Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Q6CO2apEcTlPzAtfzYoFeto91eE.roa
File: Q6CO2apEcTlPzAtfzYoFeto91eE.roa (raw, json)
Hash identifier: KhB55Vvvf3m4UnFZKuNfJ3Oh5yGZnCXaBd6rZv4yaVg=
Subject key identifier: 43:A0:8E:D9:AA:44:71:39:4F:CC:0B:5F:CD:8A:05:7A:DA:3D:D5:E1
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 066EDCBC
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Q6CO2apEcTlPzAtfzYoFeto91eE.roa
Signing time: Tue 03 May 2022 00:03:13 +0000
ROA not before: Tue 03 May 2022 00:03:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107928764 (0x66edcbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: May 3 00:03:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=43a08ed9aa4471394fcc0b5fcd8a057ada3dd5e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cb:f5:1a:b2:70:d7:66:35:a3:4b:5c:36:89:
3b:8f:70:f4:ec:05:93:76:c7:52:22:b5:db:8e:5d:
0f:7b:1a:90:e2:e4:f2:2b:90:ac:b9:45:63:67:1b:
f2:85:de:31:c9:96:b0:07:f8:70:e8:29:4d:3b:2f:
bd:6a:cc:a1:d7:55:b0:c3:b5:fd:73:84:0f:53:f1:
0c:f8:9b:28:09:83:4d:32:f2:a6:75:f0:66:f7:5e:
9b:34:63:f1:b0:9c:a6:dc:77:a7:90:df:b2:52:f3:
91:5b:96:93:f4:46:a4:0a:89:bc:ec:32:4e:b0:53:
49:89:f4:91:f9:7c:33:e0:6b:35:9f:14:0d:5e:62:
1f:55:8d:61:59:29:3e:e7:3f:2d:c5:d1:f9:c3:6d:
45:77:25:f0:d9:0c:4d:2f:a3:94:61:4a:23:89:1e:
e8:41:52:62:fe:7f:5f:99:aa:e0:7c:3c:0f:2b:ff:
fb:bd:26:d7:82:52:d9:09:23:db:d2:ea:b6:c2:27:
4f:ee:ca:bd:4d:a7:81:6d:43:97:4d:06:d0:27:bf:
36:84:d9:6f:52:14:61:81:4e:6b:a1:ea:ff:d2:f2:
ff:85:2e:41:5d:3c:44:46:98:ac:ec:84:6a:e8:42:
51:d7:dc:d7:8f:c5:cf:09:fa:ce:f5:37:40:f5:e4:
b7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A0:8E:D9:AA:44:71:39:4F:CC:0B:5F:CD:8A:05:7A:DA:3D:D5:E1
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Q6CO2apEcTlPzAtfzYoFeto91eE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
17:f2:da:26:8f:71:19:6e:d6:05:f5:7a:06:15:08:86:75:d4:
98:67:8c:f2:da:0d:4a:e6:ac:81:90:9e:16:10:b9:cb:0c:04:
f4:f5:45:5d:88:21:b2:f7:44:f8:9d:00:70:72:2f:fe:f2:a6:
83:96:23:7c:ab:47:23:1a:db:6f:05:1b:fe:92:ba:94:12:d3:
ee:f9:a7:be:c9:ae:c4:ce:d5:d3:c2:f2:3b:da:85:83:b1:5e:
f7:d8:53:0a:02:d6:75:55:94:5d:e2:e8:74:71:85:db:72:49:
3f:ed:da:42:a5:20:51:fd:d5:93:48:dc:e6:e9:3b:60:ef:9e:
00:07:48:4d:16:24:0b:ad:c6:e9:95:c1:35:5d:2b:99:53:bd:
8d:9e:ce:5a:e7:8c:2a:0f:fc:b8:08:67:8d:b1:6f:b9:50:de:
4a:8a:ef:b1:38:7c:82:c5:f3:6b:01:49:f0:ec:5c:ba:de:63:
3b:ac:a5:42:db:bc:1a:15:6a:f3:27:88:41:de:1b:eb:99:5d:
44:df:e4:fa:2f:cf:9a:3e:67:45:fa:23:e1:85:b4:3e:70:50:
c0:ef:d3:0f:08:51:f5:4a:2c:e5:0e:c9:27:ae:db:6d:f2:5b:
c6:67:22:e8:95:c8:8a:ec:5a:c4:a7:2d:6f:b6:ed:24:d7:a0:
05:b8:58:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:28 2024 by rpki-client on console-fra.rpki-client.org