Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/YLT23Y1UKgpoXB1DtI6WBdixfGs.roa
File: YLT23Y1UKgpoXB1DtI6WBdixfGs.roa (raw, json)
Hash identifier: 6DtxNDPAJCuImJ1X30kjuVY+hnoR1HRNbd5hDHXVXvA=
Subject key identifier: 60:B4:F6:DD:8D:54:2A:0A:68:5C:1D:43:B4:8E:96:05:D8:B1:7C:6B
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 06188689
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/YLT23Y1UKgpoXB1DtI6WBdixfGs.roa
Signing time: Thu 21 Apr 2022 11:23:13 +0000
ROA not before: Thu 21 Apr 2022 11:23:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102270601 (0x6188689)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Apr 21 11:23:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=60b4f6dd8d542a0a685c1d43b48e9605d8b17c6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1c:bd:b9:c4:c5:00:32:0c:b1:28:94:0c:8a:
a3:5c:81:29:ec:25:94:13:0a:f0:00:ac:51:9a:4b:
20:bb:f2:7d:03:98:e3:ea:25:81:98:ae:a5:d8:3b:
5c:d8:9b:4a:84:da:9a:67:ef:33:1f:d1:f0:66:22:
9a:89:e5:37:a2:6c:24:ea:15:38:cb:a2:8d:a0:5c:
02:d2:da:30:a2:f8:f6:ac:ed:71:22:5c:0f:c4:87:
86:5a:25:a9:40:77:73:b9:e7:14:b0:4a:fd:f0:61:
c2:54:fc:03:86:67:0e:da:d5:3f:c1:b8:4a:1f:16:
ea:c9:84:03:8c:1e:99:8f:20:ad:28:08:93:3b:52:
e2:3b:2b:57:29:bf:b8:be:fe:a3:cf:dc:a2:54:5e:
d9:5a:62:d1:37:28:42:be:7f:af:9d:e4:b4:5b:b8:
7f:64:77:77:65:29:55:49:f7:79:9f:45:10:05:ab:
16:df:41:95:2c:df:57:e1:f7:7a:d6:57:91:19:7e:
dc:d1:5a:33:c4:9d:1b:f1:ca:78:24:c0:fa:4b:ce:
c4:46:b5:af:aa:e5:6a:b1:47:3d:ac:27:bd:a3:e5:
65:12:8a:ee:3b:f3:d3:0d:ed:bd:55:34:dc:ae:96:
60:c9:92:d0:1f:95:20:3a:6e:61:a3:2f:0f:1e:cd:
0b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B4:F6:DD:8D:54:2A:0A:68:5C:1D:43:B4:8E:96:05:D8:B1:7C:6B
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/YLT23Y1UKgpoXB1DtI6WBdixfGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
91:d6:b7:c8:6b:8e:9d:e4:5a:51:a2:2d:6c:dd:0b:f4:32:1a:
6f:bc:e3:61:f2:67:04:f7:78:b7:83:b9:08:00:3f:d1:e4:09:
e8:28:67:61:02:9c:f3:c8:76:7e:b9:f4:89:80:7b:03:75:d9:
c7:3c:62:15:4a:bb:aa:98:eb:a8:9a:41:04:35:47:93:46:43:
08:24:1f:c3:d3:85:62:c9:6a:16:63:89:ac:8a:7b:76:4b:79:
2d:d5:26:e9:54:fe:26:79:15:7a:df:d1:aa:c5:97:4e:b8:c4:
8d:44:6e:f2:8b:2e:97:d0:fd:9f:36:8d:4b:8c:06:d4:6a:a1:
c5:79:24:f5:65:32:13:c3:5b:24:d7:0d:ce:b1:66:6f:e6:6c:
5b:5d:1e:35:2e:c3:15:95:fc:69:90:f8:06:ce:c5:e9:ad:3f:
68:47:09:8b:d1:78:c2:47:36:4a:89:2f:a9:e1:b4:8d:ab:04:
58:9d:c3:47:e6:fd:57:2e:09:fe:e5:b7:b5:6d:ce:ba:43:75:
53:b0:9a:14:0a:c5:53:b9:6c:c4:86:0a:95:b0:b1:14:04:64:
1d:d8:3b:6e:65:88:3b:25:8b:f1:38:26:50:b0:e4:e1:a2:58:
25:d4:25:ba:f4:91:1b:d5:df:dc:d0:0d:72:c6:b3:6e:73:6b:
11:c0:b6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:28 2024 by rpki-client on console-fra.rpki-client.org