Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/u8ehxi6KTV1oUmCuFkrwiiVH0q8.roa
File: u8ehxi6KTV1oUmCuFkrwiiVH0q8.roa (raw, json)
Hash identifier: FkpVZJvEbCXwRWYECRX78ZOxQYJaIxnxDlNHkRhA9rY=
Subject key identifier: BB:C7:A1:C6:2E:8A:4D:5D:68:52:60:AE:16:4A:F0:8A:25:47:D2:AF
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 07832123
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/u8ehxi6KTV1oUmCuFkrwiiVH0q8.roa
Signing time: Thu 26 May 2022 02:58:13 +0000
ROA not before: Thu 26 May 2022 02:58:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126034211 (0x7832123)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: May 26 02:58:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bbc7a1c62e8a4d5d685260ae164af08a2547d2af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e4:14:20:a4:08:ea:be:36:42:05:58:cb:81:
61:b9:83:7e:35:77:ee:55:c8:a6:2d:52:89:d7:00:
86:f4:d2:9e:17:a1:4f:78:ea:69:15:b9:f8:8e:e3:
2f:0d:c3:84:70:d7:51:98:6f:e4:dc:4b:4c:6b:54:
90:fe:32:ca:75:68:15:3a:e9:03:03:22:27:dd:0c:
bd:d4:0b:43:1e:f1:66:17:5e:52:1b:ce:2c:22:f7:
06:52:b3:84:fa:00:85:a0:73:bf:9b:9b:2b:01:5c:
3f:c3:f2:6a:31:86:18:60:a9:c0:db:7e:d3:5d:ef:
c9:e6:ba:8e:1d:d6:d2:17:8f:39:ff:f9:90:67:ba:
cd:c3:24:87:40:85:79:f1:b8:e9:f1:11:fa:b6:ad:
2f:07:26:7b:8f:85:30:13:d3:d7:a3:7b:82:a9:e3:
8a:29:ee:47:53:4c:d3:69:71:76:d2:10:4a:a1:d7:
d1:93:c8:19:c5:3e:5e:56:28:02:7d:46:fc:7d:67:
10:0f:43:b8:5a:2f:ab:97:1b:c8:19:97:8a:2d:d4:
3e:28:7e:ef:25:58:7e:06:ba:84:d3:1f:c7:0d:83:
11:ec:70:c7:9d:66:35:a3:72:8f:12:51:2b:e8:32:
97:e8:55:80:bb:d8:a7:c2:b1:32:3d:d4:17:10:af:
a1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C7:A1:C6:2E:8A:4D:5D:68:52:60:AE:16:4A:F0:8A:25:47:D2:AF
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/u8ehxi6KTV1oUmCuFkrwiiVH0q8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
4e:d9:01:fa:87:ae:cd:90:f8:57:65:62:f5:eb:b2:7e:99:b8:
c0:b6:67:f5:ec:56:9c:04:be:6e:1d:37:89:33:78:f8:38:5c:
44:bf:04:2c:ca:23:f0:db:0d:7d:07:02:bd:30:68:b6:36:51:
76:3a:94:43:06:80:35:fb:4c:11:89:6a:8e:f7:30:b1:60:ad:
b1:bf:a9:64:90:23:cb:a9:12:76:b4:3b:3e:7e:4d:7d:e4:fe:
b1:86:b5:00:81:f3:fe:21:fe:ab:f4:94:dc:68:61:c6:ce:4b:
74:2c:52:c7:82:2a:35:c3:ca:97:f1:d2:7b:fb:5f:ef:7c:be:
ab:89:ed:e3:fe:cb:b8:6f:b9:05:58:f1:02:12:87:52:7f:82:
15:26:f9:3c:8e:14:c4:c0:ba:5f:a8:8e:7e:6b:77:5d:76:19:
d8:3c:35:9f:ef:cc:a1:12:59:be:c4:d2:43:15:b1:a1:eb:63:
af:ee:c5:53:b8:33:8b:89:e1:72:2e:e8:9f:38:03:e6:19:c7:
93:c5:61:bf:44:46:da:97:b7:eb:29:c3:fc:5d:d0:aa:00:a0:
9b:54:ce:3d:f1:52:ad:f4:2a:df:fd:d8:7a:e0:af:51:92:ed:
3a:7b:32:7d:17:1c:e6:57:be:08:36:ca:6e:63:9f:4d:68:98:
4d:d2:b9:0d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEB4MhIzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDUy
NjAyNTgxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmJjN2ExYzYyZThh
NGQ1ZDY4NTI2MGFlMTY0YWYwOGEyNTQ3ZDJhZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMHkFCCkCOq+NkIFWMuBYbmDfjV37lXIpi1SidcAhvTSnheh
T3jqaRW5+I7jLw3DhHDXUZhv5NxLTGtUkP4yynVoFTrpAwMiJ90MvdQLQx7xZhde
UhvOLCL3BlKzhPoAhaBzv5ubKwFcP8PyajGGGGCpwNt+013vyea6jh3W0hePOf/5
kGe6zcMkh0CFefG46fER+ratLwcme4+FMBPT16N7gqnjiinuR1NM02lxdtIQSqHX
0ZPIGcU+XlYoAn1G/H1nEA9DuFovq5cbyBmXii3UPih+7yVYfga6hNMfxw2DEexw
x51mNaNyjxJRK+gyl+hVgLvYp8KxMj3UFxCvoVUCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBS7x6HGLopNXWhSYK4WSvCKJUfSrzAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L3U4ZWh4aTZLVFYxb1VtQ3VGa3J3aWlWSDBxOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAZfYBDAPBAIAAjAJAwcBIAEH/AAC
MA0GCSqGSIb3DQEBCwUAA4IBAQBO2QH6h67NkPhXZWL167J+mbjAtmf17FacBL5u
HTeJM3j4OFxEvwQsyiPw2w19BwK9MGi2NlF2OpRDBoA1+0wRiWqO9zCxYK2xv6lk
kCPLqRJ2tDs+fk195P6xhrUAgfP+If6r9JTcaGHGzkt0LFLHgio1w8qX8dJ7+1/v
fL6rie3j/su4b7kFWPECEodSf4IVJvk8jhTEwLpfqI5+a3dddhnYPDWf78yhElm+
xNJDFbGh62Ov7sVTuDOLieFyLuifOAPmGceTxWG/REbal7frKcP8XdCqAKCbVM49
8VKt9Crf/dh64K9Rku06ezJ9FxzmV74INspuY59NaJhN0rkN
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:55 2024 by rpki-client on console-ams.rpki-client.org