Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/EvdKHeMTN2MkldARNrOi1hqAi3U.roa
File: EvdKHeMTN2MkldARNrOi1hqAi3U.roa (raw, json)
Hash identifier: qf7sfRI72/7TtiAd6B+BoXivrYZHJQs3Rn24Ou+9Er0=
Subject key identifier: 12:F7:4A:1D:E3:13:37:63:24:95:D0:11:36:B3:A2:D6:1A:80:8B:75
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 0682791E
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/EvdKHeMTN2MkldARNrOi1hqAi3U.roa
Signing time: Fri 06 May 2022 03:27:05 +0000
ROA not before: Fri 06 May 2022 03:27:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109213982 (0x682791e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: May 6 03:27:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=12f74a1de31337632495d01136b3a2d61a808b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e5:21:fd:12:fe:ed:6c:f2:e8:8e:b8:c3:d6:
d3:19:36:39:a3:fc:b2:4e:03:c6:e4:1a:49:a6:38:
8e:07:95:18:16:5f:27:4c:94:a5:4f:6d:4d:d5:9e:
0f:f6:07:21:35:0d:73:40:c0:1e:d7:16:07:43:da:
22:37:34:62:6d:79:aa:3a:19:8d:96:c0:6c:40:b8:
c5:04:71:87:7f:59:4f:b3:da:b9:43:e0:a0:da:5e:
fd:bc:30:3a:5c:23:02:af:d7:ef:b4:16:7b:c0:8b:
19:79:98:9a:ae:a2:e3:bb:b6:2d:ea:68:9a:0e:26:
7f:fd:9b:ea:1f:ae:df:23:7d:ee:59:ca:71:8d:cf:
e5:b8:1a:2b:9f:d6:df:15:86:b8:a8:73:4b:d1:1c:
b9:07:9d:d7:1b:c4:28:63:46:15:74:77:f5:9e:4d:
97:2a:da:79:6e:2e:86:38:9f:6d:c3:62:20:54:de:
bd:5d:cf:f9:f6:43:9f:00:8c:9e:cc:05:f2:dd:90:
7a:34:c3:82:2c:be:b9:e4:f6:93:df:8e:9b:90:bd:
d3:07:79:9d:83:cd:cd:18:38:32:41:85:a0:68:bc:
1e:5b:73:f4:cf:d5:94:d5:b6:a0:9f:9d:45:e3:5d:
b8:c3:76:b8:33:d7:a2:16:ea:e2:90:00:e8:bc:5a:
36:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F7:4A:1D:E3:13:37:63:24:95:D0:11:36:B3:A2:D6:1A:80:8B:75
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/EvdKHeMTN2MkldARNrOi1hqAi3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
38:42:d6:cf:98:39:a6:02:d6:56:7e:8c:35:7e:d0:91:53:dc:
11:c7:f2:05:93:02:de:8f:8b:f8:c0:d8:c8:96:34:61:63:f6:
d0:9c:d2:f6:5a:96:45:6f:01:59:ed:fc:43:48:5c:61:e5:0a:
53:7a:f0:a5:8a:09:d5:51:cd:c1:30:9a:d0:99:65:b3:77:fb:
0f:92:90:55:6a:4b:31:0d:84:ea:57:05:f9:f9:cc:5d:21:5e:
97:5e:89:a6:27:c4:5f:19:0b:7b:c5:e1:19:1b:49:82:05:e1:
e9:cd:b6:8d:bf:23:6d:f2:f1:dd:72:f6:cc:91:93:02:8e:4b:
0f:ce:ca:d1:ee:78:69:ec:36:eb:07:6f:92:b9:d7:91:d1:ff:
74:fc:e8:46:70:e1:40:76:4d:73:f5:43:76:be:38:30:fb:48:
44:a6:ef:9e:23:5f:29:bc:0b:fb:1b:b6:ff:a1:01:58:ed:f1:
db:9e:c9:10:b1:5b:24:27:51:1e:c6:45:bd:9b:91:0c:0b:ee:
96:dd:f5:f5:4c:8c:1b:19:63:64:a5:80:c6:bb:71:2e:dd:d7:
4b:3c:9f:bb:d6:c5:34:ab:a7:a6:35:43:b3:b5:1b:73:3e:d7:
8a:73:88:36:28:26:2c:49:85:df:fa:0d:50:76:4b:53:6e:0b:
e3:7c:53:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:28 2024 by rpki-client on console-fra.rpki-client.org