Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/l5GMdGOKSzn5J34qtghZi0Jrg2w.roa
File: l5GMdGOKSzn5J34qtghZi0Jrg2w.roa (raw, json)
Hash identifier: ApQcQPxfArAMdJOUE79dkX2kiY2dlEeecB4IPZ2EhI4=
Subject key identifier: 97:91:8C:74:63:8A:4B:39:F9:27:7E:2A:B6:08:59:8B:42:6B:83:6C
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 0181D11CB572961D6CF1C11B2687B2A86FED
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/l5GMdGOKSzn5J34qtghZi0Jrg2w.roa
Signing time: Wed 06 Jul 2022 01:25:28 +0000
ROA not before: Wed 06 Jul 2022 01:25:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d1:1c:b5:72:96:1d:6c:f1:c1:1b:26:87:b2:a8:6f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jul 6 01:25:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=97918c74638a4b39f9277e2ab608598b426b836c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b5:c2:c5:c8:4e:b8:1b:96:04:cc:46:7e:6c:
16:08:22:22:52:5e:bd:68:35:dd:92:15:65:ea:7d:
da:bc:41:6d:a0:bf:15:4b:eb:02:94:70:93:84:1d:
d1:cd:98:00:62:1d:f7:bf:8f:b9:57:58:45:17:9c:
c1:a9:be:56:c9:a0:d5:d7:0d:55:9c:94:af:98:5e:
92:17:61:7b:08:bd:3c:57:39:33:70:5b:2e:20:1a:
ab:3f:78:c8:e4:1b:80:5a:71:32:4a:15:f8:3a:0b:
02:6c:2f:1d:64:46:bb:1c:f0:3f:63:86:1c:df:d3:
5c:fd:6c:af:03:61:ae:38:13:d6:20:ae:a2:14:50:
6d:96:2c:4f:a3:e4:6b:03:60:bc:f5:20:ab:0d:1d:
5b:af:79:72:3c:33:9b:1d:f7:ce:ef:26:7b:f9:6d:
39:c5:4a:1d:7a:bf:7f:a5:b7:ce:cf:5d:96:2d:0e:
23:72:c1:ad:5f:b6:b3:47:95:a5:23:9c:00:29:1e:
dd:32:18:64:11:5b:bd:67:c4:c1:80:40:1d:24:a4:
ca:e6:d6:44:92:49:a7:f8:f6:c2:79:38:b7:6d:88:
09:d2:7e:61:8f:55:d4:e0:72:17:41:04:ec:09:f3:
ad:f6:e8:ea:9f:02:a6:90:4b:0b:12:9e:65:28:e6:
39:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:91:8C:74:63:8A:4B:39:F9:27:7E:2A:B6:08:59:8B:42:6B:83:6C
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/l5GMdGOKSzn5J34qtghZi0Jrg2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
10:06:69:dc:fd:98:f6:ab:4d:28:0c:40:12:00:d3:e0:9c:0b:
0f:3c:0e:11:0f:0a:58:88:05:04:6f:28:01:96:a8:9d:60:da:
6d:4e:41:c1:27:00:5a:2e:aa:6f:4b:a7:d4:24:17:d8:84:02:
c5:72:be:46:2e:a3:18:c7:05:a2:ad:9a:bb:de:e0:c7:1a:bb:
15:c9:1c:e7:01:e4:0b:f2:ac:bb:7b:b7:84:d6:ac:91:eb:8d:
6c:0b:c6:73:26:52:1b:cf:08:ec:be:dd:d2:95:65:45:9c:ae:
81:36:9c:3c:b1:7d:33:23:a4:c2:80:36:a5:bf:38:28:59:aa:
4c:98:3e:f5:a2:a1:7c:f9:b8:8f:e4:8d:d5:1a:a4:69:71:3c:
3e:9c:b0:8f:df:4c:f8:e8:a5:24:43:f9:34:10:52:a7:ea:66:
7a:d3:4f:41:3f:62:ca:09:80:9d:20:76:27:7f:97:03:ed:e9:
15:40:c5:3d:ce:93:15:9e:8d:dc:ca:b3:d3:52:aa:3f:d2:d7:
96:22:f7:95:55:89:fe:fb:16:dd:39:28:79:b3:6b:3d:f7:06:
74:62:51:e4:ec:28:de:08:ee:ed:65:a1:b5:96:c2:03:83:ae:
1b:e5:de:92:2a:49:19:f5:de:11:c7:6e:89:0f:2c:3b:5a:da:
d6:2e:c2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:47 2023 by rpki-client on console-ams.rpki-client.org