Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/b0Sv6Q9HB8KfYE5fbuZGf2h3K6M.roa
File: b0Sv6Q9HB8KfYE5fbuZGf2h3K6M.roa (raw, json)
Hash identifier: iR5CqknI9akQwdKv9Gddjv2CySLZFRP3gufhLnm30G4=
Subject key identifier: 6F:44:AF:E9:0F:47:07:C2:9F:60:4E:5F:6E:E6:46:7F:68:77:2B:A3
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 04A511A3
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/b0Sv6Q9HB8KfYE5fbuZGf2h3K6M.roa
Signing time: Wed 02 Mar 2022 02:31:44 +0000
ROA not before: Wed 02 Mar 2022 02:31:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77926819 (0x4a511a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Mar 2 02:31:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6f44afe90f4707c29f604e5f6ee6467f68772ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0e:30:3c:64:e0:9a:78:26:bd:3d:8e:e6:ae:
5a:e8:98:ec:f7:b1:e7:a3:64:6a:81:1e:d0:40:f8:
e8:26:74:e0:76:cf:54:bc:d9:64:c9:3d:3e:e7:19:
11:a1:42:8a:70:12:e5:ae:28:79:85:f5:0d:c7:71:
f8:66:5b:b3:53:31:95:ce:0b:a0:02:9e:98:e1:03:
57:79:55:22:1e:22:ae:0a:72:79:1d:ee:e6:64:17:
0f:81:5d:2a:b4:22:91:93:fe:c5:a2:51:f4:42:94:
66:68:96:59:86:2e:78:fd:17:87:97:f0:3c:dd:b0:
3f:e0:6a:fb:ae:5c:67:20:b3:eb:dd:40:ea:92:1a:
0a:f0:66:c0:e7:54:87:94:7d:e0:63:19:7a:b1:e9:
82:46:20:5a:89:f3:e9:b4:cd:21:18:76:50:dc:ee:
b9:77:60:67:a9:a3:67:d4:51:96:08:80:4b:e2:ea:
d8:58:26:11:03:03:c3:b1:cc:dc:39:d2:29:5f:17:
81:65:37:b1:8d:b7:89:66:bd:6a:7a:e5:26:1d:31:
34:e3:a3:11:19:36:65:b9:c4:ab:f0:14:e7:94:7e:
9b:c6:f1:60:f7:0c:d8:8f:c8:ac:ca:b8:a5:5e:d4:
bc:b0:b1:b3:bb:d6:cf:fb:b2:1b:c0:ef:ab:f4:85:
57:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:44:AF:E9:0F:47:07:C2:9F:60:4E:5F:6E:E6:46:7F:68:77:2B:A3
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/b0Sv6Q9HB8KfYE5fbuZGf2h3K6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
a9:a3:72:04:ef:12:7c:1b:34:b5:6c:2f:4d:8b:86:2c:0e:a5:
48:31:4e:ac:11:47:2e:44:3b:25:ae:ff:1f:2a:b4:1b:7a:00:
f0:78:a2:bc:d3:19:49:f6:57:20:5d:7a:68:60:ac:0e:2e:38:
43:19:ad:65:44:14:e6:30:57:9f:d7:72:bc:4a:96:93:e8:bf:
b7:5d:6a:b2:4b:a3:96:dc:1d:58:eb:f6:d0:96:f7:8e:e6:f5:
dc:55:f7:a3:f5:45:75:d3:3c:35:5b:ca:d6:40:c2:f0:14:ce:
fe:ce:be:31:b4:62:d0:ea:76:c6:7c:68:c5:44:93:e3:0b:bd:
46:d9:80:88:84:9f:bd:c9:df:ef:da:09:ab:1d:05:2a:18:22:
cd:28:2e:96:9d:ba:32:52:7b:f8:e2:c9:73:03:98:d5:1d:e3:
8d:21:46:e5:5a:2c:40:ec:9d:d7:a1:f5:fe:73:5c:cd:e3:86:
0a:40:4c:d0:a1:41:52:8b:fa:f9:b8:b5:b1:84:56:7b:cf:25:
a8:62:f4:a2:d5:63:06:b2:20:d3:f6:81:35:09:fb:f3:03:3a:
d4:d2:38:93:ae:cc:69:a9:0c:fc:e2:8e:de:38:85:8f:ec:7f:
d4:6d:39:bd:a4:77:d2:5e:cc:b4:71:91:39:c4:d6:ec:5f:af:
bc:34:e0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:54 2024 by rpki-client on console-ams.rpki-client.org