Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Dww6zYkfzx3cVQY1zGgKY8JIdUc.roa
File: Dww6zYkfzx3cVQY1zGgKY8JIdUc.roa (raw, json)
Hash identifier: 33nu9o2hU6OMjcxKjLJtLrjKzfi6xhBb29yOqsYYFy8=
Subject key identifier: 0F:0C:3A:CD:89:1F:CF:1D:DC:55:06:35:CC:68:0A:63:C2:48:75:47
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 07BD719C
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Dww6zYkfzx3cVQY1zGgKY8JIdUc.roa
Signing time: Mon 30 May 2022 13:56:13 +0000
ROA not before: Mon 30 May 2022 13:56:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129855900 (0x7bd719c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: May 30 13:56:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0f0c3acd891fcf1ddc550635cc680a63c2487547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:02:0e:c0:3d:6c:17:e9:f5:81:69:35:41:12:
7a:9e:55:ee:e7:24:8b:bf:db:ec:13:88:5c:76:6a:
69:a4:4e:2e:0f:ef:0b:20:fe:cc:da:95:f2:64:bf:
36:37:2d:b8:a5:e5:54:b0:8f:8f:4e:2f:9e:f5:f9:
cd:e4:93:9c:62:4d:b2:98:53:ad:20:6c:ee:ad:7d:
e0:5c:f9:b5:1d:ac:3e:9d:76:12:e7:ae:24:d4:8b:
98:ee:7d:f7:99:31:a9:18:34:35:20:e6:c3:5d:46:
f1:8d:57:a3:62:fe:f4:c3:80:5b:9c:b2:44:bd:6f:
86:09:9c:74:3e:af:b5:8f:7e:88:1a:92:d5:b7:49:
fa:97:4f:b7:6a:af:ae:6f:c6:37:bd:1d:6b:e6:1b:
be:0f:58:4e:44:a4:0f:a9:3a:03:d4:23:29:98:e3:
cb:47:d2:47:a2:b8:a1:49:b2:57:01:01:9e:4b:85:
ca:42:b0:94:1d:25:36:3e:63:52:e0:af:c6:0d:a0:
54:f0:3c:88:3d:3a:d6:29:b9:64:94:1a:7f:ba:39:
5b:d6:94:4b:89:a7:fd:91:e5:d2:e8:83:7b:22:cc:
97:90:27:ac:d8:a3:67:8f:6b:7e:ac:e2:2b:32:9f:
79:03:d1:d6:e1:0c:b9:70:cf:fa:46:b5:85:e5:8b:
3b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:0C:3A:CD:89:1F:CF:1D:DC:55:06:35:CC:68:0A:63:C2:48:75:47
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Dww6zYkfzx3cVQY1zGgKY8JIdUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
5a:16:86:3a:ed:0c:c8:56:9c:c1:d6:70:42:4c:28:f4:bf:62:
d6:7f:99:2e:41:bd:cc:50:56:73:c4:71:60:2c:ef:f6:a1:3f:
fd:b7:cb:5f:64:33:e1:a9:cd:95:9e:0d:98:2b:be:6d:ee:5b:
f8:c8:37:ba:e6:14:dd:d1:bf:bd:bf:07:78:a2:71:60:6e:00:
bc:e8:65:7c:b0:2d:da:09:ef:f0:08:0c:a9:00:d3:1f:22:a0:
59:ec:da:e8:8d:9b:b3:f2:f9:35:2b:74:62:3d:48:0f:c0:9c:
7d:7a:a6:fa:15:e4:1b:0a:8c:82:e6:f7:be:3e:b4:a3:d2:38:
c6:a1:65:01:22:a3:e3:f4:40:8f:ef:68:1f:3e:cf:43:5a:86:
f8:98:e5:12:be:c8:8a:3f:af:ab:79:29:ab:d1:9f:74:50:99:
f4:6d:aa:66:c7:bf:e1:a6:27:15:48:4f:8d:af:48:53:49:15:
28:e4:2e:78:66:3d:f7:2a:72:6f:66:44:50:25:c4:c4:68:98:
58:50:c5:3b:05:b0:e3:e9:92:90:3a:1c:49:46:e4:9a:4f:d9:
fb:73:fd:7d:29:be:59:2e:bc:e9:c3:0c:98:89:56:79:0d:a8:
0f:1e:a6:2b:1a:13:fc:56:d9:4f:ea:bb:e2:ea:40:62:b9:7f:
44:0d:58:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:28 2024 by rpki-client on console-fra.rpki-client.org