Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/SlnwTYHC0YrhFIhcEbxotKYy2CU.roa
File: SlnwTYHC0YrhFIhcEbxotKYy2CU.roa (raw, json)
Hash identifier: TpxIiMGCCd4FaaoerJo07auaHRpx1wQHa/JUfP916zU=
Subject key identifier: 4A:59:F0:4D:81:C2:D1:8A:E1:14:88:5C:11:BC:68:B4:A6:32:D8:25
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 0181DBB556A00437F4D48D453F6B60B56467
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/SlnwTYHC0YrhFIhcEbxotKYy2CU.roa
Signing time: Fri 08 Jul 2022 02:48:23 +0000
ROA not before: Fri 08 Jul 2022 02:48:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:db:b5:56:a0:04:37:f4:d4:8d:45:3f:6b:60:b5:64:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jul 8 02:48:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a59f04d81c2d18ae114885c11bc68b4a632d825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4c:ab:22:f6:0a:74:41:7f:01:0e:46:fd:30:
ea:76:8c:81:d5:d6:6e:2a:31:a8:c1:29:3e:65:13:
8a:be:0d:8d:4e:f4:37:5a:23:79:2c:9e:bc:7e:04:
85:26:72:e8:64:a9:3c:97:4f:47:e2:76:be:02:15:
eb:66:2f:b2:ca:6f:b3:f7:d5:6e:57:27:34:6d:dc:
f8:c6:1b:bc:97:d0:bc:2c:8e:e4:c6:59:af:e8:d9:
2f:b3:a0:ee:2c:c9:5b:a7:62:e2:b9:33:57:1f:04:
0d:04:33:75:bf:9a:ca:b0:88:9b:92:1e:11:13:dc:
01:0b:b3:7d:01:b1:0d:d1:b0:11:f1:2b:f3:71:0c:
16:d9:39:9b:42:3e:dd:b0:5a:e4:00:70:3a:29:40:
96:8c:0a:a9:58:ea:20:b8:56:cf:c7:2c:fc:9a:26:
de:af:11:a5:7b:53:d7:0f:00:f8:93:14:d8:3f:63:
5f:00:02:63:26:9f:f8:cb:6d:c7:32:af:0c:c7:f1:
98:0c:38:8c:bb:a9:00:e0:6a:e1:d0:d8:88:9a:88:
2b:0c:d8:43:69:b9:2e:1f:8d:4e:b4:de:7b:8b:7f:
14:a2:59:cd:5d:66:97:81:0b:7b:70:5b:1c:92:37:
6a:93:bb:87:62:45:a7:17:3e:cc:10:d6:03:96:1e:
ee:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:59:F0:4D:81:C2:D1:8A:E1:14:88:5C:11:BC:68:B4:A6:32:D8:25
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/SlnwTYHC0YrhFIhcEbxotKYy2CU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
35:da:34:0d:53:b5:bb:65:e0:e5:ad:62:49:7b:ee:9d:6f:be:
31:ea:cb:9e:d2:ec:94:46:80:41:f6:28:a3:fb:88:02:84:0e:
5b:3d:8e:92:38:4e:e3:87:74:38:7d:78:cb:03:30:8b:43:0c:
72:dc:8f:3e:e2:50:92:c1:07:8e:d8:27:f8:bc:fa:fd:11:33:
0e:a5:a4:ad:6e:d4:40:f0:73:7c:0f:f2:2f:26:a6:85:7b:d7:
ee:60:9f:a3:12:78:1c:01:a5:a8:d0:13:20:6d:ea:10:52:70:
e4:96:21:2f:d4:98:dd:fb:0f:dd:9d:5b:23:b7:77:45:2f:1d:
a6:56:2d:fa:67:65:0c:53:ca:ca:a5:04:0d:38:a3:3b:da:68:
73:3b:1a:8f:ae:9d:fe:ce:9d:4e:f3:4e:3f:a9:0e:0f:8e:bd:
98:fd:f0:31:bf:58:76:1a:46:35:c5:07:93:88:f6:0f:37:26:
4f:a2:5c:3a:68:5f:65:8c:79:c2:a0:43:1f:3a:78:e3:1e:bb:
87:39:77:dc:2c:85:42:33:9f:cf:b9:fa:6d:39:a3:e3:fb:c6:
91:e2:dc:8f:57:5a:1a:64:e4:8c:f6:a5:34:e2:e5:2c:35:29:
43:35:77:44:2b:2d:10:70:74:c8:ca:92:13:dd:d9:2f:5a:f5:
76:20:2d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:56 2023 by rpki-client on console-fra.rpki-client.org