Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/hh2jTLu2pg8LndDKS5QcL6UHx5E.roa
File: hh2jTLu2pg8LndDKS5QcL6UHx5E.roa (raw, json)
Hash identifier: NrcGq5LATCnfwxlfXsQ/tIWU1/tt/ho5w2FscH+aWWk=
Subject key identifier: 86:1D:A3:4C:BB:B6:A6:0F:0B:9D:D0:CA:4B:94:1C:2F:A5:07:C7:91
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 058CDD4A
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/hh2jTLu2pg8LndDKS5QcL6UHx5E.roa
Signing time: Sat 02 Apr 2022 13:21:45 +0000
ROA not before: Sat 02 Apr 2022 13:21:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93117770 (0x58cdd4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Apr 2 13:21:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=861da34cbbb6a60f0b9dd0ca4b941c2fa507c791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:53:35:a5:09:6c:fa:5d:dc:10:df:a1:45:50:
a4:fd:08:7a:43:43:f6:29:f1:3c:86:3b:e0:64:3f:
19:d2:a3:ab:e5:43:5d:74:89:26:fb:2f:2c:6c:e2:
49:6b:a9:e2:0f:dc:ba:5a:b7:32:5d:45:ad:ab:1e:
d5:9c:82:37:62:5b:4c:14:ec:e4:3d:a0:7f:94:79:
b2:2a:c1:83:23:4a:b6:60:de:93:a1:ed:46:36:6b:
8e:55:16:11:e0:26:b0:e8:cc:d9:94:37:66:01:43:
51:a1:2e:e0:cc:f1:3c:e1:e9:e9:57:e7:a2:b0:69:
78:b7:6a:60:1e:70:4e:0d:fa:58:e2:5e:ca:fc:95:
eb:99:52:d7:8e:c1:0b:67:c2:75:b4:0e:95:cc:d6:
1b:53:46:cf:4a:93:ed:e1:7d:d7:a8:94:48:54:44:
55:78:42:0d:13:0f:06:76:fb:7f:f4:68:9b:80:ee:
ed:b5:87:24:b2:b7:9f:94:9b:30:4c:98:05:30:aa:
30:d0:16:0d:c2:6d:90:19:e3:03:2f:c7:08:16:82:
72:24:f9:2a:a3:bb:26:b4:87:fc:3a:2b:00:82:79:
e1:c5:a6:b2:02:d7:c4:37:9e:53:79:f6:14:1d:71:
0d:18:7a:b0:da:00:d0:ef:c0:a9:79:3e:94:5b:1d:
03:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:1D:A3:4C:BB:B6:A6:0F:0B:9D:D0:CA:4B:94:1C:2F:A5:07:C7:91
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/hh2jTLu2pg8LndDKS5QcL6UHx5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
83:98:de:46:58:e2:93:b5:c2:e9:40:41:79:57:3a:2d:6b:0a:
e8:d6:96:01:f4:84:08:d3:cf:9e:1c:62:57:1d:c8:36:5b:1f:
22:1a:c9:e3:80:36:6b:d5:58:73:ff:04:b3:82:80:2e:6d:d7:
f6:22:6e:5b:e5:da:44:fc:e1:7b:d9:d4:1f:3d:b1:bb:44:a7:
e9:59:7e:b7:52:e7:8e:fe:25:f9:84:af:d8:37:2d:8c:ca:ae:
6b:ac:40:3f:09:50:de:a6:85:8f:e3:35:15:cd:cf:e4:1f:87:
9a:92:f5:6f:08:18:ba:bb:06:46:3e:bf:3f:5f:6d:51:9f:a9:
d4:ad:b8:6a:1d:e9:ba:4a:3a:33:f7:33:96:1c:bc:5d:54:ba:
c0:41:8d:85:e2:37:b1:de:c5:f8:b6:ea:db:47:52:a3:6a:d2:
ff:56:32:9b:41:34:e5:de:4c:9c:f3:e3:e1:d1:2e:8f:b7:fa:
e7:5e:33:54:dd:77:ff:1b:aa:7d:5c:d7:c0:e2:f0:0e:4c:8a:
ec:f4:d4:02:7f:12:40:d0:d2:3d:21:cf:da:1c:14:aa:0e:83:
d1:0f:74:5b:2d:20:17:9c:5e:76:34:85:b8:94:76:40:ba:75:
b5:f1:b8:6e:6f:3b:9e:34:27:5d:30:b5:d9:e1:80:0b:a1:50:
c3:ad:60:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:28 2024 by rpki-client on console-fra.rpki-client.org