Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/bYldG69LrDNS9j2lBEkSmn2MK5M.roa
File: bYldG69LrDNS9j2lBEkSmn2MK5M.roa (raw, json)
Hash identifier: bSvHKFxvmBW/+F3flB4TSBkuc3R89iVIXZi+nPMyNSA=
Subject key identifier: 6D:89:5D:1B:AF:4B:AC:33:52:F6:3D:A5:04:49:12:9A:7D:8C:2B:93
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 0685D2F6
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/bYldG69LrDNS9j2lBEkSmn2MK5M.roa
Signing time: Fri 06 May 2022 13:17:40 +0000
ROA not before: Fri 06 May 2022 13:17:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109433590 (0x685d2f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: May 6 13:17:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6d895d1baf4bac3352f63da50449129a7d8c2b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7f:3a:eb:81:88:69:d0:68:e9:53:8c:ba:f2:
24:23:a0:ea:28:61:4e:02:cf:ef:ad:75:6c:18:fe:
1f:dc:04:5e:5d:23:9e:a4:df:62:81:a6:78:10:85:
83:21:f6:37:e7:db:d8:83:a0:43:5b:1d:b9:a1:07:
8d:56:48:f7:c6:0e:60:a1:d4:53:ba:f0:1d:0b:11:
1e:27:89:8e:9b:d0:62:be:8c:e1:7b:d7:94:a6:9c:
27:14:23:1e:97:a4:55:3d:97:c0:b1:e6:0a:45:ba:
47:ad:c2:6e:08:08:5e:e1:7f:44:f4:6a:36:a4:9b:
27:e8:0e:0b:81:ac:cd:d2:63:3a:cf:ce:3e:e9:66:
eb:45:e1:b8:60:7d:9c:64:9f:19:ba:d0:b7:de:e9:
4d:87:2e:93:e8:e0:1b:96:03:fb:59:d8:48:a1:7b:
53:5d:0d:bd:c7:c5:ef:f5:84:3a:63:28:4a:52:4b:
16:36:92:a7:46:59:c1:03:1b:d9:52:6d:d1:c4:61:
5f:53:14:eb:7b:08:bc:2c:fb:bb:56:6d:05:89:a4:
f7:db:19:c7:45:7e:d3:af:84:ef:de:9e:c2:7a:fd:
98:cf:cf:d2:68:d4:7e:18:dc:33:eb:6c:1b:ca:17:
aa:8b:ed:10:79:03:3c:12:a4:03:8b:6c:d0:db:72:
48:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:89:5D:1B:AF:4B:AC:33:52:F6:3D:A5:04:49:12:9A:7D:8C:2B:93
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/bYldG69LrDNS9j2lBEkSmn2MK5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
69:27:17:1f:49:b2:17:0d:d0:33:43:c1:6d:38:74:0c:7b:f0:
32:c9:a1:65:55:c7:2c:d7:cf:c5:c7:5b:b2:ad:86:36:38:cb:
b1:14:c7:8d:dd:9c:dc:f5:51:1e:65:50:8e:6b:20:83:28:e0:
66:b2:58:d2:0e:42:69:56:d3:ef:26:1a:3d:9f:ce:df:aa:36:
34:b2:d8:75:29:19:6e:61:62:ae:cc:94:56:d6:a1:e3:a1:b4:
30:a4:8b:5e:04:67:07:4e:21:d0:e8:51:41:a6:cc:88:ca:32:
a7:29:b0:ea:24:53:73:b1:30:fb:2c:f2:2f:a4:db:a3:55:51:
7f:e8:d3:93:63:47:e3:41:7c:93:95:88:4b:ef:eb:ef:63:74:
a6:f0:97:c6:40:fd:fc:a9:bd:86:49:9f:87:05:3c:40:2b:8c:
14:8f:3d:ec:12:92:0d:4e:49:b6:bb:71:29:6e:f7:4b:09:8e:
f7:d3:e7:4f:5f:9c:76:a6:9c:96:09:c2:f9:70:d1:9d:ce:b2:
06:24:fd:24:49:8b:24:68:06:37:c3:b7:08:e2:0f:49:7d:0e:
ee:02:8f:04:ea:3d:ba:39:e8:be:c6:4a:5b:d4:3e:52:8c:29:
e1:cd:fa:99:12:e9:d3:6f:ff:4a:e8:59:d6:5f:2b:18:89:a3:
2b:77:ea:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:28 2024 by rpki-client on console-fra.rpki-client.org