Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/nLJ4OBOBbz7W0iHj0TwZ4q7JvuA.roa
File: nLJ4OBOBbz7W0iHj0TwZ4q7JvuA.roa (raw, json)
Hash identifier: IelELxuwYv6NPP6mlcAIMF4lMnbbi0tFIKai+3tMM2g=
Subject key identifier: 9C:B2:78:38:13:81:6F:3E:D6:D2:21:E3:D1:3C:19:E2:AE:C9:BE:E0
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 084C534D
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/nLJ4OBOBbz7W0iHj0TwZ4q7JvuA.roa
Signing time: Fri 10 Jun 2022 04:39:27 +0000
ROA not before: Fri 10 Jun 2022 04:39:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139219789 (0x84c534d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 10 04:39:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9cb2783813816f3ed6d221e3d13c19e2aec9bee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7c:bb:d9:19:d9:25:db:8a:83:cc:96:fd:c4:
bb:ad:d7:8a:a2:76:bb:8d:da:0a:45:c1:fd:4b:eb:
10:03:f8:52:5b:40:8d:7f:57:c0:42:28:96:fb:77:
e9:9e:65:98:39:76:3a:43:7c:2e:57:f2:d4:3c:46:
b2:66:38:c4:6b:c9:f6:ff:77:48:45:5c:24:bc:97:
b7:7f:f1:f3:da:32:2a:c2:2a:6d:d6:a0:73:27:e1:
38:85:89:9c:01:34:ff:87:93:29:33:40:ea:9c:af:
cb:9a:ff:a8:b9:32:07:3d:22:9b:c9:ca:ee:26:23:
e5:4a:b7:19:64:7c:9f:de:95:8c:4c:44:5b:2d:5d:
3c:f3:49:6e:4b:d2:48:30:1a:ba:94:db:41:bb:48:
fb:de:43:0c:43:8a:af:06:2d:fe:a5:72:0f:85:b2:
59:bc:dd:fc:63:85:e6:81:d7:8d:d4:cf:6e:93:86:
3b:5a:ea:2d:89:d2:7e:05:b7:28:53:fa:f4:45:12:
ca:a9:2a:04:28:3d:49:db:37:e4:ef:62:ef:f9:83:
5e:a4:78:2c:7c:4f:e3:cd:f4:7b:3c:ae:c1:fc:2b:
0a:90:87:64:78:8d:a6:f0:e9:e9:92:db:4f:21:2b:
64:89:4c:79:46:35:35:25:a2:19:07:1b:be:d9:38:
2d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:B2:78:38:13:81:6F:3E:D6:D2:21:E3:D1:3C:19:E2:AE:C9:BE:E0
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/nLJ4OBOBbz7W0iHj0TwZ4q7JvuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
34:1f:5d:6a:b9:0c:44:66:4a:b0:75:a9:62:1e:33:63:b9:ab:
6c:a9:b9:71:10:98:f3:b7:b0:43:78:7c:02:37:92:92:2a:06:
12:8c:73:b9:4c:47:b8:96:7a:b9:95:db:06:c4:2f:72:a1:71:
67:e9:d6:e4:73:d0:dc:e8:96:ac:1f:12:3d:b1:72:c1:85:1d:
09:1a:54:4e:da:d0:df:c7:4e:b2:76:22:94:85:a6:9c:9a:94:
98:25:5d:71:ff:92:de:09:c8:85:8b:b5:40:3e:59:18:b3:b2:
9f:6f:1c:18:b2:8a:8a:6a:d6:58:17:83:00:65:ed:fd:6b:80:
b0:ba:a8:e4:eb:e8:6f:38:c3:13:ce:ae:f8:bb:7c:9a:14:53:
0e:26:85:30:bb:eb:62:e7:dc:1e:60:f5:e9:0c:2a:a5:d8:e1:
2c:56:52:8a:d1:9b:0c:94:02:fb:1d:4c:b6:49:6d:cc:73:ed:
f5:7e:c8:bd:db:67:13:d2:a5:d3:6c:47:1b:b4:d7:82:15:8f:
f9:3e:ea:d3:e1:e2:f7:48:53:f0:34:86:98:6a:4f:83:92:8c:
28:4b:4c:0c:4a:30:81:52:d5:8e:cb:61:38:41:36:bf:82:8b:
2c:26:6b:2f:1c:97:c3:ed:ec:0f:d4:87:65:b9:00:e4:02:10:
2e:7b:66:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:57 2023 by rpki-client on console-fra.rpki-client.org