Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/LEK06VfVoZvQucAgyO7dFdbQCLA.roa
File: LEK06VfVoZvQucAgyO7dFdbQCLA.roa (raw, json)
Hash identifier: U0qN6G3v4DceC5KJK0VlGeuJ39gGGnfLFedFmfrkJfA=
Subject key identifier: 2C:42:B4:E9:57:D5:A1:9B:D0:B9:C0:20:C8:EE:DD:15:D6:D0:08:B0
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 062F09C2
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/LEK06VfVoZvQucAgyO7dFdbQCLA.roa
Signing time: Mon 25 Apr 2022 08:25:22 +0000
ROA not before: Mon 25 Apr 2022 08:25:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103745986 (0x62f09c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Apr 25 08:25:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c42b4e957d5a19bd0b9c020c8eedd15d6d008b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cf:9c:33:3b:4c:4e:dd:2f:9a:d4:de:81:07:
b7:a9:51:0a:18:b9:43:46:63:f5:fa:55:41:f0:58:
62:75:1a:f4:3d:5d:e4:5d:de:fe:78:f4:7f:d8:ad:
b3:a7:8f:ed:3a:21:f3:72:1a:d7:73:9e:aa:e1:d1:
cf:c7:8d:94:02:90:77:05:ea:43:ec:73:69:f2:8d:
ae:e0:9d:52:c4:74:2c:2a:c4:5c:e3:15:41:3b:38:
d9:4f:ca:93:d5:f8:81:38:34:51:93:e9:1b:19:47:
4e:cd:02:b7:32:01:3d:9b:a5:a5:61:df:45:77:d9:
01:d7:ba:48:83:a4:8c:76:35:f3:7c:5d:18:5a:40:
6e:22:1e:b2:d3:fd:42:31:d4:6e:85:b9:c2:dc:e5:
c4:25:69:6e:9b:5d:77:30:f9:af:74:aa:21:52:87:
ec:5e:1b:3d:df:cc:75:18:60:d8:f2:2f:c4:c4:1a:
bd:4d:15:61:37:ce:d2:cd:11:0b:da:26:08:dd:7d:
25:0d:80:51:83:9d:2d:a2:71:9b:a9:87:f1:61:0b:
98:55:91:df:17:e0:42:19:63:31:24:b6:a8:7c:f0:
6f:2f:87:7b:15:89:40:03:0b:cd:dd:22:51:16:c7:
a1:ca:a5:c9:9a:3c:8d:38:bf:17:56:92:cc:41:f3:
07:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:42:B4:E9:57:D5:A1:9B:D0:B9:C0:20:C8:EE:DD:15:D6:D0:08:B0
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/LEK06VfVoZvQucAgyO7dFdbQCLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
00:4c:be:50:5c:ac:79:a1:8b:c8:89:0a:b6:2d:88:f7:8f:d3:
d2:a1:95:7f:82:b1:1e:b0:0b:7f:99:26:46:a7:43:ce:e1:67:
96:65:36:f4:66:0d:7c:2b:40:f8:b8:90:49:5f:3a:d3:73:87:
96:b5:d1:44:49:9e:6a:b0:ab:73:ae:14:5f:f4:f9:c3:44:14:
a4:02:1c:e2:59:83:79:bc:f1:e6:6e:e1:82:00:22:e2:60:b8:
54:32:9d:0a:f8:2e:30:14:b0:a7:48:e3:4a:0d:f9:27:85:20:
fb:9e:59:d4:03:68:53:6f:f8:b6:e5:08:89:13:af:ef:bc:e1:
89:e5:a3:1b:66:74:e3:ff:a0:21:cf:ed:9f:22:1d:8c:12:9f:
cb:0c:eb:ed:f0:51:76:af:7a:ce:f5:52:85:55:6a:9a:67:cb:
fb:75:c8:88:5a:6a:d5:40:bf:26:c4:1d:4a:bd:48:6d:68:33:
1f:3a:5a:e1:70:c2:2a:85:37:ec:50:60:83:70:3d:ff:66:3c:
6d:d1:3b:93:1b:86:03:7b:89:c9:15:8b:e5:ab:e6:34:e4:d2:
5f:dd:fa:5e:40:db:26:2f:be:99:93:c5:93:75:d3:63:ad:57:
52:59:6b:a7:f0:a4:f6:cf:ff:2d:62:8b:6f:24:63:33:f5:cd:
c6:76:72:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:28 2024 by rpki-client on console-fra.rpki-client.org