Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/lCEn-bGWPZvmmamwiR1X1Id0Lks.roa
File: lCEn-bGWPZvmmamwiR1X1Id0Lks.roa (raw, json)
Hash identifier: JuQ6kxSpOwKJtHYUi3kei+Set1VbZt7pDwaCx7b8s5E=
Subject key identifier: 94:21:27:F9:B1:96:3D:9B:E6:99:A9:B0:89:1D:57:D4:87:74:2E:4B
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 054E9F9C
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/lCEn-bGWPZvmmamwiR1X1Id0Lks.roa
Signing time: Thu 24 Mar 2022 03:33:20 +0000
ROA not before: Thu 24 Mar 2022 03:33:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89038748 (0x54e9f9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Mar 24 03:33:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=942127f9b1963d9be699a9b0891d57d487742e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c3:62:cd:53:39:f3:ab:64:da:d7:9a:8f:b6:
54:41:b0:47:5b:b4:fb:51:b3:4d:26:69:1e:ea:3d:
5b:0a:cc:0c:db:94:2a:8c:8d:a8:36:49:75:1a:2c:
49:0f:70:82:77:66:e2:70:39:65:00:12:04:42:e2:
43:bf:ea:01:60:1b:59:f5:7a:5c:ef:6d:58:77:75:
7f:39:88:d1:37:95:ea:6e:44:46:de:e0:fd:bc:7b:
dc:bd:b9:b6:3d:dc:12:34:15:dc:e1:46:ec:65:1b:
df:3f:aa:0b:49:3a:3b:70:77:10:cd:6a:bb:7f:ff:
5b:50:f4:42:59:d4:05:92:70:32:e4:08:63:dc:09:
9f:d5:df:c1:3b:b0:4a:9d:29:8b:cd:a7:03:f1:27:
c2:a9:eb:16:f2:92:47:12:19:20:ab:7f:7a:25:4c:
8e:a4:af:41:9c:cf:ef:9b:c9:96:35:a6:8d:07:ea:
38:05:23:e4:9f:e1:51:13:97:f0:56:00:95:44:55:
3f:47:66:af:4f:6d:74:6e:7e:df:19:9d:a2:f7:41:
7f:32:68:65:72:7f:f3:3c:72:5f:d3:b1:0d:2a:6c:
11:3f:bf:52:83:39:05:81:9b:a3:e3:e2:23:1e:3d:
32:ed:63:31:22:01:b0:96:5a:43:6c:fa:38:20:83:
4c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:21:27:F9:B1:96:3D:9B:E6:99:A9:B0:89:1D:57:D4:87:74:2E:4B
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/lCEn-bGWPZvmmamwiR1X1Id0Lks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
1a:19:09:03:2b:d1:d9:9c:d4:72:fd:2a:0c:34:5d:0a:2d:c3:
f2:82:d9:aa:3c:b9:dd:1f:18:be:9d:fd:74:74:a1:76:1a:a7:
d3:bc:88:9d:bf:38:77:ae:bc:07:b4:83:7a:47:7e:b9:b1:58:
17:7c:9e:26:8d:93:3d:93:de:d5:3d:6a:2f:1e:51:e3:c7:80:
4e:96:52:b9:aa:86:95:24:9c:a6:56:12:af:2a:b3:05:7f:8c:
89:3d:23:05:a2:77:47:c7:eb:bc:16:ff:d6:71:02:2a:c3:9c:
90:01:37:a6:51:87:1f:c4:33:5c:42:f2:0f:9b:bd:a4:7b:f9:
b4:ff:cf:85:86:96:31:de:e2:2c:1d:09:d9:bc:25:e4:35:34:
4f:49:db:6c:34:71:b9:75:e0:7e:18:bb:7c:28:9c:1e:b2:4b:
34:22:04:67:9a:49:dc:52:34:1f:03:ef:7d:c0:51:40:89:63:
32:86:7c:f3:f2:a0:bc:86:08:10:da:10:1e:7a:fa:8c:c5:3f:
09:b0:bd:83:61:fd:00:e5:f8:ff:48:d3:8a:65:59:0d:39:d8:
b5:d2:cb:2d:19:6e:bf:25:ff:10:d1:5f:25:b0:96:c2:e2:52:
2e:7f:25:7b:24:94:75:c7:53:67:b1:f9:ac:7c:f0:7b:5e:df:
74:0e:aa:31
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEBU6fnDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDMy
NDAzMzMyMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTQyMTI3ZjliMTk2
M2Q5YmU2OTlhOWIwODkxZDU3ZDQ4Nzc0MmU0YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALzDYs1TOfOrZNrXmo+2VEGwR1u0+1GzTSZpHuo9WwrMDNuU
KoyNqDZJdRosSQ9wgndm4nA5ZQASBELiQ7/qAWAbWfV6XO9tWHd1fzmI0TeV6m5E
Rt7g/bx73L25tj3cEjQV3OFG7GUb3z+qC0k6O3B3EM1qu3//W1D0QlnUBZJwMuQI
Y9wJn9XfwTuwSp0pi82nA/EnwqnrFvKSRxIZIKt/eiVMjqSvQZzP75vJljWmjQfq
OAUj5J/hUROX8FYAlURVP0dmr09tdG5+3xmdovdBfzJoZXJ/8zxyX9OxDSpsET+/
UoM5BYGbo+PiIx49Mu1jMSIBsJZaQ2z6OCCDTL0CAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBSUISf5sZY9m+aZqbCJHVfUh3QuSzAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L2xDRW4tYkdXUFp2bW1hbXdpUjFYMUlkMExrcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAZfYBDAPBAIAAjAJAwcBIAEH/AAC
MA0GCSqGSIb3DQEBCwUAA4IBAQAaGQkDK9HZnNRy/SoMNF0KLcPygtmqPLndHxi+
nf10dKF2GqfTvIidvzh3rrwHtIN6R365sVgXfJ4mjZM9k97VPWovHlHjx4BOllK5
qoaVJJymVhKvKrMFf4yJPSMFondHx+u8Fv/WcQIqw5yQATemUYcfxDNcQvIPm72k
e/m0/8+FhpYx3uIsHQnZvCXkNTRPSdtsNHG5deB+GLt8KJwesks0IgRnmkncUjQf
A+99wFFAiWMyhnzz8qC8hggQ2hAeevqMxT8JsL2DYf0A5fj/SNOKZVkNOdi10sst
GW6/Jf8Q0V8lsJbC4lIufyV7JJR1x1NnsfmsfPB7Xt90Dqox
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:54 2024 by rpki-client on console-ams.rpki-client.org