Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/d3Z9TMM96ZBrxl5JaXR243Nr2fI.roa
File: d3Z9TMM96ZBrxl5JaXR243Nr2fI.roa (raw, json)
Hash identifier: /MyOB8Q2WkNJ1DLqF7162M0Ihzu3NS4leiC0Fo4WGl0=
Subject key identifier: 77:76:7D:4C:C3:3D:E9:90:6B:C6:5E:49:69:74:76:E3:73:6B:D9:F2
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 05CE3D4C
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/d3Z9TMM96ZBrxl5JaXR243Nr2fI.roa
Signing time: Mon 11 Apr 2022 06:18:10 +0000
ROA not before: Mon 11 Apr 2022 06:18:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97402188 (0x5ce3d4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Apr 11 06:18:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=77767d4cc33de9906bc65e49697476e3736bd9f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e2:24:03:6e:dc:67:c5:52:4d:ca:51:26:e9:
37:6d:bf:a1:5e:d9:0d:db:d1:04:fc:45:35:eb:a6:
41:2a:70:f5:49:64:76:d5:7a:29:32:e2:e5:7e:14:
3e:e7:7a:1e:54:a7:d6:c0:52:07:28:e5:5c:68:cd:
14:ab:b7:52:59:66:a3:b3:6f:90:61:a0:83:59:43:
43:ba:89:36:00:16:ab:8f:ba:2e:5d:13:ab:6a:9c:
a5:59:2e:2d:8b:62:c2:93:0d:2c:c6:34:c3:e3:a7:
f9:86:a0:87:a3:38:d2:b8:af:9c:07:2a:a6:75:57:
18:68:1b:20:d9:cf:8a:ce:9f:a1:66:55:1c:7d:7f:
3b:45:ee:46:bc:91:5c:47:4c:70:b5:45:8b:ba:45:
d9:75:eb:5a:75:e9:bb:ab:4d:f7:40:24:dc:cd:5b:
f7:60:63:19:df:e3:f1:ef:90:bd:11:aa:8e:4b:bb:
6c:6b:eb:4d:13:54:20:09:88:35:89:60:b9:f4:23:
16:8e:56:60:5f:a8:77:4d:9c:fb:0c:c3:e9:0f:41:
ac:d9:32:b3:af:bc:47:99:e1:33:c2:eb:9c:b1:8f:
67:9e:02:20:ad:dc:ba:67:c7:2b:58:47:78:1f:5c:
53:af:12:36:c4:b3:dd:09:7a:64:43:8a:ba:bb:f2:
fb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:76:7D:4C:C3:3D:E9:90:6B:C6:5E:49:69:74:76:E3:73:6B:D9:F2
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/d3Z9TMM96ZBrxl5JaXR243Nr2fI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
09:87:ab:04:8e:69:ee:c1:05:22:5a:5d:8d:7b:a4:58:a8:04:
9f:19:6c:6b:d6:b9:8f:aa:27:ce:61:de:57:be:2e:f4:d3:4d:
dd:1d:7a:84:48:43:21:d9:21:c5:db:76:87:87:24:b8:3f:32:
c1:13:9a:fc:2c:f2:d4:ac:9d:a3:5e:8b:31:dc:64:b8:d9:e1:
6a:84:c6:ee:f1:b8:26:75:57:4d:2d:5f:ea:14:7c:90:fb:7b:
87:7c:7e:1e:72:4f:2b:d7:2c:a1:11:4b:0d:c8:78:8a:02:d6:
1e:73:2c:6a:cb:61:d8:45:8e:6c:ea:b1:03:da:35:e2:14:e2:
18:f4:f8:23:e4:77:14:c9:02:6e:46:00:89:60:35:18:42:82:
80:06:00:52:af:3c:6a:fa:c3:59:3c:3f:77:76:6a:58:8a:41:
7d:f6:0e:e4:fe:39:fa:40:20:22:4e:47:66:b2:41:85:52:c4:
9f:08:b1:97:73:58:f6:0a:09:cb:97:69:00:22:32:ee:a5:1e:
49:ad:8c:08:3c:88:d5:7e:7c:3b:8b:a0:1a:56:fd:f5:74:ce:
e8:3e:fa:ca:b9:f5:51:d6:fd:6b:24:ff:d4:06:51:94:d2:12:
82:3b:2a:6e:29:59:55:b5:4d:b6:aa:5b:59:50:ba:48:a2:1e:
25:00:47:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:54 2024 by rpki-client on console-ams.rpki-client.org