Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/QgplRTBiXDqQ2Yld5jvH6ApYUtM.roa
File: QgplRTBiXDqQ2Yld5jvH6ApYUtM.roa (raw, json)
Hash identifier: 50qs8mkzYKeLXIrgRD+QPg3rAHZaO194GpBlJkNruYY=
Subject key identifier: 42:0A:65:45:30:62:5C:3A:90:D9:89:5D:E6:3B:C7:E8:0A:58:52:D3
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 060D6158
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/QgplRTBiXDqQ2Yld5jvH6ApYUtM.roa
Signing time: Tue 19 Apr 2022 20:11:22 +0000
ROA not before: Tue 19 Apr 2022 20:11:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101540184 (0x60d6158)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Apr 19 20:11:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=420a654530625c3a90d9895de63bc7e80a5852d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0f:ba:ca:95:a8:0d:d8:cd:cb:07:6e:a5:ac:
de:61:6a:23:4d:d3:98:f9:d2:04:f6:11:75:c8:46:
a6:3a:24:7f:a8:a9:ea:53:13:54:e1:d1:93:18:32:
1e:24:a1:a8:9c:83:d2:9c:7c:82:62:5d:06:81:97:
aa:83:ed:66:33:3a:1a:ca:5e:c0:54:11:ec:de:9d:
d1:cc:e3:a4:bc:26:85:c4:9f:3e:0b:a7:b5:be:39:
e9:f9:c7:cb:c9:1f:12:ad:3c:25:d8:d4:54:40:49:
dc:8a:d8:81:4b:d0:16:80:40:2a:ed:22:a7:5b:af:
e1:a7:8a:e9:5c:95:d9:c8:6a:d7:74:23:2c:16:59:
43:14:7f:d4:1b:ae:97:24:bf:80:2d:2c:f9:97:a2:
a5:ab:df:94:d3:b1:90:de:70:27:26:41:15:44:b4:
80:a2:49:d9:4b:c1:1a:55:21:51:04:52:ad:14:c6:
3d:c6:a0:06:35:4d:ba:fc:e4:77:00:08:35:68:72:
01:38:e3:04:39:7f:83:93:5b:b1:c4:c4:8b:ae:07:
59:f8:13:c6:29:97:8d:86:02:3f:58:8c:56:46:70:
2c:e5:98:6c:0e:ec:49:f6:ab:8c:c6:97:40:69:cf:
bd:f9:6d:7c:eb:0b:56:0e:03:d8:61:80:de:b4:20:
56:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:0A:65:45:30:62:5C:3A:90:D9:89:5D:E6:3B:C7:E8:0A:58:52:D3
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/QgplRTBiXDqQ2Yld5jvH6ApYUtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
12:e1:28:44:62:8b:71:f5:57:a0:5a:43:2d:a4:5f:3d:8b:09:
f0:11:8d:24:58:13:e6:ff:a2:cf:cf:a9:95:bc:4f:29:25:df:
8a:a5:d7:b5:0f:74:7a:bc:55:7e:85:c0:c9:9d:79:cd:e0:25:
82:50:c8:90:9e:96:23:a3:dd:ca:f9:fa:14:d7:d3:74:ba:a9:
a2:20:80:1d:bc:92:86:09:f5:44:d3:1e:5d:91:85:4d:12:c1:
d9:3e:39:cb:2b:8a:7e:3f:98:8e:6e:f1:6f:04:52:9c:1a:e9:
70:b8:d9:4c:9c:48:30:c7:ad:79:21:f5:4b:20:72:73:0d:fd:
28:f6:f8:be:86:8e:9b:e4:bc:c8:ea:95:93:31:92:6c:99:63:
a2:f5:93:a7:c3:ed:e3:26:19:bf:88:2b:38:e6:e0:b6:4f:59:
3e:b3:38:86:9e:ca:e0:58:e0:8b:33:f2:cf:79:09:ec:2f:6b:
44:2d:cc:07:dd:2c:61:8d:75:fb:55:4c:8c:63:bc:1b:ec:a6:
44:95:3b:77:70:7c:2c:39:6a:89:aa:99:8e:e8:31:7c:80:46:
7e:60:15:f9:3f:1b:58:60:b1:7c:80:68:61:a1:c9:ff:43:e5:
cc:aa:a6:43:aa:89:f1:f8:0e:9b:d4:2c:cf:e6:a1:9e:7e:67:
0a:de:4e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:56 2023 by rpki-client on console-fra.rpki-client.org