Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/p5S4xzR3yVmiEsEud5esJXkpr3Y.roa
File: p5S4xzR3yVmiEsEud5esJXkpr3Y.roa (raw, json)
Hash identifier: mUvgfRnmirSbgZ6+wujro28R/e4mTkdJ9Hc7RNRx9pY=
Subject key identifier: A7:94:B8:C7:34:77:C9:59:A2:12:C1:2E:77:97:AC:25:79:29:AF:76
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 096F3D0B
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/p5S4xzR3yVmiEsEud5esJXkpr3Y.roa
Signing time: Sat 02 Jul 2022 04:02:25 +0000
ROA not before: Sat 02 Jul 2022 04:02:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158285067 (0x96f3d0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jul 2 04:02:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a794b8c73477c959a212c12e7797ac257929af76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1e:dc:4d:b4:5c:c3:c2:aa:65:18:f1:52:4c:
88:d7:36:60:9b:e0:99:20:4e:30:22:ec:21:46:24:
3c:98:ba:b3:d4:8a:b1:80:1d:57:e4:19:11:80:e9:
51:a1:3d:c3:3b:3e:2d:cb:5a:97:44:03:d7:fd:0e:
25:9c:30:ad:bf:d8:72:f5:bf:b7:27:94:7b:72:79:
ce:49:1a:2a:e6:5d:83:17:ed:8e:ad:cc:0a:6a:5e:
9b:c7:d8:6f:a9:ff:fb:68:e9:9e:38:96:ce:74:4c:
e9:8c:2e:ae:36:6f:b0:67:90:ae:78:43:3d:1a:3c:
82:72:08:53:e9:6a:d6:a2:51:cb:ee:3e:b1:0c:55:
f2:61:3c:6c:bb:da:68:3c:4f:c4:ed:37:76:77:4d:
1b:e8:b3:0d:67:36:d0:09:1b:73:2b:06:a7:c7:f7:
90:01:19:74:e8:97:3c:e2:16:e4:a0:a8:54:b5:ad:
0e:bb:88:4b:06:7d:b7:55:7c:e8:0f:be:a2:65:ea:
68:3a:5b:ce:e7:27:ce:bd:47:f4:50:58:da:aa:10:
43:1b:ab:49:77:10:53:f0:67:c6:4e:d6:ac:a7:2f:
28:a6:3e:72:23:2f:03:6a:55:49:13:bc:73:a6:4a:
14:c8:75:a8:e9:6e:5a:fa:2c:4d:69:22:c0:30:21:
0a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:94:B8:C7:34:77:C9:59:A2:12:C1:2E:77:97:AC:25:79:29:AF:76
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/p5S4xzR3yVmiEsEud5esJXkpr3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
44:31:68:13:9a:9e:f4:48:09:74:3f:ab:34:ca:c3:9c:de:7b:
63:d2:17:8a:06:ee:38:6b:f3:64:a7:db:22:55:4c:74:c3:b9:
90:2b:f9:e2:52:e8:cf:fb:e9:6c:38:ca:d5:38:82:f5:f1:65:
7f:f8:34:d9:fb:2a:c8:d9:43:8f:68:6c:68:3a:2b:2e:ea:94:
cc:c0:0b:7f:8d:5e:1b:16:a5:bb:b0:94:57:4a:84:a1:b7:02:
a5:4a:ff:02:93:08:d3:67:3d:88:63:8a:46:2d:98:a5:0e:f2:
eb:08:cf:4d:d2:ab:87:25:31:ce:31:f1:cf:47:cd:02:40:3c:
4b:a0:86:57:62:70:69:7c:d9:3b:43:1e:45:f0:28:e8:c0:c1:
0d:b7:11:7c:37:15:c8:4e:c5:97:13:ca:bb:cc:9b:cf:1c:53:
47:94:ca:94:d9:d8:85:aa:fb:bb:e0:86:24:60:84:a2:08:dc:
a6:8b:5e:94:d8:c0:03:4a:20:fc:b5:5c:6b:1c:6b:40:ea:a1:
aa:1a:1c:7f:d9:22:5d:01:94:1d:58:e6:2b:1a:01:de:98:64:
4f:c1:29:67:ab:22:cc:7a:6c:bd:63:78:e0:6c:e9:12:72:7d:
c4:71:7b:fc:96:37:c8:38:e4:b0:62:da:35:09:a7:d8:b0:f9:
f6:85:f2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:47 2023 by rpki-client on console-ams.rpki-client.org