Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/swowAYfyHxSjVXTG45giK_vZnnE.roa
File: swowAYfyHxSjVXTG45giK_vZnnE.roa (raw, json)
Hash identifier: Z4dH2jHSizmici9zOZK1N9QjKZUara9aZBi7LNUBLyY=
Subject key identifier: B3:0A:30:01:87:F2:1F:14:A3:55:74:C6:E3:98:22:2B:FB:D9:9E:71
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 05AC0C99
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/swowAYfyHxSjVXTG45giK_vZnnE.roa
Signing time: Thu 07 Apr 2022 01:44:45 +0000
ROA not before: Thu 07 Apr 2022 01:44:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95161497 (0x5ac0c99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Apr 7 01:44:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b30a300187f21f14a35574c6e398222bfbd99e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8c:57:14:e9:53:ff:40:8a:27:61:7c:0d:75:
0a:f3:d8:ba:cc:dc:5f:07:67:2d:db:8f:ce:e5:05:
31:05:e6:06:d1:ea:be:30:c7:76:ab:e9:b1:53:b1:
d0:ff:92:ef:a6:75:47:f8:ca:eb:58:85:c7:85:b0:
cb:26:80:22:5a:89:62:92:9c:8c:77:cd:f6:b4:65:
35:40:6a:a4:a6:8f:1d:9f:a9:82:1e:82:fb:32:40:
f3:8d:63:e6:3f:aa:25:53:90:82:38:c9:cb:78:11:
d4:58:f6:e9:5d:f7:77:1e:06:fb:ab:1c:3b:06:ba:
26:b1:fe:37:b1:2a:f8:04:a8:69:ac:bb:ea:de:39:
81:19:5b:bb:66:31:0f:86:a8:87:58:1c:d2:ab:60:
da:40:d0:26:ab:46:1f:a4:69:d6:76:10:e0:eb:c6:
0b:de:db:1e:b6:db:b9:7b:cc:23:1b:54:65:63:74:
ef:1d:ca:74:ed:fa:2f:8d:69:ab:de:48:0d:50:30:
30:46:55:f2:58:d4:75:59:8c:f8:3d:ad:f3:d3:33:
9f:80:f8:e6:3f:36:8b:10:e6:ba:2e:78:2f:c6:ea:
80:7c:30:fe:28:b2:92:63:07:72:52:c3:90:c2:54:
8c:d5:74:06:03:81:cc:eb:76:98:3f:ff:f4:f8:34:
49:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:0A:30:01:87:F2:1F:14:A3:55:74:C6:E3:98:22:2B:FB:D9:9E:71
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/swowAYfyHxSjVXTG45giK_vZnnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
55:0e:f3:35:06:4b:4e:18:fc:e2:a7:ca:37:d0:d4:f6:e5:68:
1d:54:22:10:ac:f0:71:a9:fa:9a:cf:75:b3:72:d6:9d:4a:90:
b7:8a:1a:f3:5a:ad:08:80:b8:4c:17:49:81:2b:06:95:3b:14:
a5:76:53:24:87:2a:53:f2:60:48:a8:4d:e6:cf:c9:27:7a:fa:
a3:2e:dd:15:b2:68:33:12:af:73:96:00:4f:74:0f:ab:a2:b5:
6b:fc:ae:71:fd:b0:32:8a:55:94:6d:db:77:1e:82:b2:6e:d0:
08:eb:24:f3:fc:80:08:d1:90:f7:3b:4b:db:2b:f0:af:6e:97:
50:41:b3:09:55:47:dc:5a:5b:35:b0:5f:af:38:ec:7d:2b:11:
37:26:30:90:2c:3b:dd:21:bf:76:09:2d:f9:9e:83:9c:33:da:
b0:04:ba:70:10:cb:2a:17:47:c2:ac:2f:ff:92:1e:bb:9b:d1:
77:55:59:50:51:f9:dd:db:17:a2:f0:3f:0c:46:a5:14:59:ae:
92:80:1a:be:31:87:dd:cf:e8:99:21:b9:d3:e1:2e:94:86:ba:
10:13:0a:8a:81:de:bb:7f:e4:30:8f:d9:5e:83:5a:3a:27:76:
72:90:f3:1f:f2:47:e7:36:0c:dc:d9:2a:43:6c:71:6a:26:b6:
68:51:1f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:57 2023 by rpki-client on console-fra.rpki-client.org