Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/U0fGr1D947DkGZoF1mI2ePvasss.roa
File: U0fGr1D947DkGZoF1mI2ePvasss.roa (raw, json)
Hash identifier: P5FdcnJ4mhtpN9ohzg159dkO4pvLKTVAnfwwfDq7qzQ=
Subject key identifier: 53:47:C6:AF:50:FD:E3:B0:E4:19:9A:05:D6:62:36:78:FB:DA:B2:CB
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 0485A0AB
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/U0fGr1D947DkGZoF1mI2ePvasss.roa
Signing time: Sat 26 Feb 2022 12:18:07 +0000
ROA not before: Sat 26 Feb 2022 12:18:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75866283 (0x485a0ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Feb 26 12:18:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5347c6af50fde3b0e4199a05d6623678fbdab2cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:54:58:c2:fe:d4:c5:12:e5:7f:0a:b7:15:dc:
f6:80:e0:8b:a5:75:d4:f2:32:ec:10:d1:70:32:c9:
9f:72:8f:5b:08:8d:50:17:87:f7:e7:f6:04:49:a9:
83:d7:d3:aa:88:c5:c4:e7:a7:76:09:d7:46:3b:f4:
58:ad:1f:67:98:26:0e:21:d6:23:b1:e6:57:5a:94:
65:a2:f0:db:07:42:5f:8a:c9:ca:c6:14:8f:2d:ad:
02:83:0f:86:48:c3:f9:71:db:7f:47:bc:88:ba:a0:
b0:b3:1c:cc:28:3f:af:b2:5a:57:44:13:19:89:f8:
10:6b:80:cd:09:70:c9:14:ce:75:be:5a:94:39:b1:
1f:20:3c:8c:e7:a5:ce:27:be:9c:08:e6:e9:ab:70:
25:dc:65:d5:fc:82:5d:35:0c:70:79:f6:95:9a:00:
f5:53:47:3a:be:a7:9a:24:06:82:4c:d4:35:7c:8a:
6a:f1:a4:b0:84:5e:1f:d8:23:43:0a:8b:37:f1:fe:
bc:d8:1d:45:c9:b6:62:aa:86:86:66:44:16:b2:9d:
a3:e9:eb:eb:9b:36:1b:df:ff:85:6c:2b:a6:6f:29:
ea:0b:b1:1d:50:41:0e:a6:fa:09:31:2c:1e:cc:30:
34:70:65:2b:eb:8d:ed:8f:39:da:71:f2:49:08:70:
18:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:47:C6:AF:50:FD:E3:B0:E4:19:9A:05:D6:62:36:78:FB:DA:B2:CB
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/U0fGr1D947DkGZoF1mI2ePvasss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
6f:f2:b2:45:ad:07:56:1f:b5:f4:23:98:76:bc:53:ed:84:de:
b7:ad:c5:ef:25:3c:24:2a:ea:3e:8f:ad:be:96:7e:70:80:cb:
31:50:d5:62:8e:c7:1e:24:f2:c1:c5:a8:66:db:5a:07:2a:fa:
05:56:9e:f2:9f:96:79:27:fe:33:b3:a9:6e:50:b6:c2:a9:29:
ac:5e:a4:08:c2:75:24:2c:41:b2:f5:6d:5a:35:ce:fb:93:ef:
d9:5c:3a:9f:db:f0:a7:15:1e:6b:94:31:db:92:ce:ca:84:aa:
40:08:fd:52:bd:52:b9:8d:06:9b:55:e5:ad:c7:71:23:d2:c6:
ba:78:32:bc:6b:0d:b4:2d:fe:db:9e:70:5d:85:71:1d:ff:0d:
4b:8c:70:08:0d:69:d4:a5:5a:55:45:85:57:01:5e:b6:91:4f:
7b:fe:61:46:e9:ef:5f:d6:42:2d:b9:f0:b4:ad:4d:92:c0:4d:
9d:68:cd:be:92:07:4e:4c:7c:61:a3:4f:cf:8b:0a:dd:12:b8:
a6:ce:b0:79:c0:b8:ec:a5:7a:50:55:7c:84:f0:38:e8:3f:da:
26:f0:22:0e:c6:b5:d2:e5:fa:b5:00:96:6e:0b:06:4d:52:51:
c4:5e:4c:33:b8:9d:fe:63:b8:db:f1:7f:96:c3:87:45:24:d2:
ac:a5:26:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:54 2024 by rpki-client on console-ams.rpki-client.org