Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/oKH13pGSqSl2PZplcOuHYYA-6I4.roa
File: oKH13pGSqSl2PZplcOuHYYA-6I4.roa (raw, json)
Hash identifier: txvfetTcqzADb8UPwo58bPo/qheaCnz/XmPrvdf/DqM=
Subject key identifier: A0:A1:F5:DE:91:92:A9:29:76:3D:9A:65:70:EB:87:61:80:3E:E8:8E
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 050818DA
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/oKH13pGSqSl2PZplcOuHYYA-6I4.roa
Signing time: Mon 14 Mar 2022 13:22:02 +0000
ROA not before: Mon 14 Mar 2022 13:22:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84416730 (0x50818da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Mar 14 13:22:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a0a1f5de9192a929763d9a6570eb8761803ee88e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c7:de:74:87:a8:e3:68:3d:63:6f:88:4c:2a:
de:29:e9:52:3d:1f:be:3f:d8:27:84:2f:4a:77:30:
c1:dc:fc:bd:c0:69:d3:66:16:67:68:4e:bb:c3:d6:
43:84:69:b2:1c:5e:c5:e3:00:69:07:3d:e5:3a:45:
dc:07:8d:43:33:9d:0b:5b:44:59:4e:03:be:67:f6:
ab:ee:3d:44:c2:58:bb:07:3a:15:9f:3c:6c:bc:e8:
3c:4d:52:89:79:24:52:1a:25:cf:16:c7:e8:b7:9f:
d8:bf:03:23:68:59:c2:25:7c:bd:c9:40:db:5c:ac:
fc:30:28:7b:20:88:93:7d:0c:50:95:6f:88:70:34:
ae:36:b2:07:05:b6:4d:b9:e5:91:7b:d6:b9:37:da:
39:bc:15:8c:1e:a0:b6:67:15:0d:2f:45:4c:eb:c4:
cc:fa:d9:f1:5a:70:b6:ad:a3:c6:c4:a0:72:c8:23:
48:e5:d2:05:86:bf:58:8d:01:aa:b6:6f:7c:4d:e0:
19:a4:a9:fc:19:6c:a0:d7:ca:02:22:93:cf:ec:56:
52:01:36:53:64:f2:8d:24:60:49:1e:7e:45:4c:20:
65:2e:a8:18:62:7a:27:86:ae:bc:2c:d0:15:78:58:
fa:ec:0b:60:d5:57:0e:f8:e6:66:82:26:6b:6f:5e:
9f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A1:F5:DE:91:92:A9:29:76:3D:9A:65:70:EB:87:61:80:3E:E8:8E
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/oKH13pGSqSl2PZplcOuHYYA-6I4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
7c:a3:d7:b9:78:46:e8:c2:8e:9e:05:0c:d7:cc:67:82:c5:6a:
4b:b5:57:2c:a2:82:2b:51:23:d1:47:cc:97:e6:d6:ed:b2:0f:
c7:46:c0:f9:41:1e:32:fa:57:35:61:ae:f3:f4:6d:b0:2f:72:
9c:01:a1:58:ea:cb:27:8c:de:5f:72:62:86:c3:01:70:44:a4:
a5:fa:b3:0f:50:a4:ea:e4:30:ef:ed:f0:8c:b3:e1:91:cd:25:
eb:73:5a:87:34:70:84:a5:64:30:be:ba:1a:7d:e7:34:5e:3b:
bc:cb:90:34:e1:96:65:f3:c5:1e:49:10:f0:7a:28:04:e3:92:
ab:13:03:50:2e:5b:0a:56:65:7b:c3:b3:1c:ad:51:18:19:75:
54:32:d6:ff:00:08:19:58:51:79:ea:b2:24:21:4e:76:a8:ee:
24:e6:6f:64:3d:ed:e8:1f:b1:d2:b9:88:7e:57:62:6d:80:a0:
63:31:a4:59:b8:91:d0:ba:43:7d:73:fe:15:26:d8:2d:05:03:
af:6b:1c:6c:b4:5a:b9:d2:11:9b:1a:79:cb:9f:ea:d7:d1:61:
b7:1b:74:81:94:7a:58:97:0a:32:f8:87:e7:27:c8:c2:e3:0a:
57:81:e0:91:14:f5:df:9c:99:c2:68:2f:8d:74:b8:51:b9:93:
c4:ea:00:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:55 2024 by rpki-client on console-ams.rpki-client.org