Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/FlDfQD_jEBnrNb1cF9Mc0fxHfJg.roa
File: FlDfQD_jEBnrNb1cF9Mc0fxHfJg.roa (raw, json)
Hash identifier: NcNlq3lyunc9AvJHLnZIVDqAnlB/yRGPKwhqzJNfCSc=
Subject key identifier: 16:50:DF:40:3F:E3:10:19:EB:35:BD:5C:17:D3:1C:D1:FC:47:7C:98
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 067720E4
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/FlDfQD_jEBnrNb1cF9Mc0fxHfJg.roa
Signing time: Wed 04 May 2022 15:06:33 +0000
ROA not before: Wed 04 May 2022 15:06:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108470500 (0x67720e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: May 4 15:06:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1650df403fe31019eb35bd5c17d31cd1fc477c98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:be:28:66:41:c8:b2:e5:d0:3e:9d:b3:30:81:
67:de:4b:97:ca:dd:0c:55:d5:79:cf:e9:27:fb:05:
73:8e:8f:69:63:20:4e:d0:11:d1:8f:59:77:b7:19:
42:c7:6a:5c:3f:6a:0b:ee:bf:fc:4d:88:42:7d:6c:
19:85:c7:6f:08:ba:a0:53:58:16:dc:11:29:f5:78:
1c:c3:58:fc:e8:e2:d7:2f:a0:9c:ef:99:c0:5b:83:
32:59:0a:2a:a9:78:45:f0:d8:e1:86:82:68:fd:f5:
dd:d7:20:b8:03:8f:b4:69:7c:30:83:8f:24:2d:c6:
b5:25:82:b4:9b:16:76:33:b9:9b:3b:86:ef:4c:8e:
d9:2b:f8:21:95:10:c2:8b:a8:da:c6:9a:e5:c9:84:
f5:98:b0:53:8e:52:93:1f:90:cd:50:20:49:2e:52:
8b:ac:a7:13:2b:75:80:0a:09:e9:f0:a4:48:12:93:
18:a4:41:70:22:11:d5:0f:35:44:76:d1:2e:9d:2f:
52:8f:62:5d:fb:74:3d:0c:59:7f:d2:13:cf:07:22:
10:8c:a9:95:16:db:a5:2b:7f:75:92:86:75:fe:6c:
97:ab:6a:25:77:f2:ee:88:79:2a:e6:00:cc:44:39:
a5:07:ac:5c:e2:47:1f:1e:0d:60:19:48:cb:37:eb:
d3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:50:DF:40:3F:E3:10:19:EB:35:BD:5C:17:D3:1C:D1:FC:47:7C:98
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/FlDfQD_jEBnrNb1cF9Mc0fxHfJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
1f:85:5b:03:55:4c:92:14:42:0d:aa:ec:3e:fc:71:1d:8e:48:
33:37:8a:47:f5:ad:56:0d:48:8e:65:fe:a8:86:a0:a4:c0:81:
99:6b:4e:27:4a:51:97:ef:9f:c8:21:50:0d:9a:c5:16:65:ff:
a5:6c:62:49:ff:c6:62:09:38:10:ef:84:e0:81:84:eb:cb:0c:
7e:ad:d7:9b:c8:d5:70:7f:8f:22:c0:82:1c:3e:ab:69:d7:c6:
dd:18:6d:ea:6a:6b:11:2a:8e:c5:70:16:1e:06:f1:cd:45:e6:
ce:ed:5a:5d:09:31:e4:e4:77:ee:cb:37:c7:4d:47:a8:37:bf:
4e:07:c4:16:d4:9c:6d:37:26:06:8f:55:be:37:e4:c9:9c:68:
cc:b5:8e:52:38:1e:03:61:8a:70:f1:81:43:12:5b:01:d8:ba:
c3:99:2f:18:f3:10:1f:49:d3:74:e5:d3:0e:3c:d4:40:1f:62:
5e:bb:d3:69:88:dd:df:7c:1f:ed:a7:1f:5c:86:31:0b:43:84:
51:10:a9:f9:55:5c:da:40:38:dc:65:fe:94:e3:88:89:69:f8:
b2:93:21:17:d3:8b:77:ce:b7:58:8f:d7:06:1d:4d:a8:ea:b5:
f5:05:3a:e6:1e:13:26:33:a8:be:df:45:6f:47:64:7a:24:a1:
1e:90:c5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:28 2024 by rpki-client on console-fra.rpki-client.org