Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/VlydoCgvYd9CSFYIanCYP7rGmNc.roa
File: VlydoCgvYd9CSFYIanCYP7rGmNc.roa (raw, json)
Hash identifier: DXlGN1QlzliTouR4keZeD5jfujXE92X4JVmCNFMZZ7A=
Subject key identifier: 56:5C:9D:A0:28:2F:61:DF:42:48:56:08:6A:70:98:3F:BA:C6:98:D7
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 056FEAC8
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/VlydoCgvYd9CSFYIanCYP7rGmNc.roa
Signing time: Tue 29 Mar 2022 02:26:01 +0000
ROA not before: Tue 29 Mar 2022 02:26:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91220680 (0x56feac8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Mar 29 02:26:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=565c9da0282f61df424856086a70983fbac698d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7a:bd:a1:bf:18:28:8d:16:6b:01:28:77:ab:
1b:8d:c0:95:ed:6d:47:a5:a0:11:30:29:17:20:41:
54:1e:c3:7b:ab:3d:1c:13:06:ae:3b:71:12:a6:c9:
ea:b0:86:5b:45:77:ec:84:bd:45:96:80:cb:aa:63:
43:0b:8b:4e:72:77:7d:54:d6:b9:0e:83:0a:4b:49:
f7:a9:f7:04:a9:e2:a5:6b:e2:36:db:04:ca:63:2e:
38:52:1f:4c:81:3a:65:7e:d8:62:7e:a1:d8:11:2d:
e6:9c:aa:f2:b2:ff:f6:b8:e8:9e:43:04:b7:ad:4f:
d3:64:d9:0b:9b:c1:37:c5:50:ee:33:4b:8d:99:5c:
02:a1:55:1e:b2:be:05:98:b3:6c:51:bf:a8:00:58:
b7:b6:23:ab:c3:de:e4:70:5d:c4:d0:ce:ec:21:12:
e1:2e:d5:34:14:62:18:27:8e:a3:63:19:ba:4d:b6:
f0:ad:00:b7:37:99:05:43:b0:c4:4c:0e:c9:cf:25:
f2:fc:8a:e9:a4:9e:c2:f7:18:71:c2:56:ac:53:9b:
09:6f:75:7d:88:aa:36:20:93:6c:04:aa:22:bd:9f:
db:38:42:d4:c4:cb:66:d0:e8:02:a4:7f:32:2e:63:
38:e3:30:f4:59:d2:17:55:2e:f0:95:4c:c2:53:89:
c0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:5C:9D:A0:28:2F:61:DF:42:48:56:08:6A:70:98:3F:BA:C6:98:D7
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/VlydoCgvYd9CSFYIanCYP7rGmNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
22:88:10:10:82:79:1e:f7:38:7a:59:72:03:42:56:0a:25:95:
ab:19:fa:95:63:87:28:a9:fd:2b:23:1b:f2:ed:e4:31:0b:5b:
ea:2e:28:95:7f:cf:f7:0c:7c:db:9d:7e:04:2c:2f:2a:e2:74:
d9:99:2d:f1:87:1b:3f:e2:05:93:eb:1e:16:a8:d4:b9:b6:c6:
5f:df:f6:e2:65:88:09:73:2b:10:e4:ef:db:b0:de:5d:c4:3f:
29:4d:99:43:f2:2e:fe:af:86:cc:d4:4d:ea:ae:67:58:3d:0e:
55:06:7a:f6:cd:1d:77:aa:27:20:2d:a4:52:a3:6a:35:fa:ff:
bc:37:8c:38:88:78:f8:5c:ba:62:9c:13:27:19:f4:5a:85:24:
35:83:7d:fb:80:0d:94:06:34:15:c5:f3:51:fc:e1:1c:73:2f:
f3:e0:af:b4:40:fd:5b:3b:8c:3a:7f:bf:c1:6c:69:aa:c5:3f:
92:53:19:b4:d5:c5:98:6a:10:40:62:22:ea:1c:df:9f:fb:0a:
1c:82:8a:2f:98:93:0d:06:ce:ba:50:69:2e:cc:4d:79:5a:31:
07:d3:40:b7:33:a2:a2:58:db:e3:a7:98:74:25:22:40:47:1c:
84:21:cb:8e:8c:b5:ec:41:54:86:86:43:c0:01:0b:0e:58:74:
5f:34:b3:d8
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEBW/qyDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDMy
OTAyMjYwMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTY1YzlkYTAyODJm
NjFkZjQyNDg1NjA4NmE3MDk4M2ZiYWM2OThkNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALx6vaG/GCiNFmsBKHerG43Ale1tR6WgETApFyBBVB7De6s9
HBMGrjtxEqbJ6rCGW0V37IS9RZaAy6pjQwuLTnJ3fVTWuQ6DCktJ96n3BKnipWvi
NtsEymMuOFIfTIE6ZX7YYn6h2BEt5pyq8rL/9rjonkMEt61P02TZC5vBN8VQ7jNL
jZlcAqFVHrK+BZizbFG/qABYt7Yjq8Pe5HBdxNDO7CES4S7VNBRiGCeOo2MZuk22
8K0AtzeZBUOwxEwOyc8l8vyK6aSewvcYccJWrFObCW91fYiqNiCTbASqIr2f2zhC
1MTLZtDoAqR/Mi5jOOMw9FnSF1Uu8JVMwlOJwMkCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBRWXJ2gKC9h30JIVghqcJg/usaY1zAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L1ZseWRvQ2d2WWQ5Q1NGWUlhbkNZUDdyR21OYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAZfYBDAPBAIAAjAJAwcBIAEH/AAC
MA0GCSqGSIb3DQEBCwUAA4IBAQAiiBAQgnke9zh6WXIDQlYKJZWrGfqVY4coqf0r
Ixvy7eQxC1vqLiiVf8/3DHzbnX4ELC8q4nTZmS3xhxs/4gWT6x4WqNS5tsZf3/bi
ZYgJcysQ5O/bsN5dxD8pTZlD8i7+r4bM1E3qrmdYPQ5VBnr2zR13qicgLaRSo2o1
+v+8N4w4iHj4XLpinBMnGfRahSQ1g337gA2UBjQVxfNR/OEccy/z4K+0QP1bO4w6
f7/BbGmqxT+SUxm01cWYahBAYiLqHN+f+wocgoovmJMNBs66UGkuzE15WjEH00C3
M6KiWNvjp5h0JSJARxyEIcuOjLXsQVSGhkPAAQsOWHRfNLPY
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:54 2024 by rpki-client on console-ams.rpki-client.org