Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Jj4vwUr_rWBIIzVuKIWEj8HLfOg.roa
File: Jj4vwUr_rWBIIzVuKIWEj8HLfOg.roa (raw, json)
Hash identifier: a/5Uqa0KbPAVFRdGuzN4OA9Alpw9Bz9Km6KU+fklnRo=
Subject key identifier: 26:3E:2F:C1:4A:FF:AD:60:48:23:35:6E:28:85:84:8F:C1:CB:7C:E8
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 08D807A3
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Jj4vwUr_rWBIIzVuKIWEj8HLfOg.roa
Signing time: Tue 21 Jun 2022 02:06:44 +0000
ROA not before: Tue 21 Jun 2022 02:06:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148375459 (0x8d807a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 21 02:06:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=263e2fc14affad604823356e2885848fc1cb7ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:06:34:14:46:a9:17:e7:6a:80:d1:db:61:3d:
2f:34:fa:0d:7f:ce:b5:dc:bd:30:d0:bc:10:8b:19:
51:37:a9:ee:d0:72:bb:62:9a:e6:64:fc:a9:7e:e9:
16:bb:18:c8:d6:2d:55:74:a3:70:65:06:45:91:ef:
8e:32:64:9f:51:ad:77:e1:49:98:39:8f:0e:70:36:
41:87:9f:85:43:00:cf:5a:25:a7:ca:a5:36:35:38:
66:56:b9:49:db:49:4b:36:b3:71:c8:25:24:04:2b:
9f:cb:63:93:0a:d2:a1:0e:6c:ad:65:65:48:eb:93:
3e:ac:1a:75:66:01:8c:17:39:15:7e:97:57:7f:2e:
83:e1:3e:3f:e2:39:af:4e:ca:0d:56:f0:c3:f3:cf:
91:83:d6:bb:7c:46:78:35:1e:bd:e6:f5:a1:90:75:
24:5d:36:2e:25:f7:de:b4:8a:2a:fa:e9:1b:16:e8:
b3:6a:28:a0:f5:cd:f9:ee:43:61:e6:fa:6f:ac:b3:
de:43:94:cd:c9:1e:12:97:73:91:37:8b:fb:91:9e:
42:5d:d7:33:e6:70:08:e4:05:d3:06:f0:ad:6b:20:
0f:da:60:7c:83:9f:79:7f:74:6c:f3:13:64:ab:01:
be:27:7b:75:6e:c0:bd:b7:fa:75:81:ee:1d:f7:1d:
cd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:3E:2F:C1:4A:FF:AD:60:48:23:35:6E:28:85:84:8F:C1:CB:7C:E8
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Jj4vwUr_rWBIIzVuKIWEj8HLfOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
86:a9:32:5d:c3:ee:12:16:aa:7d:58:58:16:ce:a0:db:63:5c:
4a:90:c3:c6:2d:2e:d3:d7:8f:2a:97:37:70:6d:75:be:a5:85:
5f:56:ea:c7:80:72:7d:5e:ef:c7:c6:ee:04:65:b3:f9:3e:c8:
71:8f:2d:3c:9f:77:2a:b1:47:85:82:96:29:e8:36:3c:0c:c8:
2a:cf:fe:a5:49:b2:15:1c:f6:29:fb:2e:8e:67:6c:60:ba:63:
17:29:16:ff:7a:e4:08:a5:92:41:9a:f2:d8:ab:5f:16:0e:83:
f0:61:f2:ae:ad:82:66:6f:47:36:70:84:42:f8:1d:48:88:68:
f5:51:82:93:5b:23:37:b1:12:a0:b1:72:de:32:94:ea:95:42:
21:ad:e0:a6:1f:74:7b:b3:e4:91:b6:6f:3f:11:d4:e6:c1:b2:
9f:1d:79:1a:84:7d:0a:7a:e9:35:9c:06:83:9d:30:1b:30:22:
12:c4:9c:2b:19:b6:d6:10:c8:e2:a1:1b:14:6a:e9:4e:30:03:
db:78:33:59:51:31:24:2e:a8:2e:07:99:c5:8a:bf:c9:9a:db:
9d:5d:ec:ee:9c:11:d3:fd:76:ab:05:46:aa:22:2e:0c:a9:a9:
da:9b:b6:bc:9e:99:9f:b7:28:14:b2:f1:06:3b:22:13:fe:80:
67:09:f8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:46 2023 by rpki-client on console-ams.rpki-client.org