Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/E2uFgu1MmHpDPpSxY5ijSCA3ysc.roa
File: E2uFgu1MmHpDPpSxY5ijSCA3ysc.roa (raw, json)
Hash identifier: KvrZtr7PYNmXUS03v7aFdhYVTCIp9vLRghmDVRl3N7U=
Subject key identifier: 13:6B:85:82:ED:4C:98:7A:43:3E:94:B1:63:98:A3:48:20:37:CA:C7
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 08A69832
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/E2uFgu1MmHpDPpSxY5ijSCA3ysc.roa
Signing time: Fri 17 Jun 2022 02:33:44 +0000
ROA not before: Fri 17 Jun 2022 02:33:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145135666 (0x8a69832)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 17 02:33:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=136b8582ed4c987a433e94b16398a3482037cac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:79:d2:59:b2:d6:8f:65:a3:50:91:ee:93:b3:
f9:04:9b:1a:f5:09:a4:97:f9:66:ce:2c:42:d5:43:
75:31:f6:d6:be:14:72:eb:d4:8f:98:e0:d3:7a:d9:
95:c0:03:cc:ea:61:4a:57:a5:38:4c:40:ab:96:e5:
24:f7:3c:97:ce:d6:50:df:9a:42:fa:eb:d4:1f:d9:
b9:66:87:11:79:78:80:24:a6:b5:1e:29:cd:72:08:
8f:5d:a7:57:29:b5:60:ad:29:28:52:f8:2d:0f:52:
c2:0f:e9:bc:54:f2:8d:37:ea:67:54:00:42:e0:65:
57:c7:38:44:a1:27:7c:df:f8:8e:5c:a2:07:cd:06:
fa:da:64:91:a5:aa:07:ab:51:a1:e7:a3:df:7f:b0:
92:6b:56:25:10:13:a9:8c:b2:19:79:8a:8c:ac:d2:
21:3e:eb:15:6d:f5:d9:5b:9b:d4:b3:4a:d2:e8:f6:
77:63:3e:86:8a:6b:87:3b:1b:76:98:7b:96:b7:b3:
28:40:86:77:d9:ab:bc:ac:5b:6c:da:a5:b7:e6:d3:
b2:a6:9c:d7:a4:d1:2f:37:b8:99:0b:81:79:7e:23:
13:7f:43:d4:17:29:bf:ae:4d:2e:ed:73:50:4d:61:
e6:4c:c8:7c:9a:82:c4:ca:66:b9:e7:cd:34:d2:2a:
4a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:6B:85:82:ED:4C:98:7A:43:3E:94:B1:63:98:A3:48:20:37:CA:C7
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/E2uFgu1MmHpDPpSxY5ijSCA3ysc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
9d:db:a4:5c:3a:ff:5b:55:f2:20:c1:19:53:63:2c:9b:6c:14:
cf:b9:88:66:3a:98:92:ba:af:7d:70:fc:3f:dd:6b:e0:29:d9:
5d:b0:53:55:7d:9d:eb:e1:f3:ea:9b:2d:21:73:60:1f:90:57:
fe:53:53:9e:f9:e1:1e:28:74:28:20:d1:09:a3:a1:e0:88:42:
94:f7:06:eb:c9:fc:2a:c3:80:48:0f:74:14:b3:a8:26:62:9a:
d6:53:42:39:45:86:b7:c7:7a:34:8c:a2:71:d0:41:4f:17:22:
a8:4d:04:d7:1b:78:8e:39:8a:00:4e:33:3f:a0:78:d1:f4:93:
44:66:4d:22:b9:68:d4:79:60:ec:08:da:0a:9f:6d:b8:63:b7:
bb:6d:01:be:89:fa:5f:42:75:16:98:e7:f7:aa:3a:6f:8f:a1:
78:d6:45:f9:fe:df:2c:3b:d9:3b:00:fd:6c:36:ff:62:9d:d7:
2a:77:ab:d2:4e:c0:e9:9f:be:88:e1:55:bb:18:74:8f:b6:b4:
96:a6:20:74:98:89:d7:5d:94:f6:29:e2:76:0f:68:4c:64:7f:
31:3d:c2:6e:42:4a:bb:3a:2e:0a:4f:16:fa:14:56:e1:fe:21:
3c:16:f9:f1:76:66:d4:f7:76:24:62:aa:ee:14:41:fe:b7:f0:
a4:92:1a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:28 2024 by rpki-client on console-fra.rpki-client.org