Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/HsOepsIVivO1-TYLljqI0lumR1k.roa
File: HsOepsIVivO1-TYLljqI0lumR1k.roa (raw, json)
Hash identifier: tHqoyB6t5Y93OqSAR7KaxTCbO3kRSSWnPtpY71CT3NQ=
Subject key identifier: 1E:C3:9E:A6:C2:15:8A:F3:B5:F9:36:0B:96:3A:88:D2:5B:A6:47:59
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 0928EA0A
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/HsOepsIVivO1-TYLljqI0lumR1k.roa
Signing time: Mon 27 Jun 2022 13:21:05 +0000
ROA not before: Mon 27 Jun 2022 13:21:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153676298 (0x928ea0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 27 13:21:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1ec39ea6c2158af3b5f9360b963a88d25ba64759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2a:a0:5a:b5:c0:ef:0b:64:37:74:e7:35:2d:
c1:cc:55:31:01:52:f2:bb:39:23:9a:21:99:d4:fd:
05:56:c5:79:d5:33:9a:fc:e6:32:0c:57:c3:49:cc:
e9:a1:0d:51:d4:ab:e1:1b:09:0f:fd:95:9c:e3:8f:
0e:44:7b:6d:88:e0:69:d7:76:0d:8b:21:46:dc:a4:
85:24:0c:c5:a6:0d:fe:78:7d:bf:08:ea:a1:1e:de:
22:34:7b:64:da:7d:43:74:00:6d:bb:b8:02:28:ab:
03:f4:44:30:f0:45:35:7c:31:37:9c:ca:1b:b4:19:
e3:30:5f:ca:1b:93:4b:a3:a6:85:d9:75:ba:67:50:
73:c9:b8:ac:19:26:be:0a:55:fd:00:09:c5:da:45:
1f:b8:8a:ed:ea:d1:aa:d5:3d:e0:fe:37:06:83:ba:
44:b7:f0:70:d4:52:67:c5:89:86:66:dd:86:ad:d8:
7d:9d:7b:ef:a5:0a:6e:2e:8c:84:c8:2f:58:ae:81:
e4:80:0e:0f:ec:8d:2f:e5:be:6a:a2:6c:65:35:7c:
a2:3c:6b:93:77:df:a7:c3:aa:b7:ea:36:58:f0:79:
52:4a:d2:4d:27:04:20:73:1e:b8:db:3d:4b:e7:17:
0f:1e:e0:c8:a0:58:5a:0e:d5:9e:6b:50:ab:85:6c:
28:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C3:9E:A6:C2:15:8A:F3:B5:F9:36:0B:96:3A:88:D2:5B:A6:47:59
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/HsOepsIVivO1-TYLljqI0lumR1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
1a:99:f2:46:15:5f:ef:6c:c8:e0:b4:59:6b:31:ad:20:92:fa:
86:c3:a4:22:2c:c5:32:59:b5:1d:f2:09:dc:d4:ad:9d:b4:e7:
96:99:81:49:72:58:5a:9f:c4:52:33:7c:75:f7:5a:a6:a2:d0:
de:b2:93:26:b4:ba:c4:ba:37:48:db:17:4b:f5:72:77:58:83:
ec:ab:29:ca:40:14:b5:06:62:6f:13:72:69:c3:58:1b:32:41:
48:5d:25:86:2a:a9:e4:c5:46:b4:fb:ad:95:8d:6e:37:91:f8:
66:c3:92:d2:7a:ea:3c:d5:20:b4:39:0e:56:5b:a9:8f:07:9f:
04:07:35:34:cb:d6:3c:04:2e:ca:78:5a:68:99:9b:6f:f1:7c:
29:26:a3:74:d7:7f:d2:de:11:11:10:77:a0:f1:42:00:a7:45:
ab:4f:95:5e:44:bb:e0:d3:9a:0d:0e:b9:a7:9c:4f:22:ff:44:
5b:46:ec:5d:71:34:ca:25:14:11:09:98:d1:0d:4f:22:2a:41:
e5:a8:ca:aa:4d:8d:c7:ba:73:3c:bc:a4:da:42:4b:44:cd:c2:
e4:63:b3:9c:42:0e:ec:c0:7c:79:e1:50:fb:09:67:7c:76:63:
6b:43:ed:3b:a6:52:6e:a6:c7:84:e4:73:3b:02:a4:09:99:e5:
c2:cd:34:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:54 2024 by rpki-client on console-ams.rpki-client.org