Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/R1AczDS-qEEUhVBaaA901I54vZU.roa
File: R1AczDS-qEEUhVBaaA901I54vZU.roa (raw, json)
Hash identifier: cWoA7Mvpg611BDminNGOyfaG0OuhWQK7YoC+EQnQHcw=
Subject key identifier: 47:50:1C:CC:34:BE:A8:41:14:85:50:5A:68:0F:74:D4:8E:78:BD:95
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 041D563F
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/R1AczDS-qEEUhVBaaA901I54vZU.roa
Signing time: Sat 12 Feb 2022 17:22:50 +0000
ROA not before: Sat 12 Feb 2022 17:22:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69031487 (0x41d563f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Feb 12 17:22:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=47501ccc34bea8411485505a680f74d48e78bd95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7d:28:4e:ae:88:28:35:be:17:ef:e8:4a:4c:
dc:d5:f6:8c:d7:75:3d:bb:11:87:85:b2:89:47:2c:
22:31:63:f2:e4:47:c3:3c:4d:df:30:24:04:e6:13:
55:0a:8b:5a:c7:dd:96:87:87:6b:44:85:d9:76:2d:
86:c5:2f:d4:1f:e6:bf:99:dd:04:c1:fd:a4:ba:1a:
b9:99:43:9d:fe:fa:f0:99:fc:1c:3b:d7:86:22:7c:
a0:c2:d5:40:9e:0f:93:bc:ed:33:87:3d:e0:db:b0:
42:e6:fa:9f:fc:c4:9a:e9:3e:ec:4a:96:54:8a:db:
88:a6:8c:32:2e:42:ee:55:a0:8f:6b:8d:7a:2c:c2:
7b:55:4b:22:3c:1d:a5:dd:14:16:f8:b8:ef:0d:dc:
2c:11:98:04:34:aa:d5:30:f6:1b:7f:ef:ac:3d:01:
49:70:e2:2e:0e:00:69:19:04:cb:1a:34:2c:6a:cf:
01:0b:8c:b5:0d:88:8e:52:05:d6:7b:d6:3f:39:2e:
55:7c:fe:bf:87:50:ce:6c:7f:3d:1c:d1:66:d7:7b:
43:c3:c7:9e:99:7b:17:bb:19:2e:d2:cc:52:f9:a0:
d4:bb:65:b2:cd:86:74:2d:c4:d0:39:1d:76:13:be:
43:be:45:ae:f1:7c:38:6f:29:66:bc:d0:91:93:97:
14:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:50:1C:CC:34:BE:A8:41:14:85:50:5A:68:0F:74:D4:8E:78:BD:95
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/R1AczDS-qEEUhVBaaA901I54vZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
4b:a4:89:44:b2:1f:96:37:93:f6:8d:24:ba:32:3c:dc:78:44:
67:69:04:bd:9b:90:e8:ad:8c:46:a2:58:89:e3:ef:5e:e5:69:
84:6e:98:99:79:7c:32:1c:4e:00:a1:b6:76:97:85:4e:99:e8:
a0:d4:6c:48:a5:7d:fa:76:dd:e1:dc:b6:b6:4b:25:9f:81:5c:
e6:a2:59:d7:81:ec:3e:e0:ea:b5:10:a0:0f:9e:e4:c6:8c:3c:
65:d2:71:e6:80:2a:6b:59:bb:11:4c:55:69:cb:68:a9:65:ee:
d3:a1:57:7e:df:aa:84:ec:09:9b:88:87:fe:b0:54:3c:16:28:
8a:a0:cd:04:fb:7e:be:6f:87:7a:ca:e8:65:95:b3:3e:56:8e:
01:64:4e:65:1e:aa:3e:5e:0c:d7:30:e3:fa:10:c9:88:db:1e:
09:a5:aa:9d:c5:7e:26:fc:20:7b:37:6f:f3:0f:46:f9:61:97:
cf:1f:c9:93:03:a0:fb:2e:30:b6:7e:c1:2c:44:ad:6c:db:fe:
d1:87:f9:95:3a:e8:56:ac:63:a4:2d:8f:53:31:1a:e4:e7:f1:
75:c3:9c:26:82:04:76:45:5e:cd:60:c0:4a:46:7b:81:9b:15:
9e:06:64:68:17:dd:59:ce:75:7c:cd:2e:b5:c4:d9:27:cf:01:
2e:14:b0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:28 2024 by rpki-client on console-fra.rpki-client.org