Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/cl62ctNqntVjWPfGw4DA5z901T8.roa
File: cl62ctNqntVjWPfGw4DA5z901T8.roa (raw, json)
Hash identifier: e8YmxARX8b25QGa7yQc6PCQfwrTGGx5XmuYorKEf4ss=
Subject key identifier: 72:5E:B6:72:D3:6A:9E:D5:63:58:F7:C6:C3:80:C0:E7:3F:74:D5:3F
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 03D015E9
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/cl62ctNqntVjWPfGw4DA5z901T8.roa
Signing time: Wed 02 Feb 2022 14:31:07 +0000
ROA not before: Wed 02 Feb 2022 14:31:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63968745 (0x3d015e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Feb 2 14:31:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=725eb672d36a9ed56358f7c6c380c0e73f74d53f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:20:da:f4:18:96:99:5c:c3:86:50:bc:0b:ba:
c5:35:5a:76:17:af:55:7d:d1:3e:1e:10:3d:90:76:
08:c5:8d:6d:68:ac:b5:e6:6e:54:9a:8d:9b:9a:9b:
16:c0:62:e9:12:e4:35:a9:f1:a9:5c:ff:7b:da:ef:
92:75:3c:e1:7f:41:9a:4b:8c:39:57:51:2e:4b:4f:
fc:50:7f:37:b6:9b:ec:d9:a8:6b:13:2a:74:22:8c:
0e:22:74:92:65:bb:a8:80:c4:6a:6c:71:ce:fa:b3:
68:1d:37:c7:2e:da:eb:58:f3:09:c9:71:1e:06:c6:
30:91:41:9a:ce:b1:87:2d:f2:a9:a6:ef:5d:6a:29:
66:80:c3:c6:6f:57:8d:45:0f:c9:0f:1a:2a:a5:0e:
e5:bc:db:e1:03:49:7a:ca:6f:14:53:1a:10:d1:92:
e3:e8:7d:f8:6d:72:a0:ed:cf:04:3c:75:5e:7e:69:
08:e0:ee:43:80:b2:24:8b:cb:1c:8e:9e:5c:30:d3:
11:8e:26:fe:a4:f2:90:61:a5:b3:92:15:d6:cb:79:
67:62:30:77:b0:50:75:b6:f4:29:2c:0f:08:b4:72:
eb:98:f8:bc:9b:83:72:f3:06:f9:7d:2d:3b:06:f2:
08:1d:72:e3:3a:d1:9d:ac:72:23:35:71:b8:ed:d2:
0a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:5E:B6:72:D3:6A:9E:D5:63:58:F7:C6:C3:80:C0:E7:3F:74:D5:3F
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/cl62ctNqntVjWPfGw4DA5z901T8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
36:16:7d:db:a9:6d:3f:b4:8e:65:82:e9:0d:68:ef:62:a9:32:
f2:bd:6a:b3:87:8a:e2:0b:ea:ca:e4:a7:49:91:25:31:36:4f:
3f:6b:78:28:3e:93:63:ce:e3:84:1c:d6:21:64:1d:0c:82:33:
95:2d:a4:f5:16:5a:91:8b:48:d9:2e:f0:b4:be:f0:44:f9:2e:
c8:21:ba:75:56:80:f1:81:21:21:7d:01:a4:1e:4a:1d:10:21:
d2:38:00:69:d8:6d:ec:87:ef:ca:3a:e4:06:30:ab:de:40:09:
e7:d6:ad:00:eb:fb:7b:ca:fa:26:e0:d0:f1:ec:15:ff:a5:bb:
71:cd:99:19:58:29:cf:64:63:ac:17:a3:1c:71:bc:2e:fa:86:
cc:04:b9:52:f8:68:5e:46:89:2f:40:d4:b0:d2:9c:15:0d:a5:
08:ef:a7:72:50:1c:ea:25:e9:df:e3:b6:9d:d7:5d:df:72:26:
34:8a:78:52:29:0a:1a:a0:b4:34:ae:a4:16:11:bf:4b:01:ce:
17:48:04:83:0c:52:f4:c3:d3:37:86:ae:d1:ab:99:d6:88:15:
fe:34:e6:37:c2:b7:ad:a6:cb:51:4a:b4:01:25:3d:b7:c7:c4:
7e:08:68:8e:1c:9e:ac:9d:08:e9:f7:72:ba:68:ac:e6:b5:e1:
40:84:6a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:54 2024 by rpki-client on console-ams.rpki-client.org