Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/g6ybyaeGXnQLppD5Il8Jve-QhRc.roa
File: g6ybyaeGXnQLppD5Il8Jve-QhRc.roa (raw, json)
Hash identifier: AVUDdWXpZpMJgDFpBzEbm8D5vFowdq1BMqHDxxrHP/M=
Subject key identifier: 83:AC:9B:C9:A7:86:5E:74:0B:A6:90:F9:22:5F:09:BD:EF:90:85:17
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 0422505F
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/g6ybyaeGXnQLppD5Il8Jve-QhRc.roa
Signing time: Sun 13 Feb 2022 02:52:29 +0000
ROA not before: Sun 13 Feb 2022 02:52:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69357663 (0x422505f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Feb 13 02:52:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=83ac9bc9a7865e740ba690f9225f09bdef908517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:36:53:3a:af:c8:e5:73:73:bf:4e:39:9c:3e:
60:d6:69:49:23:c9:83:53:97:b2:56:14:2c:22:af:
31:f6:51:41:a6:59:7d:6c:da:26:56:ea:c2:cd:45:
05:f8:19:77:e5:01:6a:7d:a4:14:65:8c:02:d2:b5:
63:68:c9:f4:90:69:1e:15:94:e8:9f:e4:84:82:0c:
98:e1:e6:a3:3c:b7:c9:bd:c1:cc:5e:ea:f0:5a:52:
20:26:d0:97:cb:ec:f9:f5:86:c6:76:9d:33:5d:74:
31:75:b5:da:fc:44:ca:1f:01:1d:ec:39:bd:93:1d:
94:7b:ea:a9:b7:c0:cb:11:f8:c2:7c:07:26:9b:fd:
4a:48:4b:e7:59:fc:a4:11:05:28:26:09:23:11:c1:
80:f3:54:80:91:2e:17:88:3c:3c:fb:72:b6:f9:d1:
3e:04:f7:71:1a:be:79:e2:ae:ea:50:3e:8e:11:09:
ba:64:2c:41:11:e9:d1:19:06:c9:c9:b0:1c:66:cd:
de:b1:7b:4a:cc:e3:0c:ae:4f:e2:ad:9b:e4:a6:28:
1f:97:36:ea:85:33:80:91:53:05:66:89:a8:ad:12:
e3:12:3d:59:85:cf:28:1d:f9:f0:6d:f6:68:c8:48:
0a:99:d0:3e:2b:eb:dc:58:e6:fa:44:d6:4c:45:26:
56:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:AC:9B:C9:A7:86:5E:74:0B:A6:90:F9:22:5F:09:BD:EF:90:85:17
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/g6ybyaeGXnQLppD5Il8Jve-QhRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
6e:d2:2d:60:0e:6f:50:36:ec:7b:18:58:60:de:bc:ad:e5:aa:
53:60:6c:d7:fd:fe:81:d8:d2:68:00:4a:de:98:64:4f:a1:bc:
ff:12:75:95:da:b5:9c:63:46:84:f7:f4:2b:72:52:3e:9f:66:
0c:46:2d:3e:91:3e:71:ce:3b:1b:30:e7:77:a5:ad:a2:89:26:
78:cc:de:1c:51:ea:4b:1a:d9:fd:99:07:03:d0:02:be:30:35:
45:47:62:c8:17:0f:4e:90:0d:c7:91:7c:50:e0:f2:74:18:fe:
65:32:fc:2c:49:e7:91:5b:09:1e:38:ca:47:cc:1e:40:da:4c:
07:4b:9d:65:dc:83:88:10:71:b3:16:0e:c3:05:1a:7c:e3:7a:
54:7b:0f:88:b0:73:04:83:a5:b4:30:d9:d6:62:1f:0d:97:db:
51:3d:af:71:77:8c:8f:c8:9b:ea:d8:56:9e:c8:bc:6b:61:9a:
26:14:2f:9a:2c:62:7b:50:22:da:26:c7:78:cf:dc:48:43:1b:
8c:4a:4f:47:cc:bb:51:b4:c2:32:33:61:57:d4:45:85:e4:86:
c7:ab:08:4c:20:5e:2e:cd:41:c3:72:9d:f7:6a:68:f8:11:a5:
25:ef:ff:e5:20:58:69:bd:71:58:cc:4f:78:d1:8a:01:10:a5:
4e:d8:5e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:57 2023 by rpki-client on console-fra.rpki-client.org