Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/HGPrhVi8rswTJhSxpaxP2r2yWmk.roa
File: HGPrhVi8rswTJhSxpaxP2r2yWmk.roa (raw, json)
Hash identifier: /JTDpAgc7EGTNjxjXwwiwcc2cl6tihPcLKYHWa+YruU=
Subject key identifier: 1C:63:EB:85:58:BC:AE:CC:13:26:14:B1:A5:AC:4F:DA:BD:B2:5A:69
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 051D0C2B
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/HGPrhVi8rswTJhSxpaxP2r2yWmk.roa
Signing time: Thu 17 Mar 2022 17:48:14 +0000
ROA not before: Thu 17 Mar 2022 17:48:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85789739 (0x51d0c2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Mar 17 17:48:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1c63eb8558bcaecc132614b1a5ac4fdabdb25a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:09:7a:45:77:73:82:93:db:5c:3e:3d:af:be:
aa:6e:30:d5:f7:b5:d8:b8:fc:c3:31:36:14:fa:4c:
bb:90:ee:f7:bf:47:0a:ee:50:71:37:fa:5f:dd:dc:
11:38:07:2e:54:74:ee:f7:d0:59:3e:f8:cb:c8:da:
80:d9:2e:7c:c0:66:17:e1:8c:8b:a2:55:eb:17:e6:
d5:ba:db:4d:16:66:28:75:b5:3b:71:53:8f:c7:b4:
14:db:71:88:e3:c4:24:6a:3a:36:ff:3c:42:72:7f:
85:a4:5f:c0:13:9e:24:51:9a:21:46:66:83:88:f4:
79:f5:08:4a:b0:3d:da:a2:93:df:d2:3d:29:a1:d5:
d1:c8:6c:48:7b:37:c8:e8:62:33:44:db:f1:c5:06:
67:d4:e9:81:e1:fb:1c:0b:42:04:86:4e:a2:6e:fe:
56:f4:be:6b:0f:54:3a:5e:a8:ae:c8:ce:7e:1e:6d:
ec:18:f0:c2:cb:fd:5c:51:b0:a0:4b:9b:72:0a:bc:
23:ea:69:7e:4a:0a:a7:83:6c:26:ba:ed:27:b2:5f:
cc:a4:99:61:cb:79:1c:74:b1:74:8e:f4:5d:ac:39:
f0:4b:de:bc:82:63:06:2b:ad:d4:9b:b2:c2:cd:94:
64:1d:60:cb:cb:86:4e:6a:f1:cb:66:d8:7a:d6:83:
c7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:63:EB:85:58:BC:AE:CC:13:26:14:B1:A5:AC:4F:DA:BD:B2:5A:69
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/HGPrhVi8rswTJhSxpaxP2r2yWmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
4e:f5:9b:37:27:4d:c7:e2:be:0f:e4:82:e1:ee:88:48:2a:d9:
35:87:23:22:9e:55:01:01:44:b4:8e:f1:35:1e:15:cd:dc:cc:
67:0d:fe:75:b2:17:3a:ba:8a:3a:df:0b:1d:04:7e:6c:3a:3f:
1f:db:62:a9:4e:c8:5f:bf:22:e0:86:3a:53:95:10:63:14:21:
35:37:df:97:db:d0:df:b1:98:02:f4:99:97:f5:3e:eb:69:3e:
b9:3e:13:a0:d9:3b:d9:72:36:e8:eb:9b:a8:6b:ef:de:93:71:
6a:45:99:d2:83:17:50:48:2d:86:72:94:22:07:96:2d:77:4b:
fa:c8:ee:cd:97:b1:c1:86:06:9b:cc:dc:8c:ea:0d:22:7c:99:
c7:c4:93:ee:c2:9c:2e:a2:03:8e:c4:b1:77:02:09:a3:ea:b4:
e5:06:2f:36:04:3e:5a:b5:c8:8f:c1:2e:df:44:df:81:1a:62:
41:de:62:c1:ab:db:a3:c5:1f:9e:94:e1:26:fc:37:55:c5:89:
43:61:b0:28:d6:5c:2d:b0:82:56:d9:61:1a:2c:45:60:05:67:
47:45:c2:7a:8f:cb:2a:80:e7:74:01:f1:be:88:5c:b3:06:34:
a9:b5:7e:ab:59:b8:c4:02:86:b5:e3:9f:6b:2d:17:66:dc:c7:
b9:9d:cb:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:54 2024 by rpki-client on console-ams.rpki-client.org