Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/VIVYbhcudxN9MRb4jo2EpDQbntc.roa
File: VIVYbhcudxN9MRb4jo2EpDQbntc.roa (raw, json)
Hash identifier: tk24zARnKIZGvBswPM+L1q5uGYkfeBrJdJ2jdRquMaw=
Subject key identifier: 54:85:58:6E:17:2E:77:13:7D:31:16:F8:8E:8D:84:A4:34:1B:9E:D7
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 080B611A
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/VIVYbhcudxN9MRb4jo2EpDQbntc.roa
Signing time: Sun 05 Jun 2022 04:14:20 +0000
ROA not before: Sun 05 Jun 2022 04:14:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134963482 (0x80b611a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 5 04:14:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5485586e172e77137d3116f88e8d84a4341b9ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1f:63:b3:ee:9c:53:eb:7f:d5:79:25:87:f8:
3a:5a:41:58:70:84:2f:c9:8f:fb:b1:6a:7a:d7:b2:
d7:f0:fd:33:8c:3d:f6:3d:e2:51:23:32:d7:93:27:
a8:f1:50:1e:49:67:27:d4:e2:cc:f6:49:40:50:87:
b1:69:41:f3:53:a2:dc:84:58:a1:a1:12:9a:8b:1f:
a8:ff:44:a6:8f:80:da:49:9c:e4:3a:09:81:33:79:
a5:e3:a4:41:b5:68:be:3f:54:4c:c6:eb:84:31:85:
ab:55:62:da:f9:ec:74:ed:d0:a5:0c:80:1f:e4:01:
a7:48:65:5f:13:4a:41:a1:ce:25:da:af:b8:b6:b7:
d8:13:33:13:0f:94:06:2b:67:c4:ef:89:1d:72:3c:
03:dd:2b:be:53:b4:87:a5:0a:0d:ee:7a:d9:98:df:
08:00:9f:f0:07:f7:2f:e8:87:18:5b:1b:62:e3:27:
01:9d:6d:ab:65:cd:80:a1:4e:f3:a0:0a:73:d4:dd:
ec:45:01:a1:8f:d1:b9:14:ac:20:a7:da:51:fd:a2:
b1:c3:73:81:dc:1f:b5:08:61:58:ea:5e:a2:17:25:
7e:57:23:31:73:d2:f3:7d:4e:dd:8b:f2:2e:21:2a:
2f:9f:0a:1a:26:aa:06:81:fd:f0:5a:60:83:22:88:
21:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:85:58:6E:17:2E:77:13:7D:31:16:F8:8E:8D:84:A4:34:1B:9E:D7
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/VIVYbhcudxN9MRb4jo2EpDQbntc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
5f:26:2e:99:2e:ff:d2:98:87:91:13:6b:54:70:4e:b5:4e:46:
ae:61:ff:47:75:ae:aa:0e:27:d2:98:16:b9:91:c3:11:be:b8:
4b:bd:1a:0e:d7:8e:0c:94:3d:b8:88:e2:ac:b2:5b:c7:07:a3:
51:0b:c4:e7:61:38:6d:61:4e:10:f2:53:75:8b:3c:42:3c:07:
12:b4:bd:b8:11:0e:62:08:1a:29:88:27:ef:77:27:e6:ef:2b:
34:de:65:36:78:9a:3b:8b:9b:82:fb:66:39:c0:c2:e3:86:29:
af:3a:1e:67:e3:31:3c:5d:e5:eb:7a:57:a1:ae:cf:77:f9:72:
36:e9:8f:77:52:81:7a:92:b0:9d:9a:50:57:6f:73:64:29:f9:
a0:e6:eb:44:4c:00:8a:c4:d5:0f:f6:bd:77:04:96:be:26:b7:
42:03:a9:cd:4d:8d:87:ea:77:e0:41:cf:8a:47:2d:b8:a3:d7:
4d:77:4b:70:41:14:75:44:d6:75:40:f8:94:4f:28:2a:17:50:
c1:be:8b:7b:2f:33:1e:ca:f0:9c:18:1a:7d:ae:59:bf:83:5d:
c6:3f:38:dc:9e:17:50:0b:a2:a4:22:b0:a6:07:ad:55:1a:75:
a1:41:e4:b8:9d:e5:39:3c:5d:84:02:1f:5f:4e:a3:f9:63:da:
68:f9:3b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:56 2023 by rpki-client on console-fra.rpki-client.org