Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/spmkg81airz0J_xVwRIXrMkRERY.roa
File: spmkg81airz0J_xVwRIXrMkRERY.roa (raw, json)
Hash identifier: GuMvUH+xhcInnM+vLoFUIKwNlFuqLbFUiiRlvDO2Jck=
Subject key identifier: B2:99:A4:83:CD:5A:8A:BC:F4:27:FC:55:C1:12:17:AC:C9:11:11:16
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 069A2252
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/spmkg81airz0J_xVwRIXrMkRERY.roa
Signing time: Sun 08 May 2022 05:14:46 +0000
ROA not before: Sun 08 May 2022 05:14:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110764626 (0x69a2252)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: May 8 05:14:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b299a483cd5a8abcf427fc55c11217acc9111116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2f:13:b0:ba:7e:23:e8:a7:61:aa:9f:ae:5e:
18:c1:ca:04:41:49:55:54:48:7a:9a:62:63:b7:fb:
c0:16:5a:09:d6:e8:6f:d8:ce:01:25:e2:bb:a3:0b:
5e:3b:5e:31:5a:19:7c:d5:f0:7b:fd:39:9d:a6:ee:
ad:0c:bc:d0:15:27:1a:f5:e5:fe:e7:5d:cc:95:e8:
71:b5:59:f6:db:25:57:37:52:6c:01:35:cd:af:7d:
70:b5:03:30:36:b4:90:f5:05:cb:e6:f5:bb:e7:53:
63:5e:ac:d8:5f:f2:42:84:08:51:a3:d2:7c:be:f8:
80:51:36:4d:c3:52:3c:cc:ab:07:72:34:f4:bf:87:
d5:46:88:dc:f8:42:c1:e3:f5:e8:f9:75:c6:06:47:
77:cc:60:01:5c:29:21:3f:fd:de:c9:08:f1:52:72:
d5:65:7b:97:a0:95:19:09:ad:dc:cd:0a:b1:ce:0b:
da:b8:f4:0e:e5:54:94:68:83:be:9d:fd:bd:94:60:
fa:fc:0e:2e:67:07:cd:1a:fb:c5:e2:f9:3f:c7:10:
ee:f6:2b:ac:b2:28:36:54:26:b0:c3:00:78:02:ba:
95:75:c1:4f:89:bb:5f:37:9d:83:6c:e8:16:98:3d:
d4:2a:bf:17:aa:58:3e:ec:69:76:d5:68:b4:47:2b:
7b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:99:A4:83:CD:5A:8A:BC:F4:27:FC:55:C1:12:17:AC:C9:11:11:16
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/spmkg81airz0J_xVwRIXrMkRERY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
6c:15:7b:2b:36:1a:99:28:39:d1:56:09:1a:cc:d1:7e:6b:a3:
36:d2:00:ef:63:b4:9b:eb:f1:b5:39:1b:7e:d3:e4:fe:31:23:
6d:5a:2f:10:a5:40:d7:9c:ae:ea:af:6e:5d:cc:cf:0f:d7:d8:
c8:6f:15:c9:47:26:2d:4f:c6:ce:a7:63:64:2c:77:25:db:33:
9a:32:c2:38:66:26:44:09:bc:57:67:75:88:df:48:55:ac:8c:
ad:bf:f2:31:36:ca:5c:8e:a9:8e:32:a6:f1:a4:f3:bd:87:be:
4c:b8:48:d8:06:09:1b:da:4e:01:33:09:7a:f7:23:cb:13:3f:
46:20:04:7d:94:67:c0:6a:d1:f0:78:e0:57:d1:67:6e:b7:c8:
1e:32:7c:82:63:89:17:91:34:23:92:5b:ea:21:77:1d:12:20:
a5:3d:1d:5a:10:3a:c8:7d:f7:62:ec:9d:22:d0:90:5d:89:94:
2a:f9:d7:d1:17:c8:ce:59:78:bc:cc:c8:05:48:26:ba:d3:84:
e8:84:2f:25:e2:34:65:d6:62:71:23:e9:48:e5:75:7c:8c:74:
61:1a:9a:e3:ca:9c:bf:08:09:29:e3:9f:c4:ee:9d:19:69:b9:
fb:bb:88:df:24:95:ec:5b:f5:3d:d4:ff:32:90:11:00:f0:9a:
64:89:fa:1e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEBpoiUjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDUw
ODA1MTQ0NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjI5OWE0ODNjZDVh
OGFiY2Y0MjdmYzU1YzExMjE3YWNjOTExMTExNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMovE7C6fiPop2Gqn65eGMHKBEFJVVRIeppiY7f7wBZaCdbo
b9jOASXiu6MLXjteMVoZfNXwe/05naburQy80BUnGvXl/uddzJXocbVZ9tslVzdS
bAE1za99cLUDMDa0kPUFy+b1u+dTY16s2F/yQoQIUaPSfL74gFE2TcNSPMyrB3I0
9L+H1UaI3PhCweP16Pl1xgZHd8xgAVwpIT/93skI8VJy1WV7l6CVGQmt3M0Ksc4L
2rj0DuVUlGiDvp39vZRg+vwOLmcHzRr7xeL5P8cQ7vYrrLIoNlQmsMMAeAK6lXXB
T4m7Xzedg2zoFpg91Cq/F6pYPuxpdtVotEcre9sCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBSymaSDzVqKvPQn/FXBEhesyRERFjAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L3NwbWtnODFhaXJ6MEpfeFZ3UklYck1rUkVSWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAZfYBDAPBAIAAjAJAwcBIAEH/AAC
MA0GCSqGSIb3DQEBCwUAA4IBAQBsFXsrNhqZKDnRVgkazNF+a6M20gDvY7Sb6/G1
ORt+0+T+MSNtWi8QpUDXnK7qr25dzM8P19jIbxXJRyYtT8bOp2NkLHcl2zOaMsI4
ZiZECbxXZ3WI30hVrIytv/IxNspcjqmOMqbxpPO9h75MuEjYBgkb2k4BMwl69yPL
Ez9GIAR9lGfAatHweOBX0Wdut8geMnyCY4kXkTQjklvqIXcdEiClPR1aEDrIffdi
7J0i0JBdiZQq+dfRF8jOWXi8zMgFSCa604TohC8l4jRl1mJxI+lI5XV8jHRhGprj
ypy/CAkp45/E7p0Zabn7u4jfJJXsW/U91P8ykBEA8Jpkifoe
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:28 2024 by rpki-client on console-fra.rpki-client.org