Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/sknVXrB5wAEUUQsqLBm_S-ri3-o.roa
File: sknVXrB5wAEUUQsqLBm_S-ri3-o.roa (raw, json)
Hash identifier: nDUDkxwFwcXrUUdNDd3T4QjIqfVYmTYATL8c0pWhnEs=
Subject key identifier: B2:49:D5:5E:B0:79:C0:01:14:51:0B:2A:2C:19:BF:4B:EA:E2:DF:EA
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 06461670
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/sknVXrB5wAEUUQsqLBm_S-ri3-o.roa
Signing time: Wed 27 Apr 2022 00:08:30 +0000
ROA not before: Wed 27 Apr 2022 00:08:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105256560 (0x6461670)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Apr 27 00:08:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b249d55eb079c00114510b2a2c19bf4beae2dfea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c4:01:b6:f0:1c:71:9d:a6:3c:16:b0:79:11:
82:7b:49:88:a4:16:d7:02:2c:af:86:5d:9d:f7:c3:
77:0d:38:c3:20:f5:2f:f1:69:27:ef:a3:f9:1d:73:
cb:3b:75:80:53:49:30:87:05:2c:28:b5:78:cb:92:
2c:38:4e:fc:d4:8e:e9:9f:77:89:03:26:3b:7f:b5:
b2:96:21:85:27:ee:6e:e1:fb:74:a5:1c:8f:6b:b2:
16:07:6d:ac:a5:51:3c:e9:37:c0:a3:b1:d7:41:c8:
19:5e:2e:80:b5:a6:2a:16:82:70:a7:31:0f:e0:f2:
40:a3:20:2f:7d:85:70:32:04:77:05:29:33:56:a4:
b6:11:88:5b:38:ab:f7:50:ec:14:24:eb:6a:1c:3d:
2f:74:d9:b1:a3:a5:2c:53:d0:58:40:ca:00:40:4c:
65:db:d0:36:9b:38:94:dd:f8:6d:0b:f6:4d:1e:6f:
62:fd:c3:ac:ab:2f:cf:88:d5:b0:21:c9:e3:ae:69:
0b:ff:41:88:ee:6a:0a:fc:09:4d:15:dc:d7:c1:1e:
74:48:d8:a9:1d:34:41:a0:1a:20:07:9d:cb:d3:6e:
08:6f:d2:9d:56:68:b4:9c:27:71:03:79:a7:c3:e2:
e2:09:d5:a9:68:04:5e:85:ee:02:f9:fd:2b:25:93:
4a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:49:D5:5E:B0:79:C0:01:14:51:0B:2A:2C:19:BF:4B:EA:E2:DF:EA
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/sknVXrB5wAEUUQsqLBm_S-ri3-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
9c:5b:c3:de:3e:ca:87:f1:0f:ed:2b:a2:7f:24:b6:ca:03:43:
39:91:e1:fa:0c:59:31:e3:f2:db:82:d2:15:f2:1f:08:78:68:
0e:75:a7:36:15:cb:e8:34:dc:fe:3d:e2:b3:72:a9:79:27:0e:
af:03:64:7d:ec:7d:fb:be:69:aa:ea:e4:ac:2f:3d:b4:31:a4:
8e:2d:bf:be:06:96:9a:40:3e:91:f0:92:4e:a4:56:15:b2:36:
f4:ba:88:d3:b0:23:3b:d5:89:8e:3c:30:da:ff:03:3a:b0:1d:
6f:a1:18:93:3e:d6:b4:76:8a:45:d0:b9:59:ab:b6:72:35:7f:
b0:e6:07:d1:18:15:3b:78:a9:61:53:2b:5d:fc:24:e7:a9:6f:
28:63:a7:3d:01:9b:c6:b5:69:3e:b1:b9:d5:a0:32:fe:94:b6:
bf:eb:d6:7a:9a:fa:3d:9c:e5:b3:de:3a:1d:2d:0c:34:1a:34:
aa:d7:ee:ad:5a:5d:2f:23:53:de:75:ea:ba:f4:54:33:3c:d6:
c1:4e:aa:23:37:62:94:14:20:b3:93:d5:52:9b:a3:15:19:f9:
4b:d5:f4:67:47:1c:e5:16:90:df:89:13:2a:cc:62:5a:c7:67:
39:4b:17:ba:c3:13:34:9b:2c:44:16:cc:58:aa:03:fd:c2:fc:
90:0e:d1:0c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEBkYWcDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDQy
NzAwMDgzMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjI0OWQ1NWViMDc5
YzAwMTE0NTEwYjJhMmMxOWJmNGJlYWUyZGZlYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ3EAbbwHHGdpjwWsHkRgntJiKQW1wIsr4ZdnffDdw04wyD1
L/FpJ++j+R1zyzt1gFNJMIcFLCi1eMuSLDhO/NSO6Z93iQMmO3+1spYhhSfubuH7
dKUcj2uyFgdtrKVRPOk3wKOx10HIGV4ugLWmKhaCcKcxD+DyQKMgL32FcDIEdwUp
M1akthGIWzir91DsFCTrahw9L3TZsaOlLFPQWEDKAEBMZdvQNps4lN34bQv2TR5v
Yv3DrKsvz4jVsCHJ465pC/9BiO5qCvwJTRXc18EedEjYqR00QaAaIAedy9NuCG/S
nVZotJwncQN5p8Pi4gnVqWgEXoXuAvn9KyWTSusCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBSySdVesHnAARRRCyosGb9L6uLf6jAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L3NrblZYckI1d0FFVVVRc3FMQm1fUy1yaTMtby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAZfYBDAPBAIAAjAJAwcAIAEH/AAC
MA0GCSqGSIb3DQEBCwUAA4IBAQCcW8PePsqH8Q/tK6J/JLbKA0M5keH6DFkx4/Lb
gtIV8h8IeGgOdac2FcvoNNz+PeKzcql5Jw6vA2R97H37vmmq6uSsLz20MaSOLb++
BpaaQD6R8JJOpFYVsjb0uojTsCM71YmOPDDa/wM6sB1voRiTPta0dopF0LlZq7Zy
NX+w5gfRGBU7eKlhUytd/CTnqW8oY6c9AZvGtWk+sbnVoDL+lLa/69Z6mvo9nOWz
3jodLQw0GjSq1+6tWl0vI1Pedeq69FQzPNbBTqojN2KUFCCzk9VSm6MVGflL1fRn
RxzlFpDfiRMqzGJax2c5Sxe6wxM0myxEFsxYqgP9wvyQDtEM
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:47 2023 by rpki-client on console-ams.rpki-client.org