Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/XN_Hi03LfwLFEIiAakFeSCGgj0w.roa
File: XN_Hi03LfwLFEIiAakFeSCGgj0w.roa (raw, json)
Hash identifier: KCNqPS2AAe8J4NXqL3I5Lk2qvTsx8DqkGArZRAdZYBA=
Subject key identifier: 5C:DF:C7:8B:4D:CB:7F:02:C5:10:88:80:6A:41:5E:48:21:A0:8F:4C
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 04F645FF
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/XN_Hi03LfwLFEIiAakFeSCGgj0w.roa
Signing time: Sat 12 Mar 2022 03:53:34 +0000
ROA not before: Sat 12 Mar 2022 03:53:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83248639 (0x4f645ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Mar 12 03:53:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5cdfc78b4dcb7f02c51088806a415e4821a08f4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c7:bb:0b:59:0d:33:72:61:80:2b:b6:a2:10:
86:24:58:74:5f:3d:f4:c8:25:17:6f:9c:b2:a9:eb:
79:88:8b:6c:f7:5a:39:7c:7f:63:90:59:23:f5:58:
c6:81:8c:89:9d:c3:00:79:78:87:97:e7:69:6e:a3:
95:68:81:e7:25:95:b8:75:e0:39:be:8b:e5:eb:e5:
e9:d5:f4:d3:eb:cc:37:7c:f7:63:d6:57:3f:54:06:
ce:68:8c:cc:0a:78:89:47:cc:37:e8:98:9a:38:fb:
18:ed:5a:a9:c6:78:d8:ae:25:81:12:33:d8:46:8d:
56:b0:3b:ce:ba:ac:f7:b4:97:65:85:b7:cf:79:6e:
d7:64:6f:f7:46:2c:47:11:e2:ad:1f:04:1a:c3:ae:
73:4a:3e:3d:d6:cf:03:a4:47:5b:6c:e7:0b:68:55:
76:ad:20:9a:ad:6b:21:14:1a:8f:64:bc:02:ff:4b:
fc:a5:df:a2:14:91:f7:50:5e:c0:e0:70:12:5d:21:
32:37:cc:87:a1:98:64:dc:b5:15:ee:26:1f:bb:ed:
66:d9:7d:7f:44:42:4f:06:54:91:26:4e:ee:ff:33:
7b:ab:1a:01:a6:32:b7:12:80:d1:10:16:25:2e:fe:
11:77:27:f4:86:a4:c9:de:02:d7:67:ec:51:08:e2:
02:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:DF:C7:8B:4D:CB:7F:02:C5:10:88:80:6A:41:5E:48:21:A0:8F:4C
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/XN_Hi03LfwLFEIiAakFeSCGgj0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
71:2d:0b:cb:09:4e:f8:e1:10:4f:56:08:10:64:96:d9:22:53:
02:98:fd:18:38:6e:54:d1:58:7a:dd:d9:f7:f0:2b:e2:38:8e:
b4:60:42:0e:31:ed:0a:a5:f7:0a:6b:f0:54:0c:10:8f:29:23:
02:ab:1a:7d:b5:29:12:11:0c:25:e5:f3:cc:9a:02:51:07:8b:
4d:2b:83:c4:58:f7:e3:3b:20:34:d6:66:7c:67:93:9c:9c:29:
b0:ce:f6:b7:4c:93:fb:1e:25:be:9b:cb:6b:8f:dc:44:b5:a7:
ff:22:e1:f7:01:94:e8:28:3b:b2:c5:31:af:31:02:b3:2b:17:
d2:2d:04:9f:d8:4f:ad:0b:c2:ab:47:40:fc:e3:87:4d:80:d9:
57:7e:71:93:c9:13:c3:68:c4:29:5c:9a:09:4e:dc:49:6f:33:
d4:e8:11:84:cb:d5:12:6d:0a:ef:44:23:53:43:12:b9:0c:75:
1f:d3:9f:69:79:15:8a:49:1b:50:1f:8a:dc:98:27:1a:c0:03:
36:eb:26:8f:fa:00:76:4f:27:0b:8d:c7:d1:96:1e:e2:cc:4a:
90:8b:e8:ee:da:00:18:1e:e0:e4:77:6a:64:56:c6:4f:1a:ca:
55:c6:13:47:2b:3e:13:ee:8e:d5:42:28:52:e4:58:aa:1c:3f:
3f:98:6f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:56 2023 by rpki-client on console-fra.rpki-client.org