Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/SPSnXupdW31SdNXTIDM4RZ1ZFT0.roa
File: SPSnXupdW31SdNXTIDM4RZ1ZFT0.roa (raw, json)
Hash identifier: kvUH2gZA91TWFta58hxzKPcaoOF8TWeIDy1HwqnDM2Q=
Subject key identifier: 48:F4:A7:5E:EA:5D:5B:7D:52:74:D5:D3:20:33:38:45:9D:59:15:3D
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 08D0C672
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/SPSnXupdW31SdNXTIDM4RZ1ZFT0.roa
Signing time: Mon 20 Jun 2022 03:42:44 +0000
ROA not before: Mon 20 Jun 2022 03:42:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147900018 (0x8d0c672)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 20 03:42:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=48f4a75eea5d5b7d5274d5d3203338459d59153d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b1:36:58:64:cf:06:f5:5b:4c:63:98:e1:f8:
0c:59:f7:21:c5:aa:44:d3:28:c2:c3:65:16:4e:c1:
b5:4d:fb:f5:c7:97:13:92:b6:60:67:01:86:b1:54:
23:ea:e5:82:bf:d5:49:79:74:aa:86:a3:35:83:60:
90:c6:4a:1c:70:af:5f:43:a5:ae:67:dd:a3:36:77:
0a:92:ae:b3:f2:6f:1a:08:61:7d:29:c2:4d:36:31:
0c:6d:c9:e1:44:7d:ea:c8:31:dc:b8:ca:d9:e1:18:
37:d8:67:75:66:1e:e5:6c:57:b0:aa:09:37:ab:fc:
4f:33:72:e5:4a:c0:65:64:ae:cc:ec:9a:c8:6a:3a:
43:24:3e:16:2d:6a:ca:a9:21:15:9f:3a:93:ff:1a:
61:99:11:fd:b4:14:99:17:24:8d:d9:b6:73:55:5b:
e5:3b:8a:6a:87:46:af:75:20:60:50:a6:aa:ae:85:
7b:01:85:bd:c7:66:04:ca:24:72:ba:74:45:c2:c2:
03:0f:47:55:cb:c9:df:3b:5e:75:b6:08:0c:43:11:
f0:fa:42:af:fc:01:6a:07:0e:f3:b3:30:a9:db:0e:
83:a0:6f:99:84:68:70:35:03:0a:04:7b:be:ee:53:
df:45:bf:2b:75:d9:14:22:ac:0d:c6:46:c1:06:a1:
40:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F4:A7:5E:EA:5D:5B:7D:52:74:D5:D3:20:33:38:45:9D:59:15:3D
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/SPSnXupdW31SdNXTIDM4RZ1ZFT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
01:8a:97:3a:75:e5:5d:c7:0a:da:76:72:fa:54:68:8f:6a:c1:
5b:d5:0b:cc:62:b0:62:49:68:ed:4b:4f:16:a3:8a:06:d6:bb:
de:ad:1b:0c:93:18:c9:76:5a:ba:45:7f:1e:bc:df:6a:d4:fb:
b7:fc:42:6c:3c:99:7d:8d:b4:42:84:2e:fb:ba:ad:af:8d:7f:
53:9a:5d:57:4a:73:25:00:e0:3a:ef:61:b4:12:09:96:53:bb:
ef:69:1b:e9:a9:d9:2e:a7:2e:b1:3f:a0:33:dc:01:dd:7d:0a:
cd:89:77:b8:7d:a7:f9:b6:03:d1:ef:03:05:1d:55:03:f2:37:
8a:80:6d:bf:f6:6d:a2:f6:02:a6:7a:86:4c:a0:24:fc:1c:60:
da:50:27:69:31:54:02:36:ac:51:36:17:59:68:bb:65:9e:56:
1a:b5:d6:cf:e1:8d:e3:da:7f:26:c7:14:d3:b4:b4:51:78:ef:
38:1d:9f:5f:ba:c1:15:80:58:c0:b7:ac:4e:ff:81:26:24:d6:
11:77:f4:37:c4:f1:0f:71:7e:6c:d1:4a:ac:a9:c5:5a:af:3f:
0d:92:5b:87:e4:2c:42:af:d9:3a:4c:7f:f2:95:a5:78:7f:60:
28:8f:1a:ae:7d:0b:1c:c3:1a:8b:88:39:81:7f:1c:5b:62:bb:
50:64:99:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:28 2024 by rpki-client on console-fra.rpki-client.org