Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/nacWLq2ZZIuyHk6cPLnUAPNTdCE.roa
File: nacWLq2ZZIuyHk6cPLnUAPNTdCE.roa (raw, json)
Hash identifier: QdbIZdYjvn83qWDucnnQTK3/ItZ72+U1cPfIKpkGtPA=
Subject key identifier: 9D:A7:16:2E:AD:99:64:8B:B2:1E:4E:9C:3C:B9:D4:00:F3:53:74:21
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 07527615
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/nacWLq2ZZIuyHk6cPLnUAPNTdCE.roa
Signing time: Sun 22 May 2022 04:01:29 +0000
ROA not before: Sun 22 May 2022 04:01:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122844693 (0x7527615)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: May 22 04:01:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9da7162ead99648bb21e4e9c3cb9d400f3537421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:29:b4:65:90:9c:eb:8f:8c:60:3a:a0:dc:fc:
0b:75:99:54:b6:74:8f:f1:ae:f1:04:6f:59:6f:64:
26:2a:be:09:a8:e8:4e:99:c2:95:f9:a6:1f:56:2d:
bb:25:6f:92:c8:e0:d7:04:bf:a4:1b:c9:1a:cc:25:
48:83:81:55:36:45:15:1f:df:d7:d6:e5:bf:0e:f8:
58:d6:98:21:72:03:83:fe:ab:4f:c0:b5:8b:93:4d:
22:21:c5:93:d3:6d:34:f0:b5:ed:d4:44:c8:5b:4a:
6e:d8:5b:2b:d9:89:f4:07:ef:b9:53:9f:fb:e6:e1:
a8:c8:fe:cd:c8:3e:43:f6:92:1f:dd:06:b1:30:1b:
bc:ba:1a:2f:49:59:82:4a:7b:9e:1a:d8:ac:5d:d8:
f7:19:99:1c:c0:d2:99:eb:18:4a:1f:44:59:ff:22:
4e:aa:c8:60:8c:47:1c:13:b5:76:1e:e6:74:5b:1c:
b6:b4:00:d0:2f:af:3e:aa:12:19:c5:df:d1:e6:d2:
65:0a:28:6b:fe:8d:d9:b8:31:65:a0:be:6d:df:7d:
b1:c2:00:4f:ea:06:06:1d:c4:07:47:b1:52:69:95:
60:cf:72:a9:1b:a3:c7:70:57:0d:0d:ee:dc:88:06:
3f:83:f9:94:3a:f3:d5:dc:40:c8:b4:70:e9:78:8c:
3d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A7:16:2E:AD:99:64:8B:B2:1E:4E:9C:3C:B9:D4:00:F3:53:74:21
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/nacWLq2ZZIuyHk6cPLnUAPNTdCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
02:84:d5:1f:b1:13:22:d9:4a:54:d5:c8:44:c3:a5:64:de:a4:
b3:b8:d0:3e:cc:d2:e2:fd:3b:a9:7c:18:4f:23:87:24:1b:eb:
04:4c:8d:40:37:60:44:b1:30:47:8b:3f:03:4d:0a:8b:85:3f:
12:aa:8f:42:04:59:68:09:5c:02:80:28:27:52:6c:b7:44:54:
e4:de:56:ec:25:76:dc:10:95:b9:a0:7a:09:9c:7c:02:da:4b:
a3:88:fe:d0:a6:47:c2:7b:ac:73:b3:47:01:fc:37:56:1f:ce:
50:80:cf:a2:9a:3c:a2:f1:ab:73:f4:f5:b8:ce:4d:48:15:dd:
aa:ad:08:76:34:9c:25:30:86:ee:19:6f:ad:65:65:9c:f6:a6:
81:cb:e9:ef:c1:5c:db:a8:3d:65:22:17:cc:03:3b:f9:e4:69:
3d:ef:8d:51:ed:ff:bd:40:fb:87:c3:38:e9:d7:16:d2:25:60:
0f:ed:71:9f:4a:e8:a5:38:18:13:02:4c:20:83:0e:e8:0e:ca:
dd:ec:51:7f:83:8a:f2:d3:18:77:b8:c1:b9:49:02:4d:2f:f2:
38:85:cb:30:96:12:8b:88:8b:f7:76:10:25:25:ce:e5:e2:75:
2d:be:67:2a:aa:c8:df:79:1e:8a:41:57:fb:1f:f2:87:89:f9:
01:6b:59:4a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEB1J2FTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDUy
MjA0MDEyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWRhNzE2MmVhZDk5
NjQ4YmIyMWU0ZTljM2NiOWQ0MDBmMzUzNzQyMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALQptGWQnOuPjGA6oNz8C3WZVLZ0j/Gu8QRvWW9kJiq+Cajo
TpnClfmmH1YtuyVvksjg1wS/pBvJGswlSIOBVTZFFR/f19blvw74WNaYIXIDg/6r
T8C1i5NNIiHFk9NtNPC17dREyFtKbthbK9mJ9AfvuVOf++bhqMj+zcg+Q/aSH90G
sTAbvLoaL0lZgkp7nhrYrF3Y9xmZHMDSmesYSh9EWf8iTqrIYIxHHBO1dh7mdFsc
trQA0C+vPqoSGcXf0ebSZQooa/6N2bgxZaC+bd99scIAT+oGBh3EB0exUmmVYM9y
qRujx3BXDQ3u3IgGP4P5lDrz1dxAyLRw6XiMPc8CAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBSdpxYurZlki7IeTpw8udQA81N0ITAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L25hY1dMcTJaWkl1eUhrNmNQTG5VQVBOVGRDRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAZfYBDAPBAIAAjAJAwcAIAEH/AAC
MA0GCSqGSIb3DQEBCwUAA4IBAQAChNUfsRMi2UpU1chEw6Vk3qSzuNA+zNLi/Tup
fBhPI4ckG+sETI1AN2BEsTBHiz8DTQqLhT8Sqo9CBFloCVwCgCgnUmy3RFTk3lbs
JXbcEJW5oHoJnHwC2kujiP7QpkfCe6xzs0cB/DdWH85QgM+imjyi8atz9PW4zk1I
Fd2qrQh2NJwlMIbuGW+tZWWc9qaBy+nvwVzbqD1lIhfMAzv55Gk9741R7f+9QPuH
wzjp1xbSJWAP7XGfSuilOBgTAkwggw7oDsrd7FF/g4ry0xh3uMG5SQJNL/I4hcsw
lhKLiIv3dhAlJc7l4nUtvmcqqsjfeR6KQVf7H/KHifkBa1lK
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:55 2024 by rpki-client on console-ams.rpki-client.org