Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/bpLmLjR-5AkSvw-mI9qSsOUhZEY.roa
File: bpLmLjR-5AkSvw-mI9qSsOUhZEY.roa (raw, json)
Hash identifier: C4wtAKNyK2xKNQuq53j0H3VTs8hEIAOC1yd3/XtuN/s=
Subject key identifier: 6E:92:E6:2E:34:7E:E4:09:12:BF:0F:A6:23:DA:92:B0:E5:21:64:46
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 0181E86F166598EB3E351B7437B11EA700EE
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/bpLmLjR-5AkSvw-mI9qSsOUhZEY.roa
Signing time: Sun 10 Jul 2022 14:06:43 +0000
ROA not before: Sun 10 Jul 2022 14:06:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:e8:6f:16:65:98:eb:3e:35:1b:74:37:b1:1e:a7:00:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jul 10 14:06:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6e92e62e347ee40912bf0fa623da92b0e5216446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:30:fe:69:1e:86:2a:5a:aa:53:0a:38:31:38:
b8:ca:52:dd:26:b2:d0:f2:e7:92:be:3d:3e:5b:99:
a8:5a:e9:ec:34:42:bd:97:16:af:76:e8:64:bf:4e:
9b:81:c2:84:0b:cb:2f:96:f8:59:c6:70:16:49:63:
df:f7:37:80:9c:3d:0e:12:2c:ac:8c:0f:c4:76:9c:
ba:7c:5b:8e:50:56:0a:35:82:9a:7a:3e:7a:6b:07:
89:48:4e:6e:05:7f:0f:23:12:c5:a1:81:4a:26:60:
ca:e2:c3:40:a8:02:62:6e:bf:eb:ae:4f:cd:bb:e9:
df:78:21:31:fd:f7:dc:fb:a8:03:0e:2f:7b:fa:10:
6c:bf:ae:9d:77:22:f6:d2:82:19:6d:65:fd:28:c4:
8d:80:d2:56:ff:0c:06:89:84:39:c2:d9:9e:21:c3:
97:3b:92:b3:45:ad:27:b9:8d:de:b6:ef:5b:83:8d:
64:45:65:f3:fc:b4:67:1a:ec:f4:78:75:2e:c6:0e:
df:8d:80:cb:1a:37:41:9f:e9:a3:79:7b:39:55:1f:
98:04:5a:7d:8e:27:34:48:0a:44:27:40:ce:a4:b6:
8f:f3:cb:23:32:40:a5:3c:22:0c:01:f6:71:22:18:
b1:00:36:1a:36:ef:de:33:71:75:bd:af:97:ce:46:
55:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:92:E6:2E:34:7E:E4:09:12:BF:0F:A6:23:DA:92:B0:E5:21:64:46
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/bpLmLjR-5AkSvw-mI9qSsOUhZEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
41:30:a4:07:46:19:98:95:87:65:ae:a0:b4:8b:5b:16:3e:ca:
4a:ee:eb:ab:2f:de:d1:07:87:3c:08:ef:c5:26:8b:fa:34:02:
31:e2:5e:04:cd:9e:6a:78:6c:5f:db:22:8d:e9:ac:90:5c:72:
30:84:14:8c:52:2b:dc:fb:7c:1d:9c:95:e1:03:40:5c:df:aa:
f8:64:78:aa:6a:c2:d8:ee:38:76:20:34:e0:ea:0f:b4:0c:42:
9f:95:6b:fe:77:aa:e4:18:28:68:0d:eb:9d:9f:c3:63:d5:9f:
df:c7:23:4f:29:0b:72:70:d6:95:3f:83:a3:c6:94:16:18:bb:
99:86:32:d8:cf:aa:1c:ce:59:43:0d:65:b3:e3:eb:55:3e:ad:
06:d5:f4:b9:fb:9c:58:0e:b2:0f:92:42:1d:59:c6:96:7b:57:
36:51:4d:19:3c:5e:88:5e:26:6c:0a:4c:2f:75:a8:4f:e6:ee:
ac:b0:d0:e6:9b:68:aa:04:de:5c:7e:d0:2d:cb:a8:79:cc:1a:
81:78:19:c7:b3:e1:f9:f8:3a:23:b2:ac:2d:8d:18:88:86:c9:
05:16:43:35:11:a6:1c:68:2d:07:e3:df:af:3d:3b:9e:9c:3c:
b0:b7:aa:fa:08:ec:21:5f:26:1a:13:43:4a:50:89:3a:36:df:
46:1a:42:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:54 2024 by rpki-client on console-ams.rpki-client.org