cgcgsc_NVDUIcexh-1PwlwVdwbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
a6:d3:70:21:22:72:6b:0c:21:a2:29:e9:9e:59:9f:3f:5f:94:
5d:ea:79:33:a7:6e:62:e2:eb:4a:af:8d:0b:c6:66:0d:bb:15:
d9:8d:52:03:5a:2b:04:03:dc:57:d9:2d:aa:17:48:35:2d:76:
b8:8d:94:bf:69:32:51:cb:1a:08:0b:8c:f2:c5:cc:04:88:57:
5f:dc:ed:36:6b:e7:03:6a:ec:ed:32:1a:f8:0a:6b:68:46:06:
df:69:97:6c:8e:8c:d4:25:53:89:fa:81:49:d9:a1:2a:96:c5:
8d:d6:48:b0:47:e9:62:55:4c:52:86:12:78:e9:4d:7c:3e:a8:
21:e4:08:18:43:7b:37:37:0f:c9:14:51:e9:17:a3:46:3a:8d:
32:9a:2b:62:0a:dd:19:7f:24:7b:73:86:00:5a:60:8e:cf:5c:
04:ce:7c:5c:5d:64:8c:76:1f:c3:c0:45:80:b4:d6:be:5b:e3:
75:06:14:ee:06:95:0b:be:93:27:89:e8:ad:7b:0d:ea:55:fa:
19:c2:98:65:40:85:e2:02:8c:00:67:e2:6d:60:f3:2d:3b:b7:
70:81:49:f4:f4:23:a6:13:56:b1:37:81:de:bf:d2:18:4a:24:
86:26:77:fa:75:48:43:7c:67:41:5b:df:e4:a9:e5:ae:12:f4:
a6:a7:17:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:54 2024 by rpki-client on console-ams.rpki-client.org