Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/pw7C65EV_FJRsD7LwRsKyXvknSw.roa
File: pw7C65EV_FJRsD7LwRsKyXvknSw.roa (raw, json)
Hash identifier: V52UKoecEpy5l1bXzZtlw27A231cKBUO870uBCuH8DU=
Subject key identifier: A7:0E:C2:EB:91:15:FC:52:51:B0:3E:CB:C1:1B:0A:C9:7B:E4:9D:2C
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 04A2BE49
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/pw7C65EV_FJRsD7LwRsKyXvknSw.roa
Signing time: Wed 02 Mar 2022 00:29:42 +0000
ROA not before: Wed 02 Mar 2022 00:29:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77774409 (0x4a2be49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Mar 2 00:29:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a70ec2eb9115fc5251b03ecbc11b0ac97be49d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:61:89:a2:e7:d5:52:a5:a3:cb:df:71:f2:ad:
7c:86:bb:8b:ce:61:77:c2:3d:09:a2:a1:2f:b7:00:
92:0d:e9:02:65:74:e0:31:ae:9c:8e:c2:2e:f4:9e:
8c:4d:15:99:8f:57:a7:45:31:23:02:34:2a:70:90:
dc:f8:e6:54:ce:80:40:2e:de:10:19:a2:30:12:46:
bc:74:33:22:4a:09:62:df:c6:b9:ee:eb:4c:56:20:
9e:bd:77:a7:41:29:0e:18:4a:6e:9d:7b:66:d7:60:
15:c3:ea:89:01:e1:34:05:57:bc:bc:e8:0c:92:72:
d2:38:8f:65:06:f6:b2:d0:8b:8b:ca:62:c0:32:8f:
2a:24:10:d2:b4:97:76:eb:4e:06:46:f8:56:a7:b2:
bb:10:de:05:5b:2b:09:b0:35:04:02:89:03:68:44:
e1:16:d6:a5:64:7a:e1:41:9c:9f:a0:be:19:54:cb:
6b:ac:b1:17:7d:db:bd:54:30:fa:a4:4e:9c:fd:91:
53:b6:4c:60:71:da:9d:b0:f8:59:05:39:2c:36:a6:
96:5c:24:1b:12:8e:84:91:de:55:36:9d:5b:af:fe:
82:ad:bb:8c:cb:f5:a4:5c:f0:36:e4:38:1e:ba:5d:
62:b6:2d:8a:15:83:1e:5b:0f:db:87:c4:54:8f:51:
46:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:0E:C2:EB:91:15:FC:52:51:B0:3E:CB:C1:1B:0A:C9:7B:E4:9D:2C
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/pw7C65EV_FJRsD7LwRsKyXvknSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
4d:bc:f1:46:79:4c:ee:8b:3f:34:f0:a4:71:29:c7:b3:b2:8c:
07:97:76:7c:35:e2:fa:d2:5e:c8:cf:6c:59:2f:74:79:9f:d7:
ca:05:73:79:a8:82:83:16:5d:61:df:c9:32:ca:c3:47:3d:76:
d6:22:bb:3c:0d:a0:92:65:fd:dc:d8:75:7c:c5:8f:a0:54:6b:
2d:93:d9:5e:fe:9f:ae:e3:58:58:a1:a1:77:7c:a7:5f:f7:78:
9d:2e:57:8d:24:75:ee:ed:bb:e2:33:24:a1:c7:8b:7b:85:e0:
51:4c:ca:89:ca:ed:f8:13:7a:0c:4a:dd:e9:2a:38:d6:3f:41:
33:0f:d1:97:af:57:1a:42:f8:d8:40:dd:31:d3:39:c4:bf:82:
78:b4:4c:d9:f4:b2:e0:e8:7e:d1:cf:dc:77:f6:c0:31:18:0e:
73:a1:46:79:69:d7:32:05:e2:a9:55:4d:6d:a2:1f:62:1c:c4:
e3:74:8a:2c:ef:c9:cb:f4:e3:ca:f1:6d:c8:83:c6:09:a3:67:
01:06:79:64:00:76:5f:f7:2f:a9:ab:c4:24:e9:0c:26:41:09:
6f:16:56:fd:08:9e:d3:ed:7e:37:ee:de:ae:10:aa:1e:f6:09:
82:24:d2:92:ff:b1:62:b2:88:c6:15:25:4d:1a:d8:57:96:19:
2a:1a:31:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:55 2024 by rpki-client on console-ams.rpki-client.org