Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/tlIYrvrWFmENNMIbbrXeumWK4sE.roa
File: tlIYrvrWFmENNMIbbrXeumWK4sE.roa (raw, json)
Hash identifier: ReXkaEhbVUo/wa01XWm0mtx8ZlvjoWpTH2OUrk2rUtA=
Subject key identifier: B6:52:18:AE:FA:D6:16:61:0D:34:C2:1B:6E:B5:DE:BA:65:8A:E2:C1
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 03C7D0C6
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/tlIYrvrWFmENNMIbbrXeumWK4sE.roa
Signing time: Tue 01 Feb 2022 14:59:04 +0000
ROA not before: Tue 01 Feb 2022 14:59:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63426758 (0x3c7d0c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Feb 1 14:59:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b65218aefad616610d34c21b6eb5deba658ae2c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ac:ae:73:c8:60:e7:06:6d:e1:f7:dc:3e:32:
85:be:b9:b8:95:72:d3:6a:c8:36:e5:f9:b2:4f:0b:
ec:9e:21:07:9a:ca:ef:1e:0d:78:56:f5:a5:e4:f8:
5d:1c:f1:fd:ce:68:c5:b2:59:2e:f4:f2:75:89:0c:
c3:86:19:b2:b6:91:33:ba:ea:8a:31:3d:f3:12:d6:
a1:eb:07:f1:49:bd:33:64:8f:9b:79:c2:d9:89:72:
4b:f3:e1:62:82:22:65:fd:aa:c8:4c:57:6b:89:3f:
1c:2e:89:3c:37:0b:5c:ed:c0:6b:47:54:54:2e:3d:
8d:a4:65:6f:68:8c:ac:98:d0:c8:71:e6:ec:a2:05:
15:e1:c4:ff:13:c5:52:5d:a8:7f:e3:e3:76:ab:c6:
cb:5e:a9:34:99:72:5e:1b:93:64:d3:6f:e1:87:7b:
37:68:ed:d5:33:28:5c:ac:64:31:f5:b5:0e:89:ab:
d5:e3:90:f9:ec:e5:ab:d2:e4:a1:b6:c4:23:26:d8:
ab:cc:43:f3:72:7e:92:21:f2:47:58:33:13:52:46:
28:4f:19:0f:08:04:0f:7e:23:0f:3a:91:56:c9:ec:
5a:ca:ee:40:78:de:1d:11:f9:2e:db:2c:da:08:1d:
50:fe:78:ab:cd:a7:c8:2d:df:be:83:4d:65:fa:d3:
0f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:52:18:AE:FA:D6:16:61:0D:34:C2:1B:6E:B5:DE:BA:65:8A:E2:C1
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/tlIYrvrWFmENNMIbbrXeumWK4sE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
86:c0:11:f6:7d:d5:15:cf:2e:2e:7d:f3:5e:e6:de:38:b3:65:
56:24:42:43:3f:cc:d6:c9:9e:5d:83:45:1e:33:72:e5:db:1e:
f0:b1:d3:21:1f:7b:c2:80:34:49:d0:c9:40:06:46:e1:ac:68:
ee:ae:3f:11:29:fb:18:56:e3:c2:e6:ed:f6:0b:d7:09:45:20:
60:21:d0:32:ec:ea:4f:6a:ee:ed:fe:26:41:59:72:1e:8a:14:
fc:e5:8c:60:51:30:55:5e:db:37:10:8c:d1:17:38:e5:26:cd:
d9:11:a7:06:66:cb:7b:1c:c7:cd:e7:39:58:9e:6c:05:16:48:
ff:54:dc:c9:a0:39:ec:8b:d0:e9:75:fe:ab:8b:75:78:99:30:
53:82:80:ac:04:b3:db:fc:78:68:ff:fa:de:0b:24:f5:27:cd:
c6:d9:68:cb:b3:b3:85:05:0b:c0:24:92:6d:de:5d:35:6b:50:
d0:a8:50:ed:5a:92:ec:2e:ca:02:0b:5e:7f:68:10:92:f3:dc:
d0:33:d6:d0:3d:fb:9a:d5:0f:50:11:c9:df:2e:4c:38:38:88:
d5:85:42:a2:be:e2:9b:ff:8c:5f:9a:e1:18:34:a3:da:aa:42:
6e:14:f3:c0:3b:e4:53:00:c3:0f:8e:49:1f:3c:cc:23:28:08:
a7:da:bb:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:55 2024 by rpki-client on console-ams.rpki-client.org