Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/mzGGivZatRgNx4YXrvXs1IAkx9E.roa
File: mzGGivZatRgNx4YXrvXs1IAkx9E.roa (raw, json)
Hash identifier: BABBNj40GvrqAuM7R0mkefbMnE/wj5V2epqzUsALQug=
Subject key identifier: 9B:31:86:8A:F6:5A:B5:18:0D:C7:86:17:AE:F5:EC:D4:80:24:C7:D1
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 0753D5D6
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/mzGGivZatRgNx4YXrvXs1IAkx9E.roa
Signing time: Sun 22 May 2022 04:42:29 +0000
ROA not before: Sun 22 May 2022 04:42:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122934742 (0x753d5d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: May 22 04:42:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b31868af65ab5180dc78617aef5ecd48024c7d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cc:2d:9c:e2:23:30:d5:fa:37:28:25:bc:28:
35:9c:83:b7:e9:d5:e9:cb:bb:d9:0b:b5:a8:bc:0a:
52:1f:ca:bb:86:d3:b8:ab:d7:8f:c9:00:7f:51:43:
73:b6:b4:88:b5:3d:a8:f8:be:fb:64:88:f0:3f:a1:
eb:41:9a:7f:79:d0:60:99:fc:9b:58:a8:57:12:64:
2d:bf:92:7b:e9:a2:cc:57:21:ad:34:62:65:58:0e:
48:f7:21:0e:c8:a9:e9:ed:a3:c5:26:37:86:bf:28:
2f:3d:e9:8c:ea:c4:dc:7b:8f:8e:7e:c2:03:19:c5:
4a:37:02:e7:80:28:08:eb:9f:74:d1:b8:a8:fa:76:
0e:e7:70:ee:e3:7d:11:81:bd:ff:99:f9:2b:89:3e:
48:5e:0d:f9:b1:89:a8:df:24:5c:83:63:8b:f9:9d:
b7:90:55:11:f7:bc:d7:e3:82:d9:b3:2b:69:ee:f3:
bf:f9:ee:cc:16:10:4f:db:ee:9c:b9:55:34:5c:bd:
e0:25:09:19:47:46:a7:f2:a1:0f:9c:31:50:90:08:
26:25:23:20:88:34:d1:7e:ac:3c:e8:34:52:fe:94:
7a:9f:c5:31:91:a3:ad:50:82:e6:66:c2:0c:97:ad:
d2:db:eb:85:11:e4:b2:65:82:26:09:b6:7c:7b:88:
ba:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:31:86:8A:F6:5A:B5:18:0D:C7:86:17:AE:F5:EC:D4:80:24:C7:D1
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/mzGGivZatRgNx4YXrvXs1IAkx9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
50:df:66:dc:1b:dd:01:ab:2c:e5:f2:df:75:5f:02:32:9c:e7:
49:22:9d:4f:fc:2e:a9:99:a8:d2:8a:69:97:d8:24:21:94:2a:
88:37:36:5f:44:d3:8a:31:52:dc:39:46:12:f6:43:cf:fb:68:
dc:c5:6c:57:64:1d:ed:32:d3:da:0c:16:14:cf:6d:b8:d1:f6:
9f:25:40:01:a5:68:fa:4a:f5:a2:8d:67:23:a5:08:58:b3:67:
d7:48:40:69:1f:84:35:9d:85:60:1a:9e:9d:ca:10:9c:2d:bf:
49:37:02:25:7b:ff:4a:45:ef:cd:d5:ba:79:9c:b5:c3:fa:38:
9c:56:82:bd:89:92:29:14:53:ab:ac:69:83:93:78:94:07:d2:
1c:d8:96:9c:2c:9b:17:2c:91:27:0d:ee:78:92:8b:b8:1c:49:
72:0d:23:91:86:54:c3:b7:ad:0e:98:48:b7:8f:16:82:7b:41:
54:10:9a:fb:90:55:b5:e5:d9:b4:99:c1:43:ee:96:ca:89:f6:
72:bb:00:a7:b8:bc:97:34:c3:c5:6e:53:c2:dd:82:a2:bf:71:
67:d6:e3:b5:48:5b:12:c6:72:0c:e3:9f:83:bd:f5:2c:73:39:
a7:a2:35:65:7b:3d:ad:dc:85:8a:8e:23:f8:b9:e5:49:73:2e:
7f:44:cd:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:54 2024 by rpki-client on console-ams.rpki-client.org