Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/DM7Fj2342O2e76PImlEhalmHTSI.roa
File: DM7Fj2342O2e76PImlEhalmHTSI.roa (raw, json)
Hash identifier: 6AhGdfg5Ht6TleeyUYpNyGrrOO0T8jaaJn/2tmWDzkI=
Subject key identifier: 0C:CE:C5:8F:6D:F8:D8:ED:9E:EF:A3:C8:9A:51:21:6A:59:87:4D:22
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 06467FE3
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/DM7Fj2342O2e76PImlEhalmHTSI.roa
Signing time: Wed 27 Apr 2022 01:55:48 +0000
ROA not before: Wed 27 Apr 2022 01:55:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105283555 (0x6467fe3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Apr 27 01:55:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ccec58f6df8d8ed9eefa3c89a51216a59874d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c6:75:68:db:83:45:1f:16:96:64:09:fc:b9:
d6:1d:c5:5d:92:9c:af:1a:a0:2d:0b:cb:a7:34:9b:
a5:98:ff:67:4e:de:f3:e7:47:75:46:82:17:99:e9:
54:b5:fd:66:95:07:49:0f:c5:7d:9a:eb:49:3d:4b:
52:5d:6e:f8:9e:da:52:44:e8:90:ea:d1:9e:d2:50:
c9:4d:a5:ee:28:d9:05:10:ee:4e:1e:ae:08:15:af:
57:7c:a5:d7:2f:bd:cb:da:4e:88:dc:b6:da:f0:d4:
52:1c:3c:72:c5:1a:6d:f0:7f:b8:01:fd:b4:ff:e0:
5c:46:99:69:a3:5c:9e:84:db:68:01:33:67:c1:19:
dd:28:7b:61:dd:e6:e9:22:92:7d:48:48:25:06:d7:
81:0e:77:d6:3b:24:c4:ac:18:c2:2e:47:fd:0f:97:
60:2f:71:7e:c0:62:c3:c3:1a:ea:ab:5b:51:56:25:
ce:d2:a3:0d:63:8f:32:46:00:9d:d4:d0:00:96:bc:
5a:75:12:3f:7a:d7:0d:0b:9a:de:77:f7:c6:6b:9c:
8c:d2:ad:69:df:32:82:dd:78:23:e5:eb:17:17:68:
c7:5c:7e:ee:95:04:f2:1a:b8:3c:37:27:19:71:8e:
9d:a3:03:78:1b:2f:07:82:f8:09:89:23:ea:bd:30:
c1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:CE:C5:8F:6D:F8:D8:ED:9E:EF:A3:C8:9A:51:21:6A:59:87:4D:22
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/DM7Fj2342O2e76PImlEhalmHTSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
8e:02:e6:d1:c5:d7:26:c3:82:9b:22:9d:43:6e:77:a7:dd:27:
fd:c5:0f:d8:79:c1:c0:44:e0:6f:a4:7c:34:12:65:bf:59:f1:
6f:3a:6d:a8:ef:02:b1:38:a2:6a:35:09:fb:f9:1e:87:87:5f:
00:4c:1c:56:9e:6e:a7:6e:ea:83:29:00:a2:24:af:db:b1:52:
0a:53:f1:0c:71:ed:86:f4:7f:26:31:3d:86:4b:cc:42:bc:38:
c5:7d:6c:9a:05:40:bb:66:45:ec:9c:a2:f0:5d:f8:ad:88:59:
32:4e:61:f3:79:70:c7:7b:dd:5d:34:e6:82:6c:bd:78:74:59:
d8:a6:6a:84:06:cc:62:ca:bf:1e:dc:0f:cf:06:fb:5e:f9:5b:
62:e0:90:64:7c:95:94:cb:e7:23:82:be:54:6c:71:19:31:63:
49:77:d3:45:1a:94:8d:a9:21:d2:57:60:28:aa:ab:47:0f:cc:
de:54:db:70:0f:b4:52:48:6c:fb:ff:62:ca:06:07:64:1c:a6:
63:dd:3d:13:e9:b1:4e:7f:36:3b:0a:4b:99:8f:be:11:03:75:
ac:d2:fa:6d:24:4e:f2:df:09:8c:80:6d:03:66:63:3b:6c:6a:
ab:02:ac:c5:2a:9e:5a:6b:f2:6c:18:9f:e1:fa:34:44:82:c4:
8a:50:37:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:56 2023 by rpki-client on console-fra.rpki-client.org