Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/coAhUVtlqDHIwQWN4eMpSxSZDv0.roa
File: coAhUVtlqDHIwQWN4eMpSxSZDv0.roa (raw, json)
Hash identifier: y96IPzRcV/9ZjUxnaPHJT4U/+KJNGRCE622oZXx9x0I=
Subject key identifier: 72:80:21:51:5B:65:A8:31:C8:C1:05:8D:E1:E3:29:4B:14:99:0E:FD
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 0181D88CEDB4F801A1BD971A153E26449A7A
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/coAhUVtlqDHIwQWN4eMpSxSZDv0.roa
Signing time: Thu 07 Jul 2022 12:05:23 +0000
ROA not before: Thu 07 Jul 2022 12:05:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d8:8c:ed:b4:f8:01:a1:bd:97:1a:15:3e:26:44:9a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jul 7 12:05:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=728021515b65a831c8c1058de1e3294b14990efd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d6:c5:83:04:e9:34:2f:31:73:4e:0d:10:1d:
6d:67:f0:6b:9b:cf:03:12:06:1f:b8:3e:fa:c3:70:
e5:2a:6d:ee:0c:43:f3:2e:64:73:c4:2a:1b:95:ef:
88:bc:d4:66:9b:80:78:7b:bd:ee:3d:e0:d1:5d:7e:
11:a5:44:9b:21:ca:f9:ec:56:fb:c7:17:df:85:5d:
ca:c5:0d:1b:ab:fa:43:57:86:f0:14:7a:89:d5:20:
c6:66:1a:83:5d:d3:5f:fc:fb:97:9f:27:59:72:cf:
b9:91:48:72:cb:a6:e6:dc:42:5b:b5:c6:56:c4:c8:
3e:78:dc:7d:08:43:99:94:30:a8:f4:3d:60:56:ad:
d0:4e:82:e2:b2:cb:cb:43:14:a9:b3:5b:7f:f5:56:
fb:08:09:c3:f8:1d:92:3a:b6:b3:57:99:f0:83:db:
9c:07:81:eb:fc:76:21:f5:89:5f:ea:fc:4c:0b:98:
e0:43:fa:67:2a:26:27:5b:45:59:69:02:43:1b:a6:
1e:1f:1d:96:44:bb:aa:48:ee:0a:a7:b7:e9:38:eb:
07:21:b0:63:c3:a1:7c:8d:50:ec:73:8a:e3:f0:5e:
7a:6d:a3:67:bf:96:45:5d:2a:f2:d8:13:a0:a0:ae:
3b:a8:56:c5:e4:ff:6c:ed:71:50:48:5b:e7:5a:cb:
d1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:80:21:51:5B:65:A8:31:C8:C1:05:8D:E1:E3:29:4B:14:99:0E:FD
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/coAhUVtlqDHIwQWN4eMpSxSZDv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
00:60:5b:32:82:34:71:5b:53:62:1d:f4:f6:57:d1:13:a3:1b:
3f:89:39:d3:fd:32:00:ae:4c:24:cf:25:14:b0:23:9f:47:c1:
e0:61:8b:4f:8c:12:a4:0a:73:3e:53:75:83:8a:01:52:df:2b:
96:8c:79:0e:08:d0:50:02:7d:5a:0f:09:9a:c4:59:1b:24:5d:
c9:f8:d5:56:2b:45:ef:73:d9:07:ab:a5:be:6f:4e:9a:76:a0:
59:e4:0b:98:01:d5:ae:a4:97:34:2d:bf:bd:46:eb:a6:5b:a3:
de:26:28:99:18:15:c9:2e:d0:35:75:d9:06:74:97:23:f1:d5:
f5:15:44:af:d0:49:84:89:4a:cf:d0:83:36:07:c0:70:ff:4b:
56:43:a1:8b:e7:fd:ab:e2:bf:74:51:44:a5:d2:44:4c:ba:39:
af:c5:12:48:79:d7:d6:7b:4c:ad:e0:45:c1:17:f7:37:bd:e3:
3e:ad:48:7b:1e:e1:8f:9c:3e:34:9c:90:7f:b9:b4:5f:6f:ca:
4d:91:47:b1:6d:05:67:1a:3a:32:25:4d:90:3e:d5:93:cd:3d:
83:e3:9c:67:fc:e0:28:74:0d:b6:51:11:e6:da:18:3c:fa:1b:
72:76:ad:1b:bd:61:6f:97:c2:13:3e:a4:ac:e5:e5:5e:99:ae:
d0:52:09:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:28 2024 by rpki-client on console-fra.rpki-client.org