Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/pjkE6Wg26HCwdPCgPMKcR-M3xag.roa
File: pjkE6Wg26HCwdPCgPMKcR-M3xag.roa (raw, json)
Hash identifier: 7tdGZQGsJYbVIVsBrG47Qh9FBzboG39LJsf8ph+02ZI=
Subject key identifier: A6:39:04:E9:68:36:E8:70:B0:74:F0:A0:3C:C2:9C:47:E3:37:C5:A8
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 05CAB707
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/pjkE6Wg26HCwdPCgPMKcR-M3xag.roa
Signing time: Sun 10 Apr 2022 10:47:48 +0000
ROA not before: Sun 10 Apr 2022 10:47:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97171207 (0x5cab707)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Apr 10 10:47:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a63904e96836e870b074f0a03cc29c47e337c5a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:87:ec:8b:77:d2:17:f1:79:c3:2a:e5:b3:1d:
9e:2c:78:6c:cb:97:15:98:0c:47:8e:d1:56:ca:6b:
32:e9:74:ca:9f:46:39:23:83:73:91:20:85:69:14:
23:b3:47:76:83:38:54:78:dd:30:20:7c:f0:25:f4:
68:08:51:29:66:96:e1:4f:d3:37:73:ff:f9:d1:36:
40:c8:c9:cd:22:33:6f:16:fb:2a:64:ee:be:a7:5d:
30:3d:ed:cb:e5:4b:b4:56:ad:8c:1f:35:c9:0d:7f:
1f:e1:db:b4:85:63:58:ea:a0:09:88:05:7f:89:6b:
30:75:e1:29:83:d3:98:97:b3:f6:a0:28:f2:15:47:
21:09:92:71:81:ea:88:f0:93:b6:66:16:31:a3:7f:
4e:67:7b:6c:c1:f2:11:65:ed:0c:85:0b:20:d9:4a:
49:cc:36:12:b4:c8:c9:c9:9d:45:88:ed:43:e3:6b:
96:64:2d:e8:41:fa:03:d0:2c:33:09:d0:cb:2f:93:
64:d3:65:b7:67:45:70:f5:2e:df:ca:da:98:ed:83:
a7:2a:6f:11:cc:d8:a0:a2:33:7d:f7:87:7f:16:a6:
b3:a6:7e:ec:3b:b3:60:55:30:aa:36:6d:53:53:0c:
f8:f5:c3:e1:06:3f:0b:75:02:24:5d:05:cf:62:fa:
8c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:39:04:E9:68:36:E8:70:B0:74:F0:A0:3C:C2:9C:47:E3:37:C5:A8
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/pjkE6Wg26HCwdPCgPMKcR-M3xag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
01:be:cb:74:6b:cf:ab:77:7b:4c:c4:48:df:52:dd:31:26:39:
7f:49:64:36:7e:81:ad:5b:c0:5e:57:6e:82:01:35:7e:6d:50:
17:12:82:64:af:ec:29:3e:8d:85:b3:5a:fc:cb:f9:cc:cd:a0:
31:db:a8:53:80:f0:0a:37:b6:f9:4f:6f:af:9d:4b:54:c3:e1:
8f:6e:cd:7d:70:b2:6b:91:bc:8d:17:73:05:57:90:00:2f:c4:
c9:ad:46:bd:4c:c1:57:78:9a:f2:02:ed:e2:cf:ea:33:92:b5:
a3:60:c4:c9:eb:88:62:79:3e:78:24:6a:e1:82:ff:6e:62:9e:
8c:ff:ac:dc:8d:97:88:2c:db:8f:58:d6:6d:ed:f8:1a:c9:9a:
b0:e3:80:66:65:11:d6:6b:7e:8a:eb:c8:db:c8:33:21:99:f1:
7e:de:ea:3f:c7:84:32:8b:9b:65:dd:c9:30:88:2f:f4:eb:f2:
a2:ef:7e:b3:89:c7:77:c4:a9:79:3b:33:54:f1:63:3e:81:5e:
db:89:46:b3:d1:f6:93:e7:52:80:4a:53:db:f0:d6:50:48:e8:
d5:36:c7:14:81:43:52:a8:0d:bc:de:1f:3f:7d:c7:9e:57:c4:
64:a7:9d:e0:69:a7:8a:45:06:29:2f:b5:b4:2a:b1:95:3d:a5:
49:db:6c:0e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEBcq3BzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDQx
MDEwNDc0OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTYzOTA0ZTk2ODM2
ZTg3MGIwNzRmMGEwM2NjMjljNDdlMzM3YzVhODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALWH7It30hfxecMq5bMdnix4bMuXFZgMR47RVsprMul0yp9G
OSODc5EghWkUI7NHdoM4VHjdMCB88CX0aAhRKWaW4U/TN3P/+dE2QMjJzSIzbxb7
KmTuvqddMD3ty+VLtFatjB81yQ1/H+HbtIVjWOqgCYgFf4lrMHXhKYPTmJez9qAo
8hVHIQmScYHqiPCTtmYWMaN/Tmd7bMHyEWXtDIULINlKScw2ErTIycmdRYjtQ+Nr
lmQt6EH6A9AsMwnQyy+TZNNlt2dFcPUu38ramO2DpypvEczYoKIzffeHfxams6Z+
7DuzYFUwqjZtU1MM+PXD4QY/C3UCJF0Fz2L6jOkCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBSmOQTpaDbocLB08KA8wpxH4zfFqDAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L3Bqa0U2V2cyNkhDd2RQQ2dQTUtjUi1NM3hhZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAZfYBDAPBAIAAjAJAwcBIAEH/AAC
MA0GCSqGSIb3DQEBCwUAA4IBAQABvst0a8+rd3tMxEjfUt0xJjl/SWQ2foGtW8Be
V26CATV+bVAXEoJkr+wpPo2Fs1r8y/nMzaAx26hTgPAKN7b5T2+vnUtUw+GPbs19
cLJrkbyNF3MFV5AAL8TJrUa9TMFXeJryAu3iz+ozkrWjYMTJ64hieT54JGrhgv9u
Yp6M/6zcjZeILNuPWNZt7fgayZqw44BmZRHWa36K68jbyDMhmfF+3uo/x4Qyi5tl
3ckwiC/06/Ki736zicd3xKl5OzNU8WM+gV7biUaz0faT51KASlPb8NZQSOjVNscU
gUNSqA283h8/fceeV8Rkp53gaaeKRQYpL7W0KrGVPaVJ22wO
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:57 2023 by rpki-client on console-fra.rpki-client.org