Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/t4fUKoGtluXDV_Xuv2o3JYKYiwI.roa
File: t4fUKoGtluXDV_Xuv2o3JYKYiwI.roa (raw, json)
Hash identifier: 6Qazmhr6VVYh9trWs94r/mHNb/tLRbLIJHOOzBgseE0=
Subject key identifier: B7:87:D4:2A:81:AD:96:E5:C3:57:F5:EE:BF:6A:37:25:82:98:8B:02
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 07E23B42
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/t4fUKoGtluXDV_Xuv2o3JYKYiwI.roa
Signing time: Thu 02 Jun 2022 03:21:20 +0000
ROA not before: Thu 02 Jun 2022 03:21:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132266818 (0x7e23b42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 2 03:21:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b787d42a81ad96e5c357f5eebf6a372582988b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:15:02:f1:d3:c4:31:de:08:91:ee:76:61:9c:
51:bc:da:8a:a7:2f:22:ae:92:85:fb:af:ec:4e:a3:
69:4e:94:7e:67:c9:bd:12:97:c1:48:7d:67:78:49:
c2:6f:40:15:0f:b3:74:ec:94:13:8f:f4:78:c2:a1:
61:4a:0b:0a:d1:fd:73:23:c9:35:f0:2e:a0:05:a7:
ce:1c:98:66:70:ca:35:39:8e:d9:31:a0:bc:d4:c3:
25:19:1b:d7:21:72:96:3a:dd:6d:1c:eb:8d:08:1e:
f1:70:d8:0d:66:4b:cd:6f:87:99:d3:db:c1:6f:63:
c7:b1:5a:6b:49:a3:30:32:78:80:54:ad:6f:59:94:
b1:e0:96:20:30:83:1e:16:ea:ec:b9:25:e3:46:4e:
5e:c5:82:d9:7f:c2:a5:c7:06:39:37:e5:00:39:cf:
71:8a:ed:46:a0:60:06:86:d7:0d:4d:ab:de:3b:84:
7b:46:50:9b:59:14:86:b6:76:b0:a1:15:21:a1:49:
1f:bc:64:b1:c1:31:a7:35:ad:27:25:64:d1:5a:7e:
c4:1b:4a:a8:9b:52:fd:b5:dd:d3:b9:71:20:c5:8b:
f2:8f:82:7b:71:d4:d6:a6:56:94:41:0f:55:51:73:
7a:b0:0e:92:ca:1c:a9:9d:0b:b2:e2:6e:ac:65:c3:
c4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:87:D4:2A:81:AD:96:E5:C3:57:F5:EE:BF:6A:37:25:82:98:8B:02
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/t4fUKoGtluXDV_Xuv2o3JYKYiwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
a7:5c:20:4b:2f:4d:ad:85:5b:e7:48:18:f5:ec:59:76:1b:0d:
b9:fb:4c:1c:98:1d:44:10:29:dc:8d:b3:06:63:ea:96:eb:c8:
71:f1:f3:91:a2:97:a2:34:4b:ee:9b:63:dc:6c:2b:1f:6b:9e:
40:e3:8f:03:3a:d1:8e:f3:03:b5:88:0d:6a:54:08:af:fe:83:
fe:aa:32:49:4e:3b:62:a9:0d:ea:43:cd:c8:fe:c6:a0:56:f4:
94:9c:f4:cd:63:15:9f:74:2d:dc:83:9f:df:32:ef:7c:cd:7a:
86:42:1b:2f:2d:ee:fa:ce:c5:bc:72:10:f5:97:3b:12:be:07:
95:57:75:1a:34:dc:cb:cf:80:d2:be:8e:fd:06:03:72:6a:1c:
7c:da:3d:bd:da:f8:b7:b6:f0:ab:b5:1b:14:e9:60:5f:2b:0f:
02:4e:63:10:57:00:97:e0:ec:e3:3a:71:d2:bf:c5:8e:ae:de:
e6:d1:57:07:44:b7:ff:90:ff:68:fd:f7:27:4f:55:4b:33:8a:
6f:0a:5e:04:cb:d8:e5:bf:2d:e1:ac:b8:85:ad:12:49:bd:f8:
54:2d:a0:4c:39:e1:23:ca:d6:c4:af:a0:1b:25:b4:26:85:4f:
fe:65:30:63:a5:ef:96:fd:8a:2f:9c:6a:74:f2:c0:98:a9:ea:
8c:eb:eb:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:47 2023 by rpki-client on console-ams.rpki-client.org