Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Yxx5_aQbhzTNF6ObHfioDieWcOg.roa
File: Yxx5_aQbhzTNF6ObHfioDieWcOg.roa (raw, json)
Hash identifier: yIOKwPZ6BpwiIl0KmE88CctRMcrRHgiQTIrSDoXzcZg=
Subject key identifier: 63:1C:79:FD:A4:1B:87:34:CD:17:A3:9B:1D:F8:A8:0E:27:96:70:E8
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 0181E39403EEED5BDC79921BB3343DD9ACF6
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Yxx5_aQbhzTNF6ObHfioDieWcOg.roa
Signing time: Sat 09 Jul 2022 15:28:57 +0000
ROA not before: Sat 09 Jul 2022 15:28:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:e3:94:03:ee:ed:5b:dc:79:92:1b:b3:34:3d:d9:ac:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jul 9 15:28:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=631c79fda41b8734cd17a39b1df8a80e279670e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:39:f4:d5:33:a9:59:13:a4:62:97:68:d1:2e:
84:2e:c3:ec:87:98:b7:34:01:85:65:1e:8b:da:98:
ee:25:cb:96:5d:fe:47:48:84:c9:a6:b7:6f:f2:d3:
5a:cc:c6:40:7d:f1:be:3a:59:22:2b:19:bf:01:3f:
92:95:95:72:f8:38:b7:75:b2:c8:a4:be:a1:d1:e3:
ca:b7:d5:c3:4c:4e:a1:b1:0f:d7:16:9d:21:52:aa:
9b:05:3f:49:ec:27:c3:5e:ea:8a:ca:c8:12:28:d2:
8b:d7:13:30:cc:a8:82:63:a2:02:bc:47:97:a3:c4:
34:0a:77:a1:b7:4c:74:34:56:27:ce:11:3e:62:48:
20:8b:eb:fd:41:e3:cb:2c:1d:d8:81:88:e3:71:8b:
c9:ad:92:73:e8:77:d7:25:6b:fa:45:90:2e:99:67:
1c:bc:6e:be:a2:37:a0:20:01:b1:fc:80:99:f9:e7:
3b:40:dc:0a:33:61:ca:78:c4:74:10:9f:d0:80:fc:
af:41:c9:be:57:26:8e:df:d2:3d:e6:d8:c6:a4:70:
de:f3:ca:3e:ef:6f:14:ad:a7:3f:c3:e2:32:aa:73:
76:b2:61:de:20:be:15:a8:48:03:a9:78:58:b4:bb:
bb:59:75:00:b2:24:f2:80:e9:75:af:c5:56:5e:3b:
9b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:1C:79:FD:A4:1B:87:34:CD:17:A3:9B:1D:F8:A8:0E:27:96:70:E8
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Yxx5_aQbhzTNF6ObHfioDieWcOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
5e:a2:e9:e3:12:ed:78:d8:22:3c:86:ab:52:a4:c8:ff:a9:50:
9a:e7:54:64:15:b7:2d:c3:6b:54:58:54:e8:40:d2:46:ae:9b:
d8:45:5f:bc:48:af:0f:d7:bf:02:54:9c:6e:39:8c:38:7d:d7:
88:f8:df:82:9c:d4:d5:a9:db:11:8b:52:4d:3b:21:7a:28:dd:
14:9c:00:c4:79:fd:8b:c4:46:7c:ce:84:08:e4:a3:41:1e:59:
c1:9f:61:26:f7:cf:78:96:46:4b:45:c0:6f:82:4d:a5:42:e4:
f6:46:02:89:7e:a1:b8:08:8b:f4:7d:5b:7b:cd:75:25:62:5f:
5d:52:84:4a:68:46:92:de:d9:e5:62:cf:8a:6d:1a:fd:a3:b6:
98:b9:46:40:e8:2d:d1:af:3c:2f:c8:f7:44:5f:80:a1:14:8e:
d6:01:d5:0b:93:c1:c8:46:7f:c2:56:a9:9e:97:fa:93:05:d6:
34:30:43:04:52:dd:ec:7c:38:0c:8b:2e:b6:79:b8:12:96:b8:
fd:df:6d:4f:d5:a3:37:ed:70:41:ae:ca:07:c3:7e:78:cd:2b:
d2:2c:7d:87:d1:32:67:9f:67:3f:9f:30:ee:04:5d:08:3b:fb:
2f:bb:fe:ad:27:1e:f0:a5:09:41:5a:b6:a5:0a:ef:d5:45:2a:
62:e0:83:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:28 2024 by rpki-client on console-fra.rpki-client.org