Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/rSLJLKy_iTcGcpjFHQRdyq9syNo.roa
File: rSLJLKy_iTcGcpjFHQRdyq9syNo.roa (raw, json)
Hash identifier: lGJHRV+nHyIOz2e4lXxRX3WoHIwunv/QD1f4pOzJ3t0=
Subject key identifier: AD:22:C9:2C:AC:BF:89:37:06:72:98:C5:1D:04:5D:CA:AF:6C:C8:DA
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 03B9D007
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/rSLJLKy_iTcGcpjFHQRdyq9syNo.roa
Signing time: Sun 30 Jan 2022 04:45:43 +0000
ROA not before: Sun 30 Jan 2022 04:45:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62509063 (0x3b9d007)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jan 30 04:45:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ad22c92cacbf8937067298c51d045dcaaf6cc8da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6a:97:99:6d:c9:8e:90:82:0a:a1:92:cc:bd:
ba:d6:17:9d:1e:9a:bd:b2:e2:01:02:1f:91:ed:d4:
c5:58:31:ec:1e:5d:bc:58:75:29:b1:67:b2:08:43:
0d:f0:03:7b:a7:bb:96:fc:24:c6:04:33:ed:90:5c:
e2:0e:b7:d0:3f:18:a6:7d:d1:f7:66:d9:46:f2:25:
db:d3:7d:3a:b7:0a:ad:64:4e:8f:35:96:ec:d9:28:
3f:d8:49:32:94:bb:13:d1:99:06:ed:6b:64:48:c3:
bc:2b:d6:88:a9:d1:56:f0:7e:dc:d5:26:4b:6a:b8:
09:17:e6:9b:50:ae:e0:1c:49:b1:ee:4b:93:fc:36:
35:f6:df:7e:2f:03:11:bc:38:bb:43:6f:28:0f:1d:
20:8a:94:95:b8:a4:98:bc:50:f0:b5:eb:5a:1c:69:
b7:5a:dc:ab:17:77:8d:c9:41:07:a6:ca:5d:1e:0f:
7a:80:76:e0:1a:bc:d9:dc:90:cc:a9:57:15:71:b1:
50:3f:e0:bc:79:31:e2:a1:fa:53:e2:9d:d2:22:15:
d6:c0:d4:df:0f:53:f8:64:f7:34:53:d7:07:69:97:
1d:4b:7b:20:10:00:e2:52:83:c2:ab:e3:8d:37:cc:
cd:67:10:d7:f5:05:c1:bc:44:7f:49:d2:7b:9e:5e:
57:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:22:C9:2C:AC:BF:89:37:06:72:98:C5:1D:04:5D:CA:AF:6C:C8:DA
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/rSLJLKy_iTcGcpjFHQRdyq9syNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
45:37:9e:f2:de:c8:fd:5f:a5:22:38:2b:05:44:7d:65:60:f7:
ea:79:2a:97:32:be:a0:e0:11:92:f6:cd:33:89:97:69:c8:c1:
90:7b:fe:98:7c:51:d2:b6:d2:6f:7d:16:d3:b8:5e:8b:13:0f:
53:72:9b:2e:5d:0b:81:a4:ad:7e:33:93:cf:2b:02:6f:6e:7e:
c4:f2:8a:49:fe:5e:dc:81:bb:c9:6c:09:9d:77:a9:77:b1:db:
41:97:44:52:11:59:87:c8:e3:8c:bd:b9:7f:72:25:f1:5a:8d:
d4:8a:d2:fb:a5:d3:56:24:73:80:4e:b6:37:6e:c5:73:24:61:
5f:3b:5b:bf:d0:24:7d:b1:c3:86:0c:ab:37:ef:12:68:db:88:
47:e8:fd:e3:50:15:e7:84:6c:a5:67:3b:b8:d6:88:f7:4b:6a:
7b:52:36:ad:11:bf:81:d5:5b:61:9b:b4:4b:48:6b:a0:fd:b0:
84:ff:74:0c:48:64:db:26:fb:7a:3f:66:d3:49:f4:fb:1e:ca:
f2:44:cb:95:9d:a3:ec:f2:19:2c:e3:cc:88:e6:cd:96:08:a8:
26:34:e7:59:45:5b:a8:33:31:5a:b2:6e:7b:3a:0c:50:54:46:
f8:d6:05:9e:bf:2a:22:99:ef:c6:5d:2a:14:67:17:43:4e:53:
a9:f2:7e:89
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEA7nQBzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDEz
MDA0NDU0M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWQyMmM5MmNhY2Jm
ODkzNzA2NzI5OGM1MWQwNDVkY2FhZjZjYzhkYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMRql5ltyY6Qggqhksy9utYXnR6avbLiAQIfke3UxVgx7B5d
vFh1KbFnsghDDfADe6e7lvwkxgQz7ZBc4g630D8Ypn3R92bZRvIl29N9OrcKrWRO
jzWW7NkoP9hJMpS7E9GZBu1rZEjDvCvWiKnRVvB+3NUmS2q4CRfmm1Cu4BxJse5L
k/w2Nfbffi8DEbw4u0NvKA8dIIqUlbikmLxQ8LXrWhxpt1rcqxd3jclBB6bKXR4P
eoB24Bq82dyQzKlXFXGxUD/gvHkx4qH6U+Kd0iIV1sDU3w9T+GT3NFPXB2mXHUt7
IBAA4lKDwqvjjTfMzWcQ1/UFwbxEf0nSe55eV+cCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBStIsksrL+JNwZymMUdBF3Kr2zI2jAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L3JTTEpMS3lfaVRjR2NwakZIUVJkeXE5c3lOby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAZfYBDAPBAIAAjAJAwcBIAEH/AAC
MA0GCSqGSIb3DQEBCwUAA4IBAQBFN57y3sj9X6UiOCsFRH1lYPfqeSqXMr6g4BGS
9s0ziZdpyMGQe/6YfFHSttJvfRbTuF6LEw9TcpsuXQuBpK1+M5PPKwJvbn7E8opJ
/l7cgbvJbAmdd6l3sdtBl0RSEVmHyOOMvbl/ciXxWo3UitL7pdNWJHOATrY3bsVz
JGFfO1u/0CR9scOGDKs37xJo24hH6P3jUBXnhGylZzu41oj3S2p7UjatEb+B1Vth
m7RLSGug/bCE/3QMSGTbJvt6P2bTSfT7HsryRMuVnaPs8hks48yI5s2WCKgmNOdZ
RVuoMzFasm57OgxQVEb41gWevyoime/GXSoUZxdDTlOp8n6J
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:47 2023 by rpki-client on console-ams.rpki-client.org