Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/dg8BCyHdC--D5_YvqqR3kRzExxs.roa
File: dg8BCyHdC--D5_YvqqR3kRzExxs.roa (raw, json)
Hash identifier: ze37AL50pO5JCcYO5DgHQHSqc6N94aFXQI3Boxk1XcU=
Subject key identifier: 76:0F:01:0B:21:DD:0B:EF:83:E7:F6:2F:AA:A4:77:91:1C:C4:C7:1B
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 067049E6
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/dg8BCyHdC--D5_YvqqR3kRzExxs.roa
Signing time: Tue 03 May 2022 04:54:52 +0000
ROA not before: Tue 03 May 2022 04:54:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108022246 (0x67049e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: May 3 04:54:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=760f010b21dd0bef83e7f62faaa477911cc4c71b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4e:59:de:e4:71:e4:39:2b:16:45:33:16:34:
80:2f:ac:ef:0a:a0:44:c2:1c:dc:62:cb:d8:e5:f3:
54:8d:87:58:0b:0b:cd:3c:a5:07:5e:57:c0:93:5a:
4b:13:38:72:fd:34:56:6b:4f:a8:84:8a:99:92:02:
8a:30:14:23:b8:ed:fa:e2:ad:4d:b5:b6:be:7e:be:
b6:4f:ce:5c:f0:78:9f:80:f6:be:71:60:fe:3a:2a:
49:47:91:2e:de:10:67:9c:92:d3:c3:82:41:49:b0:
f0:0d:7d:2d:f7:70:06:74:7d:df:a8:dc:e1:5c:1e:
d1:40:40:d0:63:11:5e:fe:ba:3e:e1:37:43:4a:a9:
52:a6:57:b1:bc:59:25:70:44:77:04:24:ea:ae:bb:
9a:5e:b9:02:44:dd:f3:9c:c3:9b:ee:eb:fe:a7:dd:
62:dd:19:a2:c9:b7:6b:66:21:6c:ef:f5:a4:52:b4:
ee:b8:e7:57:0a:61:d1:ae:84:83:fb:49:dd:78:af:
b3:1e:f2:f2:48:be:00:70:a1:ef:97:7d:87:45:4c:
f2:4b:ea:86:cf:fb:db:27:73:65:ea:34:58:91:03:
b7:76:b2:d7:ae:aa:a5:d2:30:1a:80:4c:27:72:8b:
9c:51:60:7b:3e:6e:8e:66:9a:96:32:3c:e1:49:a7:
a5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:0F:01:0B:21:DD:0B:EF:83:E7:F6:2F:AA:A4:77:91:1C:C4:C7:1B
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/dg8BCyHdC--D5_YvqqR3kRzExxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
6f:0c:2c:6e:53:4f:e2:0b:1d:a5:6b:3c:f2:1f:de:d0:f6:b1:
e4:cc:8c:02:2b:c4:cc:5f:21:9b:c3:0c:e7:f7:72:10:23:e0:
bc:f8:04:cd:f4:87:a9:78:08:6d:82:fb:c1:d9:99:be:57:35:
7b:0b:1e:e3:e5:a7:f1:f9:14:80:8d:9a:12:09:75:d8:93:94:
6e:4d:74:43:7e:9b:af:73:ea:d4:1c:76:0e:35:ce:50:c3:23:
db:37:f4:58:88:d5:6b:97:a2:b9:7b:69:41:6e:d1:de:2f:72:
d1:b4:65:51:50:12:4d:07:4c:d5:78:19:f7:3a:b5:82:ad:15:
2c:4a:ac:26:aa:a8:50:8b:73:30:9b:76:d1:56:b6:f8:3c:fc:
62:da:5e:46:b7:e4:37:d5:6d:51:00:bf:a1:33:45:26:dd:a4:
ea:e2:22:6a:fb:fe:08:b2:3b:84:cb:c6:c0:60:ff:64:cd:93:
84:b6:af:cb:a1:c0:ae:60:d2:9f:7c:60:58:f4:13:76:d2:c4:
c0:0e:21:b3:af:01:d0:80:69:c6:2b:fe:a1:c8:45:91:e1:31:
54:ed:2e:9e:ca:96:23:6f:3b:70:c7:c3:f0:58:d8:99:4f:87:
4e:6c:7c:4c:e1:d0:95:c2:87:0d:51:98:f3:8a:66:49:60:ed:
5b:08:fd:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:56 2023 by rpki-client on console-fra.rpki-client.org