Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/nhzxFtGO8TsYAxGcR55CkGdJMpY.roa
File: nhzxFtGO8TsYAxGcR55CkGdJMpY.roa (raw, json)
Hash identifier: otO09C3+NrbPV/pZDRs0wN4HZKqCsdmMScMPX+eKon8=
Subject key identifier: 9E:1C:F1:16:D1:8E:F1:3B:18:03:11:9C:47:9E:42:90:67:49:32:96
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 04B33480
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/nhzxFtGO8TsYAxGcR55CkGdJMpY.roa
Signing time: Fri 04 Mar 2022 00:42:34 +0000
ROA not before: Fri 04 Mar 2022 00:42:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78853248 (0x4b33480)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Mar 4 00:42:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e1cf116d18ef13b1803119c479e429067493296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:01:22:e7:c3:30:09:ca:eb:35:d5:5d:7b:4d:
db:c0:cd:46:2c:27:82:5f:21:d5:7e:0e:ce:76:82:
8f:62:40:0f:53:4b:69:5f:e0:f0:b1:06:1e:3c:48:
04:db:8f:ae:cc:8f:af:73:48:e0:6a:b9:fc:09:dc:
ca:61:d0:69:ef:47:6e:cd:93:52:3d:b2:6d:f4:e7:
4b:91:3d:3e:e3:d4:4d:9b:07:f3:f4:fd:51:3c:c3:
9a:86:c2:ea:e4:d3:cb:e1:37:d5:6b:8e:d6:a7:99:
35:44:0c:6b:98:1e:b4:55:7b:90:f0:a2:5a:13:bd:
c1:da:53:5d:a5:bf:c7:5a:91:a2:5b:30:0b:8c:99:
5b:fe:51:d0:70:17:5d:f3:04:1f:41:01:1a:66:bb:
f7:e3:fd:33:0b:fa:94:04:3e:08:c4:01:a8:f1:54:
75:cf:97:b0:dc:5f:d4:9e:4b:12:07:97:cb:c6:a3:
be:ae:29:6f:4f:ad:75:77:74:7b:bd:b7:d1:38:28:
ee:f2:fc:00:be:96:5e:72:f4:03:4d:70:a1:43:e0:
0b:ab:d4:81:22:b3:34:a6:91:f9:f7:3f:9d:31:9e:
3c:49:f9:63:fe:43:af:6f:cd:d3:76:0f:f7:66:d1:
2a:b7:ec:71:fe:a9:10:c4:f8:ff:48:b6:99:51:da:
ea:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:1C:F1:16:D1:8E:F1:3B:18:03:11:9C:47:9E:42:90:67:49:32:96
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/nhzxFtGO8TsYAxGcR55CkGdJMpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
66:47:8e:b7:8f:7d:bc:96:5b:5f:bd:1b:06:f2:c2:db:14:d5:
cd:fa:6f:33:f0:c5:4f:66:2e:07:39:ad:c7:4f:c3:56:d2:20:
01:91:65:39:6f:26:e7:ca:75:d1:59:71:8d:21:9b:04:85:cb:
3f:50:9a:df:68:0f:ec:e9:3d:02:ca:af:eb:f9:0f:cf:54:7f:
e0:32:53:16:81:88:25:7c:7f:10:4d:a7:fa:69:3f:39:51:f1:
18:26:6a:4d:7b:06:47:01:10:97:87:16:5f:9e:8c:a7:d0:68:
7c:6b:76:67:55:d0:6d:a8:5b:b9:41:74:dc:6f:c5:5f:0a:71:
9a:42:37:9e:7d:7b:8f:ba:d0:62:a6:5b:de:a1:9f:84:02:e1:
7a:4a:d1:5f:6b:d2:de:83:3e:d5:ae:33:0b:9d:78:f8:7e:eb:
17:81:90:f1:43:64:ff:5e:24:ea:92:21:35:ba:14:9e:b4:bb:
e7:b7:a8:74:18:f4:55:16:df:ef:3d:5a:df:cf:3a:a8:60:ba:
f6:3d:a5:f9:b8:e2:d9:b9:49:e6:01:de:c6:eb:f2:9d:86:3e:
d7:c3:a0:bd:b5:63:a6:d5:50:65:fe:33:36:e3:d1:6e:52:88:
39:24:db:eb:ff:a9:a0:81:f7:35:91:8f:cc:46:40:69:b6:98:
62:df:ad:c0
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEBLM0gDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDMw
NDAwNDIzNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWUxY2YxMTZkMThl
ZjEzYjE4MDMxMTljNDc5ZTQyOTA2NzQ5MzI5NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPkBIufDMAnK6zXVXXtN28DNRiwngl8h1X4OznaCj2JAD1NL
aV/g8LEGHjxIBNuPrsyPr3NI4Gq5/AncymHQae9Hbs2TUj2ybfTnS5E9PuPUTZsH
8/T9UTzDmobC6uTTy+E31WuO1qeZNUQMa5getFV7kPCiWhO9wdpTXaW/x1qRolsw
C4yZW/5R0HAXXfMEH0EBGma79+P9Mwv6lAQ+CMQBqPFUdc+XsNxf1J5LEgeXy8aj
vq4pb0+tdXd0e7230Tgo7vL8AL6WXnL0A01woUPgC6vUgSKzNKaR+fc/nTGePEn5
Y/5Dr2/N03YP92bRKrfscf6pEMT4/0i2mVHa6hcCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBSeHPEW0Y7xOxgDEZxHnkKQZ0kyljAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L25oenhGdEdPOFRzWUF4R2NSNTVDa0dkSk1wWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAZfYBDAPBAIAAjAJAwcBIAEH/AAC
MA0GCSqGSIb3DQEBCwUAA4IBAQBmR463j328lltfvRsG8sLbFNXN+m8z8MVPZi4H
Oa3HT8NW0iABkWU5bybnynXRWXGNIZsEhcs/UJrfaA/s6T0Cyq/r+Q/PVH/gMlMW
gYglfH8QTaf6aT85UfEYJmpNewZHARCXhxZfnoyn0Gh8a3ZnVdBtqFu5QXTcb8Vf
CnGaQjeefXuPutBiplveoZ+EAuF6StFfa9Legz7VrjMLnXj4fusXgZDxQ2T/XiTq
kiE1uhSetLvnt6h0GPRVFt/vPVrfzzqoYLr2PaX5uOLZuUnmAd7G6/Kdhj7Xw6C9
tWOm1VBl/jM249FuUog5JNvr/6mggfc1kY/MRkBptphi363A
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:47 2023 by rpki-client on console-ams.rpki-client.org