Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/MS5XdQwdgZ5UPjI0gsq7-sEClu4.roa
File: MS5XdQwdgZ5UPjI0gsq7-sEClu4.roa (raw, json)
Hash identifier: 5RPcXhygTaDSB2HFJdOMeZi4vHc3Ujl8ygvyUIrgBio=
Subject key identifier: 31:2E:57:75:0C:1D:81:9E:54:3E:32:34:82:CA:BB:FA:C1:02:96:EE
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 047D153D
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/MS5XdQwdgZ5UPjI0gsq7-sEClu4.roa
Signing time: Fri 25 Feb 2022 04:11:09 +0000
ROA not before: Fri 25 Feb 2022 04:11:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75306301 (0x47d153d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Feb 25 04:11:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=312e57750c1d819e543e323482cabbfac10296ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0e:0c:4a:ca:f4:84:14:1c:d7:20:2e:c9:b7:
61:18:ab:de:e5:ed:8b:7e:06:50:1e:d0:fc:8e:91:
e2:64:75:6f:fb:49:5e:99:5d:06:68:f7:a6:18:34:
7d:68:63:0c:3b:24:44:7e:38:9d:89:bb:0a:85:37:
28:41:70:16:7d:88:0f:51:a0:34:79:3a:61:aa:cc:
a5:c1:ec:43:3f:e4:21:8c:9f:5b:cd:4d:38:0b:f3:
dd:ee:5f:eb:dd:58:d4:13:e9:43:c0:4d:31:6e:60:
7c:1f:3b:66:72:ca:24:5d:03:80:ee:7c:b3:25:77:
22:9e:05:bb:2f:41:70:df:86:68:28:24:fc:d6:10:
ce:c7:15:43:cf:03:87:c3:08:aa:34:c5:6f:a3:f5:
1f:fe:65:c5:bf:1e:9d:ce:63:7c:96:00:36:8a:c2:
48:47:9a:2b:79:4d:14:3f:4b:6d:ad:de:f5:84:b6:
37:41:4b:ba:37:32:5e:1f:f9:ff:67:4c:12:5b:19:
cd:77:c8:7d:a5:92:72:48:d0:06:c9:4f:92:3a:e4:
1f:3a:c6:79:b4:6e:5c:f2:4c:61:ee:47:19:48:c7:
3d:ef:ac:dc:3a:5a:aa:26:6a:17:77:df:ba:e6:e6:
4f:b1:ef:ad:a9:d8:11:92:c2:f1:56:75:c6:29:66:
5a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:2E:57:75:0C:1D:81:9E:54:3E:32:34:82:CA:BB:FA:C1:02:96:EE
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/MS5XdQwdgZ5UPjI0gsq7-sEClu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
7c:a2:88:0d:98:90:90:74:47:90:48:29:50:20:f3:b8:e0:53:
e4:68:87:39:e9:31:4a:28:2d:b9:d9:23:06:8f:af:42:51:16:
fd:a7:10:cc:5a:2b:3d:8e:5d:cb:a4:6e:9a:89:4f:1c:89:5b:
77:0c:d6:33:37:ff:26:ba:53:b6:09:89:d7:a9:eb:03:a6:d8:
13:a0:ce:41:da:e2:f1:4d:ae:d4:1c:d4:c1:33:ed:dd:b8:08:
74:34:fa:da:87:b4:47:d6:92:56:22:90:ca:64:14:7e:02:96:
bb:8d:64:1c:ef:52:16:5f:49:6b:3a:e7:62:c1:01:25:7c:57:
a6:3d:a7:5a:c2:dc:22:8d:ad:35:4f:7a:cf:2f:97:e3:60:b8:
28:d6:06:b5:82:68:4c:15:38:d4:b2:c6:4a:7e:13:9f:85:25:
e8:3e:46:1f:55:1e:e3:59:ac:8f:a1:2c:4a:a0:e7:a3:04:0c:
a8:80:c9:10:74:fb:99:c5:7e:c3:1b:55:7d:45:81:61:37:9e:
c0:a6:c3:1d:e3:70:42:4d:26:1f:3b:44:ab:b9:d5:86:36:e3:
98:a4:f4:fb:0a:4e:5a:8e:a1:cc:18:30:dd:1b:22:9a:d6:fc:
84:35:b8:d3:46:65:ee:4b:59:24:bc:72:45:14:3a:a8:f8:2d:
5a:02:a4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:46 2023 by rpki-client on console-ams.rpki-client.org