Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/oaTq3AXYwofgKbg7wPOZ3iXIl8Y.roa
File: oaTq3AXYwofgKbg7wPOZ3iXIl8Y.roa (raw, json)
Hash identifier: tyi0s/FVQ2qJHzOLt4JIvhJE9vC/v0rzyGUU3Ys4FUU=
Subject key identifier: A1:A4:EA:DC:05:D8:C2:87:E0:29:B8:3B:C0:F3:99:DE:25:C8:97:C6
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 044E7C6B
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/oaTq3AXYwofgKbg7wPOZ3iXIl8Y.roa
Signing time: Fri 18 Feb 2022 16:41:44 +0000
ROA not before: Fri 18 Feb 2022 16:41:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72252523 (0x44e7c6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Feb 18 16:41:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a1a4eadc05d8c287e029b83bc0f399de25c897c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e8:09:d5:2b:42:4a:af:a8:6c:6f:2b:61:58:
89:b7:d8:69:38:a0:cf:09:20:c4:d8:1e:48:4f:59:
55:55:73:d3:3a:4e:39:98:9c:46:c9:a7:b7:0f:05:
75:7c:7b:a9:73:aa:9f:32:f0:df:b1:7d:1d:7d:b5:
97:c1:cf:77:b6:5d:68:00:c5:ef:07:07:50:85:9f:
29:1d:2a:ce:90:35:f3:d0:c8:3a:58:54:de:8f:e2:
7d:2e:01:64:7d:57:d5:41:76:65:c2:a6:77:b9:ec:
65:1a:45:99:87:91:ba:db:e7:29:21:08:74:b9:6b:
07:87:04:47:21:6c:8e:35:6b:cb:60:d5:a4:be:11:
23:60:5e:6d:88:53:90:bc:c1:f1:de:dc:36:e0:44:
0e:c7:d5:71:d9:89:55:f0:03:c0:4a:e4:94:20:4e:
56:4e:30:99:c4:57:42:8c:88:d4:d7:31:6a:21:3d:
e8:b1:cc:af:a4:6e:84:85:fb:95:5d:c5:85:62:6e:
76:35:ca:56:77:af:7d:be:eb:9f:e1:a6:bb:21:40:
99:b4:fd:c8:97:e2:53:9a:c6:60:63:3e:9e:db:1d:
67:6c:09:5d:30:8a:50:76:ab:e6:d2:7d:e6:d0:e8:
90:a1:c5:b1:d7:eb:45:89:97:c5:05:7e:b7:40:b0:
dd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A4:EA:DC:05:D8:C2:87:E0:29:B8:3B:C0:F3:99:DE:25:C8:97:C6
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/oaTq3AXYwofgKbg7wPOZ3iXIl8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
57:3a:a9:9e:f6:56:db:40:7a:2c:3b:08:52:10:fa:3f:33:cd:
be:ee:9f:44:87:cd:7f:cd:7a:bc:a7:c6:eb:07:56:a9:4b:fe:
bb:c4:c7:7e:57:e1:6e:13:49:87:c6:41:4b:45:8f:59:af:61:
e5:85:7d:65:ad:8e:05:0b:9f:83:b7:7a:34:83:b3:a4:86:31:
cc:c3:4d:9a:14:fa:05:7a:87:98:98:ec:21:3b:e1:9e:49:ef:
dd:5a:3a:d5:3c:bf:fc:61:89:85:ba:7e:8b:37:44:35:fc:2b:
a2:0e:99:77:20:70:9c:93:67:e5:41:f1:7e:8a:8b:c7:e9:f7:
35:87:66:49:7d:17:62:7a:42:41:42:74:db:15:48:0f:52:05:
74:61:51:a1:29:46:79:ea:4c:8d:cf:99:68:21:a7:39:e9:96:
f1:1f:e7:c4:c2:8d:5f:5c:9b:1a:45:8d:2e:57:1f:d3:f2:c4:
96:10:74:59:66:32:75:5f:d4:8a:a6:b4:93:6d:17:03:f3:6a:
a6:24:d2:12:ff:c4:b4:86:12:bf:38:5d:08:b3:56:be:85:4a:
0d:d0:d8:b6:7e:55:5e:d4:47:00:25:80:e8:3b:b9:bd:97:3a:
d0:09:5d:d4:3b:0e:34:9e:a0:f0:94:cd:cf:d5:10:67:77:ca:
89:7c:59:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:28 2024 by rpki-client on console-fra.rpki-client.org