Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/cZDKu-NQWXP4u6z4eOTVYFFKn4M.roa
File: cZDKu-NQWXP4u6z4eOTVYFFKn4M.roa (raw, json)
Hash identifier: WXSNWztsk3YC9t+/78utm2Ki/FQENYAibV3e7ZpYAr4=
Subject key identifier: 71:90:CA:BB:E3:50:59:73:F8:BB:AC:F8:78:E4:D5:60:51:4A:9F:83
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 0997FDF2
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/cZDKu-NQWXP4u6z4eOTVYFFKn4M.roa
Signing time: Tue 05 Jul 2022 01:11:25 +0000
ROA not before: Tue 05 Jul 2022 01:11:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160955890 (0x997fdf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jul 5 01:11:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7190cabbe3505973f8bbacf878e4d560514a9f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:40:00:49:d2:5f:23:1b:fb:17:ed:38:d8:a7:
e6:84:e5:0e:bf:1d:15:9c:08:bc:63:5b:4d:e8:14:
3e:1c:56:1b:c3:ff:6d:75:c8:32:aa:c6:2e:df:5b:
3a:dd:e6:d2:9f:a1:8b:03:62:80:77:98:b8:85:05:
f6:5d:4c:a6:4d:fa:aa:48:6b:55:38:e7:3f:28:96:
e2:7b:3f:83:bf:b7:42:53:ec:61:77:3c:04:6f:25:
44:7a:9f:67:74:fd:cf:a0:a9:42:bf:13:03:2c:5c:
33:d1:b8:1a:e4:a4:77:ba:7b:9e:8d:c9:e4:49:e0:
21:0e:f5:f4:98:3f:08:ff:79:4c:ed:f7:db:71:1a:
94:ad:51:7b:0a:3a:74:f3:3b:fe:76:d6:c2:ba:d1:
04:7e:a6:b2:d4:5f:ae:25:6c:57:65:2f:89:69:35:
36:c9:d6:90:82:17:75:0e:38:2c:3c:4c:f3:11:05:
9a:80:86:c6:37:92:12:15:ca:8e:32:d8:a9:c4:df:
99:c8:5c:b3:5b:45:fe:8a:1a:38:dd:ec:fc:06:9f:
ce:b4:5b:30:72:9f:ad:ed:ad:f9:12:97:92:7d:1a:
fb:30:5e:3c:2b:dc:04:d1:b4:c1:28:09:9e:04:73:
69:0e:cf:95:26:80:20:98:c6:80:2f:ce:44:23:83:
53:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:90:CA:BB:E3:50:59:73:F8:BB:AC:F8:78:E4:D5:60:51:4A:9F:83
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/cZDKu-NQWXP4u6z4eOTVYFFKn4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
11:8c:ba:fb:ae:2c:66:e1:09:7f:b5:84:fc:18:45:26:e2:5a:
b7:7a:a1:4b:7a:db:0d:e2:d3:24:6f:32:86:5e:d9:53:53:86:
47:b1:00:d2:27:9a:1c:ec:8e:db:f5:24:3b:03:76:7b:11:21:
1c:47:ad:a0:7d:e2:41:5b:f9:f8:86:11:2e:1d:24:69:92:fb:
f5:ac:57:d3:9f:5c:0d:2d:2c:f9:a1:62:87:88:4f:f7:56:b3:
7d:fa:21:10:b7:bc:18:67:de:00:39:85:58:69:b5:95:26:0f:
87:ad:78:20:6b:d7:e3:37:af:b8:90:31:7f:ab:5b:14:de:88:
db:af:6b:0f:70:8b:69:5b:86:e8:34:b6:2a:cc:07:fd:6c:16:
d3:4f:9b:1f:51:aa:67:0a:fc:ee:54:76:81:b0:58:ed:87:7f:
24:1c:29:1b:50:b7:ab:ca:12:91:89:0d:1a:c6:23:61:1d:2b:
80:2e:a1:23:a6:61:75:2b:7a:43:0b:27:57:54:1f:a3:85:2d:
68:1a:5f:2e:5f:31:d1:4f:52:9e:23:e3:f6:6d:99:7b:f0:08:
3e:2d:40:7e:62:93:c8:7d:23:dd:87:bb:61:3d:35:5f:04:e1:
eb:d0:39:0f:a2:65:f1:82:6a:11:e8:1f:9f:1c:3f:79:8d:92:
24:a7:7c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:28 2024 by rpki-client on console-fra.rpki-client.org