Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/DZgeW45SXwblU_phWlwoqHsNXYg.roa
File: DZgeW45SXwblU_phWlwoqHsNXYg.roa (raw, json)
Hash identifier: ExtmCnRGsU9sPnwkow/KkSFiBmu3D80+kfsAKyoZ2jo=
Subject key identifier: 0D:98:1E:5B:8E:52:5F:06:E5:53:FA:61:5A:5C:28:A8:7B:0D:5D:88
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 082CAC74
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/DZgeW45SXwblU_phWlwoqHsNXYg.roa
Signing time: Wed 08 Jun 2022 00:08:02 +0000
ROA not before: Wed 08 Jun 2022 00:08:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137145460 (0x82cac74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 8 00:08:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0d981e5b8e525f06e553fa615a5c28a87b0d5d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6c:fb:b5:58:eb:44:83:b6:52:7d:fe:09:88:
4e:62:2f:73:9f:f0:bb:8a:8f:37:5e:92:b7:62:5f:
64:e1:69:48:11:bf:56:ce:ad:ad:44:5a:26:bf:1f:
11:00:3c:fa:b2:37:67:b7:a6:55:46:4f:80:31:f8:
ec:cd:6a:27:3f:59:c4:b2:e8:76:ec:62:ed:d7:11:
46:70:78:c3:47:ce:d2:c2:93:a0:5e:61:fc:63:74:
f5:7a:84:d8:12:32:4b:81:56:4c:99:97:c6:d2:7f:
cd:83:53:de:f2:a8:55:c3:d3:b5:a4:7f:ef:9b:2f:
21:ba:b5:cb:4f:9a:e6:43:15:cd:2a:a7:70:72:c2:
75:5f:52:65:6c:43:f5:09:a5:bb:2f:4d:15:a6:b4:
32:a8:ab:76:f0:4c:1f:05:19:34:77:43:6b:05:90:
2f:ed:9f:34:d9:84:3d:5c:62:f7:c4:4b:f9:39:eb:
f6:62:ea:bc:e8:36:c8:f4:37:af:e7:e2:09:6a:11:
33:46:02:1f:29:44:d5:bf:6f:4b:5d:fa:93:ee:01:
75:df:2a:93:ae:61:3c:c4:c7:1f:db:00:71:d6:b0:
dc:3c:14:d6:ae:f8:42:80:86:5d:c1:ae:3a:84:b7:
8e:ea:2f:19:84:4a:48:e2:bf:49:6c:78:68:f6:a5:
f4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:98:1E:5B:8E:52:5F:06:E5:53:FA:61:5A:5C:28:A8:7B:0D:5D:88
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/DZgeW45SXwblU_phWlwoqHsNXYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
62:91:68:38:c8:c9:0d:d9:e0:04:7b:d3:4e:0b:39:e1:bd:34:
07:d3:9a:64:48:f5:21:16:12:d4:b2:38:d0:5e:28:24:92:3c:
b0:f6:94:6a:b2:e8:d4:83:49:61:aa:48:08:7e:32:b5:89:39:
04:fb:7d:ba:5a:fd:a4:b4:61:ff:79:b1:ae:24:58:73:f4:2c:
3e:f8:0e:a2:b9:35:ee:be:ba:29:22:f0:cf:2e:aa:b7:88:b4:
51:28:1a:08:a2:b1:5b:84:f6:fe:f5:00:d8:0c:9e:b7:fc:1c:
11:dc:5e:2a:a7:33:c9:7b:9f:78:e0:81:23:0a:b6:8f:4b:5f:
b0:d7:bd:7f:dc:9b:1b:0f:e8:95:37:5d:be:b0:d8:88:b5:7b:
3d:f5:c9:d2:52:3f:05:73:cc:e1:4c:61:3e:03:16:12:c1:bd:
50:8a:50:dd:77:f5:83:2d:68:3a:27:c3:d4:8a:5c:39:69:84:
02:4c:1e:96:f0:95:ff:2a:7c:ea:3b:cc:ca:86:f5:b0:61:69:
e2:90:56:9f:dc:ec:1a:0f:7c:bb:c1:c1:ed:ae:2d:43:91:6e:
88:88:bd:45:b8:01:4c:75:ae:f5:a3:17:eb:ee:d0:ad:18:a4:
ba:b1:b6:74:17:ed:07:63:a0:b7:a0:4a:b6:de:be:a0:29:87:
a9:05:a2:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:54 2024 by rpki-client on console-ams.rpki-client.org