Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/FQ7w0m6dSvyCiylANG8d3C62msE.roa
File: FQ7w0m6dSvyCiylANG8d3C62msE.roa (raw, json)
Hash identifier: 0kMh6wGsKPajqaZF+SH4tX04yPU6+felb3UwzGlQwZs=
Subject key identifier: 15:0E:F0:D2:6E:9D:4A:FC:82:8B:29:40:34:6F:1D:DC:2E:B6:9A:C1
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 04E4B112
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/FQ7w0m6dSvyCiylANG8d3C62msE.roa
Signing time: Thu 10 Mar 2022 02:38:14 +0000
ROA not before: Thu 10 Mar 2022 02:38:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82096402 (0x4e4b112)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Mar 10 02:38:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=150ef0d26e9d4afc828b2940346f1ddc2eb69ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d5:54:c8:9a:5f:c5:82:02:90:a7:c0:64:6e:
d5:22:fc:f8:f7:79:f3:a4:46:d0:62:1e:27:39:a2:
68:45:81:67:1b:fb:fd:7f:a2:68:09:5e:37:c6:c6:
dd:41:25:b1:0b:30:5a:c6:b4:d6:9f:59:06:81:6b:
3e:85:16:70:a8:38:16:b1:2a:91:d3:1a:47:e5:7d:
6e:37:f5:a5:f1:84:b2:9b:bc:20:75:93:cc:03:92:
ca:56:67:44:2b:6b:3d:75:d6:c0:60:e5:31:f0:a0:
2a:9d:04:ba:5e:93:03:11:7a:41:7b:21:35:63:a2:
f9:86:be:f6:ce:62:0a:5d:bf:ba:d6:3e:47:b2:9a:
67:8d:f1:3f:13:dd:43:14:8f:ec:b3:83:f9:e1:02:
53:85:85:7c:01:8d:52:3c:09:52:9d:4a:02:9d:05:
4b:cc:f9:2a:8d:a0:c4:a3:b5:55:59:af:16:28:c3:
b3:88:1f:1c:ce:75:5a:04:1b:56:ab:a7:02:04:c9:
b8:70:8f:8e:66:4f:1a:1f:b0:99:40:ae:b7:31:e8:
f3:57:df:5a:45:01:18:fe:6f:c2:d0:f4:94:0f:ea:
f5:f8:67:10:d4:d5:62:6e:5e:a3:22:8e:8e:62:3c:
1f:07:87:00:b0:fb:fb:3e:60:2b:75:df:d8:f5:88:
b2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:0E:F0:D2:6E:9D:4A:FC:82:8B:29:40:34:6F:1D:DC:2E:B6:9A:C1
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/FQ7w0m6dSvyCiylANG8d3C62msE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
9d:52:a8:65:a0:7c:9b:24:74:91:db:13:e2:48:2c:4c:b1:03:
7f:26:3c:f4:33:7d:5d:ab:26:94:4f:8f:52:e7:44:8f:b4:a7:
0d:0c:4f:cc:b5:1e:ab:ee:0c:35:66:e7:54:d9:7d:cc:c7:63:
c4:01:6a:d6:44:92:f3:b7:e2:c1:83:2a:07:d7:ef:6c:38:6b:
07:ab:cb:da:41:e4:66:78:f7:8f:cc:34:82:a1:fb:bb:6b:7e:
bc:2b:9e:2d:4b:3c:71:39:8e:a6:da:43:e7:e1:f8:86:71:23:
a6:73:ab:f5:01:bd:93:53:e8:76:a6:ac:4f:e5:0d:4c:ed:a0:
fd:53:5e:92:7e:e7:5a:60:65:91:b0:bc:eb:c7:23:9a:07:4d:
5a:f2:6d:23:1b:ee:78:f1:aa:e2:f2:e9:90:60:4b:08:82:d9:
0d:ea:42:e9:81:05:59:a4:9d:16:9c:fe:04:0b:d9:7f:4b:73:
43:8b:f8:1a:90:81:9e:93:4d:dd:90:53:59:48:42:da:df:a2:
92:bf:d1:d1:e0:cf:77:12:5a:09:5c:59:95:ae:da:57:61:39:
1a:ea:5a:b7:78:cf:80:d0:3b:6d:e6:54:a2:e7:bc:bc:85:02:
e1:2b:a1:58:b1:bf:31:52:c9:a8:c7:f4:1c:ac:ed:76:e1:65:
52:bc:b3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:46 2023 by rpki-client on console-ams.rpki-client.org