Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/UC3cZAWgBETkrVdIb2r6n2KVPNg.roa
File: UC3cZAWgBETkrVdIb2r6n2KVPNg.roa (raw, json)
Hash identifier: wHm7JmFF/6PLa8THyY81zLN5cJQeQBKmDNmofHhcMAs=
Subject key identifier: 50:2D:DC:64:05:A0:04:44:E4:AD:57:48:6F:6A:FA:9F:62:95:3C:D8
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 048C62A0
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/UC3cZAWgBETkrVdIb2r6n2KVPNg.roa
Signing time: Sun 27 Feb 2022 05:52:02 +0000
ROA not before: Sun 27 Feb 2022 05:52:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76309152 (0x48c62a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Feb 27 05:52:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=502ddc6405a00444e4ad57486f6afa9f62953cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:44:75:f9:5c:81:53:68:d2:a6:9e:bf:4a:5f:
40:0e:bd:59:79:bd:4e:e7:c3:85:c5:8c:b6:ca:8c:
fa:34:7a:41:e6:07:96:47:37:3e:d1:ea:ee:84:8f:
6f:da:db:75:ad:ae:d1:23:79:ad:c8:95:f0:ed:a4:
0c:7e:03:0b:38:86:7a:dd:f9:9e:f8:c7:b3:8b:7d:
73:73:1b:55:be:63:16:60:4a:49:80:e1:41:c2:5f:
8c:03:a6:95:31:3a:db:6b:41:0a:be:dd:39:e0:b1:
dd:5e:81:68:bd:19:a1:88:06:08:d7:33:38:a8:db:
70:37:ee:4f:5a:84:db:f2:db:60:02:0c:7c:6e:ec:
c0:46:f6:bb:a5:aa:25:73:28:8f:0d:83:73:0a:00:
71:c9:85:20:a3:90:cf:63:93:4d:8d:89:b3:2b:6b:
0d:dd:1e:8b:17:40:ae:ac:ed:b3:4b:c7:22:1e:28:
0f:37:7c:fa:39:71:d1:d6:98:84:45:71:b4:92:2c:
ac:98:fc:35:34:48:06:78:b9:8e:7b:bf:39:49:96:
94:7d:9e:be:c9:1b:9a:be:4a:48:dd:fa:fc:38:b9:
31:75:4b:63:af:0b:cb:8c:6b:a9:08:a9:a4:f5:c4:
7c:1a:14:0c:a0:bf:af:3e:ce:09:79:88:64:e5:04:
35:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:2D:DC:64:05:A0:04:44:E4:AD:57:48:6F:6A:FA:9F:62:95:3C:D8
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/UC3cZAWgBETkrVdIb2r6n2KVPNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
46:54:45:ca:29:7d:48:5f:eb:b7:57:d1:1c:c4:d5:b5:bb:0d:
11:88:bb:45:f3:ce:7a:01:75:44:07:36:c8:e0:17:2d:6d:1c:
46:cb:72:ae:d2:09:fd:cd:64:24:e8:55:32:25:6f:bf:9a:07:
51:a3:6a:d2:24:cc:71:39:b6:d5:97:9f:f4:15:2e:9f:ae:3a:
25:9e:d2:68:24:cd:05:34:15:47:b1:d6:85:b0:91:60:7a:0f:
20:40:79:ae:bb:16:5f:97:77:35:f1:17:43:99:59:31:64:6f:
25:16:5b:f0:63:8c:c7:44:1f:b5:a4:f2:50:0e:28:8b:8e:0b:
19:d0:15:e6:c4:d3:9f:db:11:de:6d:6f:b8:cb:0a:ce:22:3b:
3e:b4:95:c6:16:52:a6:2f:a7:d3:2e:4f:00:f4:72:85:c6:74:
8b:f1:ac:80:28:2e:03:c0:45:d1:0f:88:de:a9:ea:c7:93:2f:
72:6f:02:08:20:72:84:96:90:ed:13:58:fb:f4:1e:23:2f:33:
91:c6:a9:fb:77:d6:76:74:77:47:6d:41:37:7c:54:3a:aa:8f:
7b:f1:9a:65:be:56:ea:c5:5c:6a:b9:62:b8:cc:86:40:f4:5e:
b5:a2:09:33:b8:b2:5a:43:74:c9:bd:ef:e4:48:86:40:b2:46:
de:f3:8e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:56 2023 by rpki-client on console-fra.rpki-client.org