Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/McFx85JQrgVWDIIQjx7AhfSEwVs.roa
File: McFx85JQrgVWDIIQjx7AhfSEwVs.roa (raw, json)
Hash identifier: U3buQf3ZgzY/mRp04O2S7+JsK1bLNljn2sHh52utkdA=
Subject key identifier: 31:C1:71:F3:92:50:AE:05:56:0C:82:10:8F:1E:C0:85:F4:84:C1:5B
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 0416CB5B
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/McFx85JQrgVWDIIQjx7AhfSEwVs.roa
Signing time: Sat 12 Feb 2022 01:33:05 +0000
ROA not before: Sat 12 Feb 2022 01:33:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68602715 (0x416cb5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Feb 12 01:33:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=31c171f39250ae05560c82108f1ec085f484c15b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:43:7a:7b:7c:0b:13:b7:8b:2b:82:19:d9:8f:
9b:12:7f:99:01:9a:20:80:8b:2f:4b:6e:d2:fc:f3:
f1:3a:df:dc:7f:1c:28:97:23:81:76:ea:d2:2a:e6:
1e:2a:cd:8e:e0:2c:85:29:25:0e:f1:1e:6e:98:f0:
56:ab:a6:77:f0:ac:85:d0:1e:37:1a:bd:b6:73:d2:
27:ef:34:61:24:7d:1a:38:1a:bf:7d:59:05:52:82:
40:21:81:d9:57:68:be:63:f7:bc:fd:f4:d4:d9:e0:
90:d7:64:4e:66:84:20:87:c0:e4:8e:39:c6:ed:71:
77:22:bf:fc:ad:a3:82:99:06:71:28:ae:ad:8a:41:
7e:c0:fe:db:de:95:d0:5d:74:de:93:5b:08:eb:aa:
b0:ba:47:cc:fb:47:f2:b1:45:dc:2b:e0:3e:fe:f3:
4d:b5:6f:e6:7b:1d:0b:6b:80:e4:91:3c:97:e2:ef:
c5:cf:d0:87:76:d7:0c:98:46:c0:d8:da:d8:47:cf:
ed:05:16:9b:7e:4f:bc:45:3a:59:56:75:be:25:d0:
c4:35:d9:4a:e3:27:f3:a9:c1:06:1a:b5:6f:10:ba:
5a:0b:86:82:78:c6:48:e1:e3:81:11:19:3d:d9:46:
2c:df:19:7f:20:27:df:af:69:36:64:33:aa:f3:25:
ab:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C1:71:F3:92:50:AE:05:56:0C:82:10:8F:1E:C0:85:F4:84:C1:5B
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/McFx85JQrgVWDIIQjx7AhfSEwVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
0d:31:e7:19:a1:1e:36:fc:97:ea:fa:3b:c0:fe:66:4f:d2:22:
07:a9:96:27:7c:74:f1:7f:7b:2d:77:1a:6c:ff:b8:6c:9d:58:
c0:14:23:49:3b:d8:dc:74:5f:12:2a:9b:0e:25:6e:9e:14:c1:
d4:35:1f:2b:fe:33:56:64:82:2a:2a:40:00:42:2a:33:ff:88:
78:b4:4a:08:94:35:fe:06:d1:98:ff:8b:4f:ba:52:c7:60:7a:
dd:e3:82:87:0a:2b:b1:2c:5d:8e:1a:fe:13:12:ad:44:1a:be:
05:59:c1:d4:ff:84:39:cd:dd:b5:fd:1d:40:74:26:c1:54:86:
2c:6d:ec:4c:63:47:66:5a:6d:e2:1c:88:c1:66:45:06:31:0b:
36:19:35:b9:e3:09:5c:55:09:01:f6:de:c3:db:49:de:73:bf:
bd:77:48:ef:4c:19:c3:35:d4:3f:c8:2c:14:fc:d0:7d:8e:ac:
ab:ab:3b:b6:06:7c:da:55:5e:1d:47:a4:43:c6:d7:9c:14:7e:
dd:ca:d9:ec:61:36:87:7d:d5:e4:81:aa:12:80:77:02:d8:e1:
a2:cf:95:d1:e8:d6:22:75:41:02:83:a9:c9:40:ca:98:43:f5:
8a:90:fc:fc:3d:a7:20:53:11:e4:3e:9a:6e:36:08:e0:94:1f:
84:db:a4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:56 2023 by rpki-client on console-fra.rpki-client.org