Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/st_DqACG2b9RykIZVInwiYDK0ug.roa
File: st_DqACG2b9RykIZVInwiYDK0ug.roa (raw, json)
Hash identifier: OqFNIJf7c7D52npHQrVrJzPI6gkAiMFmR+dzVc9QWh4=
Subject key identifier: B2:DF:C3:A8:00:86:D9:BF:51:CA:42:19:54:89:F0:89:80:CA:D2:E8
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 03D33C12
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/st_DqACG2b9RykIZVInwiYDK0ug.roa
Signing time: Thu 03 Feb 2022 01:46:17 +0000
ROA not before: Thu 03 Feb 2022 01:46:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64175122 (0x3d33c12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Feb 3 01:46:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b2dfc3a80086d9bf51ca42195489f08980cad2e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a6:e4:48:a7:87:ab:ae:d4:7f:69:e1:db:31:
57:7b:4c:4d:a3:ab:40:db:62:62:d0:06:ee:cc:d6:
ac:57:ec:a1:91:25:9c:46:a9:09:5a:01:b1:d5:0a:
57:6d:fa:a5:0e:3b:17:fa:a1:86:b3:55:d8:50:8d:
b0:65:e6:c3:d6:88:52:9d:fd:05:ba:c3:64:95:60:
ed:ad:bc:22:93:ab:5e:63:2d:d2:10:de:4a:b4:08:
3e:0d:c2:68:68:9e:44:7e:94:82:9b:b9:7c:52:39:
da:d1:76:d7:83:fc:0e:e2:16:58:6c:0d:ed:37:95:
1f:15:b6:2c:54:95:31:80:3a:63:6a:92:7d:73:0b:
c1:3b:a2:0a:e7:06:74:f6:9a:ae:65:5c:29:0a:88:
75:5f:c1:a2:64:66:ee:d5:d8:44:8d:55:c8:f9:e4:
50:ab:33:a3:93:f2:bc:50:a6:d4:64:39:ec:db:07:
4e:76:9f:01:15:00:05:80:5b:b5:41:8c:1a:e4:7a:
79:14:3a:81:66:b7:f5:77:05:33:c9:95:a3:85:5b:
cf:c5:48:46:2b:79:fa:21:90:b8:24:1b:a5:50:b3:
47:98:97:8b:47:27:2f:9a:f5:2d:a2:76:b5:e2:c0:
f7:b9:98:9b:1a:2c:fc:90:cc:a5:d8:9b:57:f3:59:
fd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:DF:C3:A8:00:86:D9:BF:51:CA:42:19:54:89:F0:89:80:CA:D2:E8
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/st_DqACG2b9RykIZVInwiYDK0ug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
2a:ab:2f:1c:1f:1a:65:ab:1d:b2:08:84:70:8e:51:28:b5:f4:
48:bc:ab:df:eb:7d:6a:31:3f:42:32:0e:74:14:c7:7e:85:ad:
2e:24:c7:22:80:24:d7:5c:a4:71:92:97:c5:7b:56:cf:3d:ac:
e0:c8:06:69:6b:88:0a:ff:ee:88:8e:68:86:a9:27:dd:30:0b:
5e:f7:ca:71:73:e3:cb:47:e3:88:c9:63:e0:83:01:76:91:75:
82:90:f9:97:34:d3:e1:94:c1:50:25:5a:9b:f7:25:29:71:ae:
7b:18:7d:69:73:c9:d7:42:06:72:3f:75:06:c7:59:25:2b:2f:
5d:1c:cf:71:94:26:c9:64:40:7d:5b:15:40:78:84:45:03:40:
ec:ce:7e:99:74:f3:5e:72:b4:31:40:28:62:aa:ad:35:c4:f5:
78:f6:d3:e9:2a:bd:23:47:2f:d9:9f:6d:f2:44:91:02:9a:90:
9e:a2:d1:64:7d:43:0d:6f:24:83:54:62:cd:cf:41:52:a4:ac:
f4:98:2a:1a:22:53:41:bb:9e:77:0e:69:33:bd:cd:89:52:69:
61:20:64:6a:c6:a2:1b:5d:47:0b:f4:6c:dd:c7:4a:e1:b2:5d:
b2:16:cf:c5:dc:3b:69:1a:af:8c:06:0c:2f:53:a3:e0:68:69:
37:40:0d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:55 2024 by rpki-client on console-ams.rpki-client.org