Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Yh_FXzUjmKFZ0k7xBp03VJeVuTs.roa
File: Yh_FXzUjmKFZ0k7xBp03VJeVuTs.roa (raw, json)
Hash identifier: HLJL2pKZdt8lZdihtHAvq4MpU6T7zk5mpMI1AKLAlKk=
Subject key identifier: 62:1F:C5:5F:35:23:98:A1:59:D2:4E:F1:06:9D:37:54:97:95:B9:3B
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 0629D8BD
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Yh_FXzUjmKFZ0k7xBp03VJeVuTs.roa
Signing time: Sun 24 Apr 2022 10:09:25 +0000
ROA not before: Sun 24 Apr 2022 10:09:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103405757 (0x629d8bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Apr 24 10:09:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=621fc55f352398a159d24ef1069d37549795b93b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6e:77:29:ec:d5:8c:a6:fa:1b:97:59:b9:da:
d1:2e:47:83:8c:4f:3b:14:9c:14:fa:fc:ad:f1:9e:
dc:df:f1:32:b6:60:2d:a9:04:c4:57:62:d1:bd:2a:
3e:57:10:18:97:f7:d3:93:07:8f:92:06:1c:af:be:
68:13:35:2b:bb:ba:ce:56:83:59:84:6e:cb:99:ce:
56:40:d1:37:04:62:09:18:78:61:60:61:6b:56:aa:
38:23:c4:99:3d:19:9e:35:fb:ae:46:96:18:90:67:
24:c1:88:80:be:14:2d:d6:9d:63:6d:8b:fb:e3:73:
2b:0e:42:f5:9a:97:d2:51:c9:01:fd:3d:37:17:86:
44:bf:bf:31:94:0b:23:d1:e3:42:3f:87:94:b6:d9:
ae:9e:ad:85:46:c2:73:45:b7:06:6f:fa:71:ae:c0:
af:0a:14:07:72:45:2e:fd:ad:a6:ae:7d:41:e2:14:
10:dc:4f:32:4d:73:d9:7e:c7:5c:05:8c:d3:5c:ab:
e5:96:60:eb:6c:07:8e:61:82:33:7f:3e:47:d0:55:
af:ad:8e:85:5d:a1:94:9e:57:52:8e:3a:62:71:ad:
c1:1d:34:c9:5f:02:3c:4e:76:29:27:90:ab:1e:f4:
d8:1c:1c:60:e5:96:cc:72:48:8f:74:ce:56:b8:87:
f6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:1F:C5:5F:35:23:98:A1:59:D2:4E:F1:06:9D:37:54:97:95:B9:3B
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Yh_FXzUjmKFZ0k7xBp03VJeVuTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
7c:b7:63:1a:fc:26:99:c2:92:5a:78:c7:66:77:8c:0f:ef:ce:
44:9f:a6:ca:0e:ce:1e:6b:3a:4f:6a:a0:ea:4c:5f:3e:30:f8:
7e:cd:3e:71:2a:45:ec:71:07:18:4b:44:08:46:0b:12:d5:b1:
68:01:07:3e:04:1f:ef:e2:ce:cb:fc:ff:b0:cc:35:ae:66:ba:
9d:7f:a1:f0:e0:fe:e4:fc:78:94:6f:8a:1a:00:ee:cb:41:7d:
95:1e:69:0c:30:10:a8:53:d4:90:b7:bc:5e:4e:3b:c4:de:00:
dc:3e:b7:09:f1:02:a0:15:3b:b9:eb:e1:29:40:4c:04:99:b8:
8f:21:6b:be:0d:33:d4:8d:fa:30:e9:29:84:9a:b7:df:ea:d2:
e9:b6:ce:9d:9b:fc:d6:56:74:54:4b:5a:65:f2:7b:75:16:aa:
38:7d:f4:c6:98:10:88:38:97:e0:40:a6:17:94:4d:ce:1d:fe:
42:69:1d:be:36:73:ed:98:be:09:a1:0c:53:2e:e5:00:86:db:
16:77:b5:9a:4a:02:f3:55:d2:8e:0a:c9:93:6c:2d:ee:fb:fe:
cb:5c:0d:f4:d9:d4:f4:46:f8:e0:8d:93:c2:5a:96:5f:87:d1:
6e:c8:0a:59:20:ee:bf:9b:4c:82:c1:fa:fd:66:10:99:cb:dd:
90:31:5c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:28 2024 by rpki-client on console-fra.rpki-client.org