Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/kSYXDaI32zBIzB5iE8QvoOnnjdM.roa
File: kSYXDaI32zBIzB5iE8QvoOnnjdM.roa (raw, json)
Hash identifier: WfKG4s2x4idLyWdKaqOmEG2SEUnxxgQ5TTnkIKSNurU=
Subject key identifier: 91:26:17:0D:A2:37:DB:30:48:CC:1E:62:13:C4:2F:A0:E9:E7:8D:D3
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 050B5DC1
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/kSYXDaI32zBIzB5iE8QvoOnnjdM.roa
Signing time: Tue 15 Mar 2022 03:05:04 +0000
ROA not before: Tue 15 Mar 2022 03:05:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84630977 (0x50b5dc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Mar 15 03:05:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9126170da237db3048cc1e6213c42fa0e9e78dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:89:dd:4e:4e:e6:a9:0c:ee:e0:42:20:9d:a7:
c2:46:6f:4f:e3:fe:51:fe:3b:7a:1e:29:5a:ed:af:
04:17:d5:ba:b6:54:7a:52:6b:81:87:5b:f1:de:54:
0a:06:a8:43:8f:b9:5a:5f:99:06:4b:02:f8:33:eb:
05:11:d6:93:bd:83:f4:24:24:b6:41:67:71:df:7e:
16:55:18:e8:15:a6:a3:dc:7d:3d:54:e6:29:f7:bf:
92:8d:d8:e3:6e:d8:a5:aa:f2:1b:f4:52:9b:4a:8c:
a0:be:cc:b1:d1:14:58:93:28:d3:c8:96:f9:fc:f2:
49:09:da:fb:e6:93:09:7a:9f:c7:e5:1c:a5:f1:6a:
d3:92:b9:05:26:f3:3b:94:4d:d9:5d:4b:01:97:c7:
d4:fa:f3:2c:e0:c1:5e:0c:f2:17:d8:aa:23:bd:5a:
78:27:da:d3:ed:49:23:cd:c4:80:40:45:8d:52:86:
a1:2e:81:6f:ed:b7:b1:2d:b0:03:45:67:c7:d3:80:
48:16:ff:39:cd:84:43:3c:81:c3:c8:77:1a:a4:fd:
84:98:0d:ab:2b:81:bd:ef:67:0c:28:08:f1:ee:25:
54:3e:4d:37:6c:54:93:8f:e4:8f:5a:9d:61:9d:5a:
a0:d5:95:3e:b1:ae:0d:64:d4:f1:1e:76:4d:23:57:
a1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:26:17:0D:A2:37:DB:30:48:CC:1E:62:13:C4:2F:A0:E9:E7:8D:D3
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/kSYXDaI32zBIzB5iE8QvoOnnjdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
28:e7:5c:02:74:d3:27:cc:95:ff:c4:c8:1c:3a:77:db:7f:69:
b4:bb:da:02:7a:f8:80:30:21:ef:aa:52:64:b3:6c:7c:f9:0d:
fd:c9:04:1f:d5:f7:68:90:ee:e0:68:a0:1e:f3:74:4a:53:f3:
4b:74:e1:67:c2:88:d5:d2:f6:fe:a2:75:0f:38:10:ef:08:78:
f5:bc:ae:f5:15:55:26:c8:af:d6:62:0d:24:a6:40:fc:90:87:
6e:2d:ef:30:0c:d5:fa:7c:4f:2d:4a:6d:f2:5d:51:0a:16:74:
36:ff:e0:b5:ef:40:3c:4b:c4:a3:0c:9a:ab:10:f5:ac:d5:9b:
c8:23:e8:01:2f:f2:e3:28:94:93:55:be:71:d5:3b:08:44:04:
d9:7e:2e:93:7f:fa:c3:5c:62:ae:24:8c:24:99:f9:0c:6e:0f:
6b:fc:44:ef:55:22:d1:2f:c9:28:da:2a:5c:0a:1a:e2:6f:e4:
e5:ed:b8:f7:aa:87:15:95:f3:cd:e9:31:cd:e1:28:c9:b7:06:
9f:01:db:16:6a:0d:a2:2a:a3:30:ad:1f:79:e2:82:e7:23:74:
67:82:a5:97:d0:fd:61:db:57:81:93:08:5c:d0:16:ec:2e:c6:
6b:b0:59:db:9e:2e:30:c3:18:0f:d3:c4:7f:a3:6a:b2:05:e5:
05:07:da:47
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEBQtdwTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDMx
NTAzMDUwNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTEyNjE3MGRhMjM3
ZGIzMDQ4Y2MxZTYyMTNjNDJmYTBlOWU3OGRkMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAI6J3U5O5qkM7uBCIJ2nwkZvT+P+Uf47eh4pWu2vBBfVurZU
elJrgYdb8d5UCgaoQ4+5Wl+ZBksC+DPrBRHWk72D9CQktkFncd9+FlUY6BWmo9x9
PVTmKfe/ko3Y427YparyG/RSm0qMoL7MsdEUWJMo08iW+fzySQna++aTCXqfx+Uc
pfFq05K5BSbzO5RN2V1LAZfH1PrzLODBXgzyF9iqI71aeCfa0+1JI83EgEBFjVKG
oS6Bb+23sS2wA0Vnx9OASBb/Oc2EQzyBw8h3GqT9hJgNqyuBve9nDCgI8e4lVD5N
N2xUk4/kj1qdYZ1aoNWVPrGuDWTU8R52TSNXoTMCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBSRJhcNojfbMEjMHmITxC+g6eeN0zAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L2tTWVhEYUkzMnpCSXpCNWlFOFF2b09ubmpkTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAZfYBDAPBAIAAjAJAwcBIAEH/AAC
MA0GCSqGSIb3DQEBCwUAA4IBAQAo51wCdNMnzJX/xMgcOnfbf2m0u9oCeviAMCHv
qlJks2x8+Q39yQQf1fdokO7gaKAe83RKU/NLdOFnwojV0vb+onUPOBDvCHj1vK71
FVUmyK/WYg0kpkD8kIduLe8wDNX6fE8tSm3yXVEKFnQ2/+C170A8S8SjDJqrEPWs
1ZvII+gBL/LjKJSTVb5x1TsIRATZfi6Tf/rDXGKuJIwkmfkMbg9r/ETvVSLRL8ko
2ipcChrib+Tl7bj3qocVlfPN6THN4SjJtwafAdsWag2iKqMwrR954oLnI3RngqWX
0P1h21eBkwhc0BbsLsZrsFnbni4wwxgP08R/o2qyBeUFB9pH
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:28 2024 by rpki-client on console-fra.rpki-client.org