Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/MhfJN8lHAvtAm6q3NOKtrrTbPPc.roa
File: MhfJN8lHAvtAm6q3NOKtrrTbPPc.roa (raw, json)
Hash identifier: a8rpTn8dcY1daTRzHk/X9F3JSqJ7PWVd2fVcYr86w6A=
Subject key identifier: 32:17:C9:37:C9:47:02:FB:40:9B:AA:B7:34:E2:AD:AE:B4:DB:3C:F7
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 03E38D0F
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/MhfJN8lHAvtAm6q3NOKtrrTbPPc.roa
Signing time: Sat 05 Feb 2022 04:28:02 +0000
ROA not before: Sat 05 Feb 2022 04:28:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65244431 (0x3e38d0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Feb 5 04:28:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3217c937c94702fb409baab734e2adaeb4db3cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8c:19:cf:11:51:20:e1:84:53:8e:5a:5d:69:
3c:2e:49:b7:06:ca:6b:82:71:65:6b:24:5a:d5:18:
6c:95:a6:0b:19:69:0d:6a:b5:de:70:c8:fd:78:e2:
5c:d4:b8:fe:6a:6f:df:96:8a:f4:51:f9:6f:fc:7e:
e6:7c:13:e9:28:e6:0a:29:8a:77:7a:33:19:3c:fe:
0f:a9:00:77:0a:49:1a:03:43:eb:f6:e5:a9:5a:4c:
2c:60:32:82:e2:d3:ba:2c:b9:6e:05:42:bc:49:42:
b5:5c:07:1a:5f:92:78:10:11:28:49:99:73:93:77:
c6:08:f7:c4:aa:53:39:3f:21:2f:ea:1f:70:32:65:
3b:42:89:41:f0:22:64:f5:ca:23:68:44:37:72:14:
43:e5:4d:9f:18:35:84:b5:ee:8d:79:34:6a:3a:53:
36:f3:78:37:d0:d4:e8:a5:aa:6b:4d:ec:b0:b0:c5:
61:aa:ae:1f:e4:9e:a9:a4:a1:e0:a5:d4:4a:25:80:
b6:dc:f8:61:87:7a:e8:32:e9:12:f9:73:24:aa:49:
a8:d7:1d:4f:33:fc:52:d9:3e:91:3d:49:cc:0e:81:
74:4d:e3:78:68:2a:a8:91:fb:ad:19:fb:8a:b0:13:
a3:14:32:7b:f6:85:95:27:f7:87:a2:19:20:83:ec:
a6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:17:C9:37:C9:47:02:FB:40:9B:AA:B7:34:E2:AD:AE:B4:DB:3C:F7
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/MhfJN8lHAvtAm6q3NOKtrrTbPPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
99:47:34:39:27:21:05:8e:9c:7f:8c:75:f6:3c:c9:a0:9a:94:
32:84:7b:a3:d3:5f:ea:31:ca:1e:1c:eb:b7:cf:16:24:35:2e:
dd:77:05:06:23:29:45:a8:68:c0:59:76:b7:8e:78:e4:15:54:
35:cd:40:4b:60:bf:75:78:b2:a2:f4:72:e3:18:c5:b0:83:cd:
07:c0:2a:03:36:e6:2a:63:f3:54:33:25:6e:43:e0:e2:a6:f8:
05:2c:9b:de:77:bb:0b:4b:1c:f0:dc:f7:fb:aa:13:89:a3:99:
e3:09:79:b1:52:84:d8:e2:3f:a1:55:98:bd:46:f9:ed:35:37:
c6:07:1e:e2:72:d7:1a:d5:21:28:f9:55:7f:62:b8:26:69:67:
0a:7d:74:f9:3f:bc:94:97:63:f0:00:2b:98:1c:3d:de:8c:b7:
19:b4:da:0a:ea:4e:24:b9:86:bd:21:bb:ac:80:70:c6:f7:d1:
17:cf:05:d0:bc:08:fc:f2:49:63:14:2c:73:19:dd:5e:5a:13:
1e:ea:9f:67:e4:da:5e:ce:70:4b:c3:ff:4b:85:92:66:b7:cf:
66:1b:5e:e3:82:e3:b5:0b:15:a9:4b:8e:84:48:83:ec:8c:30:
9a:45:3a:ba:02:67:ca:35:60:1e:30:c2:4e:35:f2:a3:e1:b8:
a1:64:cb:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:56 2023 by rpki-client on console-fra.rpki-client.org