Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/NCBpEbLxLuFOR3SOl3MEr9L9OfM.roa
File: NCBpEbLxLuFOR3SOl3MEr9L9OfM.roa (raw, json)
Hash identifier: bOHxHegWjyasu70fSgcNky0JEEt5sOrdt921RCsoXMw=
Subject key identifier: 34:20:69:11:B2:F1:2E:E1:4E:47:74:8E:97:73:04:AF:D2:FD:39:F3
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 05427929
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/NCBpEbLxLuFOR3SOl3MEr9L9OfM.roa
Signing time: Tue 22 Mar 2022 14:09:07 +0000
ROA not before: Tue 22 Mar 2022 14:09:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88242473 (0x5427929)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Mar 22 14:09:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=34206911b2f12ee14e47748e977304afd2fd39f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:75:be:62:7b:a8:c0:56:cd:7b:e3:a4:ee:63:
95:ae:72:ca:b1:17:85:c2:12:c7:77:20:c5:e8:26:
59:36:98:7d:2f:ef:f8:f4:cf:9b:98:2e:47:89:e9:
bb:56:1a:5e:88:56:db:1f:94:49:20:3d:34:3d:fa:
53:1e:11:85:e6:0b:44:2a:a1:3a:33:bd:aa:43:d3:
ce:17:b4:47:71:f0:52:30:ba:f6:3d:e3:10:cb:8f:
68:51:e7:be:84:37:2a:d9:28:29:33:6d:43:b5:7f:
2e:57:84:bf:69:0b:00:aa:8b:8a:3e:5e:7c:87:a3:
87:88:66:01:87:e3:aa:3b:af:b5:06:cf:29:d4:fa:
12:28:a9:36:b1:10:50:a0:17:25:dd:96:91:82:60:
fe:56:52:1c:80:09:92:5a:34:45:05:0a:8a:c2:93:
9c:67:5f:f1:9e:15:d0:9b:fe:b1:0f:b8:0c:db:c7:
f3:ab:fb:39:a3:6c:2b:e1:94:59:1d:bd:aa:e7:54:
94:d6:8b:e8:6f:9c:37:9f:bf:68:84:bc:c2:0b:e3:
80:f6:08:c4:33:ac:ed:55:fb:ae:7b:9b:fd:48:58:
f4:10:09:92:c6:aa:c7:6f:a0:87:cc:7b:c8:e6:d6:
35:22:6a:c0:aa:9a:39:5f:29:9e:42:2c:2e:dd:fd:
77:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:20:69:11:B2:F1:2E:E1:4E:47:74:8E:97:73:04:AF:D2:FD:39:F3
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/NCBpEbLxLuFOR3SOl3MEr9L9OfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
52:72:42:61:0a:92:86:26:c8:52:fd:dc:c2:3d:84:cc:40:15:
e9:cf:31:79:e3:15:d6:d0:2f:40:cc:5a:60:46:01:e2:ed:30:
08:54:54:36:ef:23:3c:db:00:90:71:28:14:95:c3:be:8d:1c:
b0:66:88:1e:16:94:8b:bb:af:93:6a:a6:56:f3:04:83:58:9c:
0c:2e:7d:ff:91:19:64:6a:a2:74:86:d7:21:09:23:59:62:80:
3e:0a:e0:b5:04:77:de:79:4b:ee:b1:ba:90:81:50:a8:b2:f3:
3a:ae:6d:7d:a5:e9:52:0e:13:c8:41:41:5b:45:99:d1:cc:93:
c3:0c:4c:7e:67:60:a4:bf:8e:1a:b9:89:33:70:84:64:df:6e:
d6:2d:34:c0:58:0a:43:f9:0b:9f:4c:34:02:73:6d:3f:d2:34:
f6:65:0b:14:56:16:5c:7d:0d:5e:29:9f:bb:7a:b4:3d:b3:59:
a8:31:d9:96:1f:79:70:8f:86:ff:d5:60:69:15:f7:df:27:1a:
24:73:c4:89:0e:2e:d8:e9:4e:fc:20:c5:cf:67:2f:7f:15:60:
fd:cf:f6:cb:af:df:9e:e9:e9:8f:5e:18:18:98:b4:c9:b9:e7:
c3:01:fb:46:00:47:68:67:e0:95:50:79:5b:50:f7:5b:cd:81:
14:ff:4b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:28 2024 by rpki-client on console-fra.rpki-client.org