Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/UOpes9_9hM-okJyNDd6nimeRbAE.roa
File: UOpes9_9hM-okJyNDd6nimeRbAE.roa (raw, json)
Hash identifier: 4xO4ChGIqogBDRyMV1u1pmVUU5vTV/ikEMUx0PWCxJg=
Subject key identifier: 50:EA:5E:B3:DF:FD:84:CF:A8:90:9C:8D:0D:DE:A7:8A:67:91:6C:01
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 05BF2826
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/UOpes9_9hM-okJyNDd6nimeRbAE.roa
Signing time: Sat 09 Apr 2022 09:51:45 +0000
ROA not before: Sat 09 Apr 2022 09:51:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96413734 (0x5bf2826)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Apr 9 09:51:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=50ea5eb3dffd84cfa8909c8d0ddea78a67916c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e2:87:00:b1:9b:85:3a:28:55:28:b3:a0:42:
7c:49:42:62:c4:42:af:84:90:59:f2:86:aa:49:f3:
88:35:ac:5b:3a:f1:2b:9c:74:c0:40:b4:79:75:eb:
d0:11:85:37:7d:f2:83:db:95:05:e4:7c:b4:75:47:
36:2e:94:2b:25:72:c2:5b:6b:cd:c2:28:42:42:48:
69:0f:b4:3b:97:d9:2e:c2:28:c6:38:7d:94:93:49:
6a:74:4e:85:d7:72:ce:82:f7:97:4e:f2:4b:35:de:
c9:1a:cc:31:9d:5a:d6:06:81:6c:f6:ef:26:ef:39:
7c:ff:35:8e:52:14:03:f0:55:58:59:a0:61:b7:ef:
61:80:e6:4a:a5:79:79:70:14:45:f6:63:d2:ce:54:
7c:32:6a:f2:e1:d4:9e:07:34:6a:13:88:69:3f:2c:
ba:bf:d2:bd:78:dc:51:dc:39:70:67:ca:f5:2c:b4:
43:61:94:6e:c0:5c:fb:66:1e:f5:a4:67:6e:99:ba:
14:c1:0d:0a:a2:0e:da:fc:96:b7:5b:37:01:2a:6f:
ab:92:d8:b1:3b:1a:bb:4c:32:95:df:1d:ba:d4:36:
00:99:9c:e9:77:fe:76:de:e8:a5:84:b8:b2:5b:de:
95:f0:09:fa:fb:1f:8e:2d:2a:62:e2:d1:88:4b:5b:
1d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:EA:5E:B3:DF:FD:84:CF:A8:90:9C:8D:0D:DE:A7:8A:67:91:6C:01
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/UOpes9_9hM-okJyNDd6nimeRbAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
3a:8c:02:74:f2:68:26:bc:31:ef:87:d3:2a:e2:bd:5b:28:1f:
10:43:90:cf:2a:f1:d0:b5:02:08:d2:d3:26:0d:d9:97:2f:dc:
57:0b:f5:e3:c6:1b:c9:26:70:f1:ef:06:73:9d:ae:52:64:7f:
e7:b3:b8:54:98:87:43:59:19:aa:74:42:49:ee:d0:60:d9:52:
da:ff:7c:08:61:87:72:c3:a0:0b:10:f8:ec:d2:fd:7e:05:54:
c6:4e:55:f5:4e:24:bf:1b:df:c1:17:0f:06:ee:18:d8:47:69:
79:87:7a:9e:e8:5f:73:c6:52:45:c6:c3:f6:02:62:45:d6:fa:
6f:37:11:41:89:55:ef:e4:8e:2c:7c:cd:bd:d2:ce:35:15:29:
05:b2:b9:9b:7e:15:2c:eb:fe:29:e9:92:0e:de:e8:d1:18:f0:
0d:21:68:c9:26:0c:66:e8:a1:99:02:b5:26:94:31:72:b4:0b:
be:cf:47:f2:1e:93:51:4f:02:ee:b8:3e:d9:14:32:14:90:2d:
7e:f3:53:c4:1e:b4:1e:f4:95:0e:d3:74:f1:d9:14:74:26:25:
77:c8:a9:f7:4a:7e:cd:3b:9f:b8:e1:c7:2a:46:47:dc:27:62:
99:b6:7e:a7:4f:ed:4f:c5:09:24:c1:20:49:84:fb:90:4d:2b:
a3:38:a8:81
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEBb8oJjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDQw
OTA5NTE0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTBlYTVlYjNkZmZk
ODRjZmE4OTA5YzhkMGRkZWE3OGE2NzkxNmMwMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJHihwCxm4U6KFUos6BCfElCYsRCr4SQWfKGqknziDWsWzrx
K5x0wEC0eXXr0BGFN33yg9uVBeR8tHVHNi6UKyVywltrzcIoQkJIaQ+0O5fZLsIo
xjh9lJNJanROhddyzoL3l07ySzXeyRrMMZ1a1gaBbPbvJu85fP81jlIUA/BVWFmg
YbfvYYDmSqV5eXAURfZj0s5UfDJq8uHUngc0ahOIaT8sur/SvXjcUdw5cGfK9Sy0
Q2GUbsBc+2Ye9aRnbpm6FMENCqIO2vyWt1s3ASpvq5LYsTsau0wyld8dutQ2AJmc
6Xf+dt7opYS4slvelfAJ+vsfji0qYuLRiEtbHR8CAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBRQ6l6z3/2Ez6iQnI0N3qeKZ5FsATAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L1VPcGVzOV85aE0tb2tKeU5EZDZuaW1lUmJBRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAZfYBDAPBAIAAjAJAwcAIAEH/AAC
MA0GCSqGSIb3DQEBCwUAA4IBAQA6jAJ08mgmvDHvh9Mq4r1bKB8QQ5DPKvHQtQII
0tMmDdmXL9xXC/XjxhvJJnDx7wZzna5SZH/ns7hUmIdDWRmqdEJJ7tBg2VLa/3wI
YYdyw6ALEPjs0v1+BVTGTlX1TiS/G9/BFw8G7hjYR2l5h3qe6F9zxlJFxsP2AmJF
1vpvNxFBiVXv5I4sfM290s41FSkFsrmbfhUs6/4p6ZIO3ujRGPANIWjJJgxm6KGZ
ArUmlDFytAu+z0fyHpNRTwLuuD7ZFDIUkC1+81PEHrQe9JUO03Tx2RR0JiV3yKn3
Sn7NO5+44ccqRkfcJ2KZtn6nT+1PxQkkwSBJhPuQTSujOKiB
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:28 2024 by rpki-client on console-fra.rpki-client.org