Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/q2XcmZ6ydbQGN1IxIQ3CGRKGZ_8.roa
File: q2XcmZ6ydbQGN1IxIQ3CGRKGZ_8.roa (raw, json)
Hash identifier: dEQtlFTJ3VkZe83mJEN4zXVq87bQ0sZvo6w1AQP57ro=
Subject key identifier: AB:65:DC:99:9E:B2:75:B4:06:37:52:31:21:0D:C2:19:12:86:67:FF
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 03F34F94
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/q2XcmZ6ydbQGN1IxIQ3CGRKGZ_8.roa
Signing time: Mon 07 Feb 2022 04:55:38 +0000
ROA not before: Mon 07 Feb 2022 04:55:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66277268 (0x3f34f94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Feb 7 04:55:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ab65dc999eb275b406375231210dc219128667ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a0:11:5c:5f:32:86:d7:33:74:0b:74:7b:48:
c5:4a:f4:20:34:26:84:24:08:3d:5e:f9:80:b4:65:
49:23:9f:92:18:07:a3:76:64:0d:be:4b:75:ec:f2:
cd:2e:76:b4:78:2b:e8:c1:12:d7:5f:4d:2e:73:99:
0a:45:c5:94:77:27:4e:2a:27:34:41:a8:5c:3d:28:
31:3a:b6:34:5e:46:83:ab:69:44:57:be:d2:9e:99:
21:81:33:f7:12:13:32:c5:af:a6:5f:d1:31:56:f0:
c9:32:06:28:6b:c3:ad:18:b3:91:79:a8:08:31:0c:
b6:ef:f0:54:70:b1:7a:b5:ad:63:f9:31:4e:d8:65:
cd:c9:57:95:25:51:bb:ad:6d:ca:6b:3d:fa:3f:e3:
d3:57:b0:7d:5e:0a:e1:f6:91:ba:19:d5:7e:9e:0a:
6b:3f:94:5a:a7:1a:41:16:1c:dd:17:54:74:65:da:
e2:21:62:0a:c4:07:1f:07:a1:73:d7:46:cf:45:c6:
ef:d5:41:b5:c4:bb:ea:87:04:3e:1a:13:50:b3:ab:
93:97:57:0c:9c:bb:57:2a:c9:43:9d:e0:22:b6:0e:
fb:3f:f5:a7:d2:46:b0:5b:1d:17:c8:f1:17:5a:14:
73:2b:db:6f:8b:75:0e:d5:f3:8c:80:81:ed:2a:32:
3c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:65:DC:99:9E:B2:75:B4:06:37:52:31:21:0D:C2:19:12:86:67:FF
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/q2XcmZ6ydbQGN1IxIQ3CGRKGZ_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
1b:67:69:dc:96:73:4c:f2:47:2d:da:d6:98:43:eb:02:f1:a4:
f3:a3:c6:5e:2e:6e:da:57:53:f0:14:18:63:a4:bd:e6:78:24:
f7:02:6d:07:6e:e7:50:6f:e4:1e:58:0f:9f:93:4f:dc:c6:c2:
a3:70:91:30:fa:b6:9c:1f:46:a6:d9:8f:69:93:75:a8:ec:b3:
82:32:33:69:8f:6f:5c:1d:91:9c:7b:fb:6f:54:23:53:fd:c9:
59:5c:ce:c1:35:6d:61:1c:b7:24:1d:6e:84:e3:bf:4d:0a:35:
19:d7:64:33:73:4b:ed:f0:7e:da:cd:97:1b:a1:1a:3d:e9:bd:
83:7b:de:f5:94:67:ef:e9:28:9e:52:fe:bb:c6:37:b6:05:96:
00:6f:27:0b:e8:63:eb:70:ad:81:71:d1:77:2a:18:c7:bf:2b:
c1:fd:ad:de:32:da:9f:f9:33:36:83:8d:4f:d8:3d:d5:cf:c8:
a1:7d:98:25:02:bb:33:69:a0:d7:78:9d:0f:04:ce:bb:c7:14:
0d:5e:8d:d9:73:f3:08:a1:9e:65:3c:c6:83:09:cb:56:19:a3:
30:d3:c8:92:8b:77:fe:8b:04:76:42:d1:98:ae:a5:4f:e7:20:
82:b4:ce:34:80:33:77:1f:9f:11:44:21:84:11:00:4d:bc:46:
84:8b:b8:19
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEA/NPlDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDIw
NzA0NTUzOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWI2NWRjOTk5ZWIy
NzViNDA2Mzc1MjMxMjEwZGMyMTkxMjg2NjdmZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKugEVxfMobXM3QLdHtIxUr0IDQmhCQIPV75gLRlSSOfkhgH
o3ZkDb5LdezyzS52tHgr6MES119NLnOZCkXFlHcnTionNEGoXD0oMTq2NF5Gg6tp
RFe+0p6ZIYEz9xITMsWvpl/RMVbwyTIGKGvDrRizkXmoCDEMtu/wVHCxerWtY/kx
TthlzclXlSVRu61tyms9+j/j01ewfV4K4faRuhnVfp4Kaz+UWqcaQRYc3RdUdGXa
4iFiCsQHHwehc9dGz0XG79VBtcS76ocEPhoTULOrk5dXDJy7VyrJQ53gIrYO+z/1
p9JGsFsdF8jxF1oUcyvbb4t1DtXzjICB7SoyPG8CAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBSrZdyZnrJ1tAY3UjEhDcIZEoZn/zAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L3EyWGNtWjZ5ZGJRR04xSXhJUTNDR1JLR1pfOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAZfYBDAPBAIAAjAJAwcBIAEH/AAC
MA0GCSqGSIb3DQEBCwUAA4IBAQAbZ2nclnNM8kct2taYQ+sC8aTzo8ZeLm7aV1Pw
FBhjpL3meCT3Am0HbudQb+QeWA+fk0/cxsKjcJEw+racH0am2Y9pk3Wo7LOCMjNp
j29cHZGce/tvVCNT/clZXM7BNW1hHLckHW6E479NCjUZ12Qzc0vt8H7azZcboRo9
6b2De971lGfv6SieUv67xje2BZYAbycL6GPrcK2BcdF3KhjHvyvB/a3eMtqf+TM2
g41P2D3Vz8ihfZglArszaaDXeJ0PBM67xxQNXo3Zc/MIoZ5lPMaDCctWGaMw08iS
i3f+iwR2QtGYrqVP5yCCtM40gDN3H58RRCGEEQBNvEaEi7gZ
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:55 2024 by rpki-client on console-ams.rpki-client.org