Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/wF5a10lcb8IPf2QNuY_CM19o65U.roa
File: wF5a10lcb8IPf2QNuY_CM19o65U.roa (raw, json)
Hash identifier: kmRh1WfyqVg6cJ52aqYZDL5Tbz/0z07IfP3DnxduMsI=
Subject key identifier: C0:5E:5A:D7:49:5C:6F:C2:0F:7F:64:0D:B9:8F:C2:33:5F:68:EB:95
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 09485170
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/wF5a10lcb8IPf2QNuY_CM19o65U.roa
Signing time: Wed 29 Jun 2022 15:22:11 +0000
ROA not before: Wed 29 Jun 2022 15:22:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155734384 (0x9485170)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 29 15:22:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c05e5ad7495c6fc20f7f640db98fc2335f68eb95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:45:b2:70:ce:59:e7:5e:6e:13:d1:75:da:2c:
54:d4:11:1f:2a:32:74:96:01:29:4d:c5:11:1e:ac:
ef:78:e0:0b:47:cf:6b:a9:ea:3d:47:44:70:27:be:
88:82:24:40:89:66:97:48:8c:13:01:84:e6:d8:46:
62:f6:36:fb:31:04:df:ed:8a:65:f9:dc:b6:c6:b7:
74:a4:bc:23:e9:bc:d8:54:2c:90:45:4f:44:df:56:
9d:ea:db:87:6f:d0:b8:ab:82:e3:50:43:1b:24:91:
87:3e:d2:0d:ae:a1:5b:28:24:5d:b6:6d:dd:3f:e5:
44:7b:ae:66:11:27:0d:91:3c:81:24:af:69:66:b6:
4f:ad:1a:a6:0f:19:b5:a7:af:57:43:48:57:70:4c:
93:e0:a9:d6:14:17:d8:33:2f:5a:d2:c7:c7:39:f1:
4f:fb:51:00:a5:be:b6:7e:41:48:f5:43:a8:90:9b:
bb:8a:f3:f0:91:90:30:19:c1:dd:85:bd:89:57:64:
a8:0a:5b:23:fa:b9:70:fa:1a:7d:a5:27:0c:ef:2d:
b8:85:5a:20:4a:25:3c:c9:5d:d6:ce:a5:c4:6c:23:
89:e2:c3:33:f6:a6:8a:53:84:d9:ab:08:e2:b3:a7:
76:d2:b9:d4:90:08:ef:62:00:a0:49:a2:4e:78:2e:
74:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:5E:5A:D7:49:5C:6F:C2:0F:7F:64:0D:B9:8F:C2:33:5F:68:EB:95
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/wF5a10lcb8IPf2QNuY_CM19o65U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
60:1f:25:10:a5:0f:f1:7b:d6:f4:1d:c1:ae:4c:96:d5:f7:f2:
9b:c7:29:a6:83:dc:b3:17:2b:50:cd:a5:40:2e:f4:5f:98:d8:
0b:41:e3:a3:92:8a:41:76:7e:38:fb:f3:bd:aa:86:18:a7:45:
89:56:90:83:c4:ca:14:97:70:44:5e:d8:a1:9c:0d:03:69:85:
6b:55:a8:47:64:5b:a6:db:03:2b:49:12:59:a3:54:01:be:96:
77:63:43:38:e8:f7:3b:1f:00:ff:37:b7:21:3c:8d:2b:65:c5:
4b:5e:8f:cd:44:cd:55:8b:58:d5:61:8a:4a:eb:08:d4:98:eb:
ec:0f:74:65:59:81:8e:b0:d5:3e:ba:90:96:d7:9f:ce:91:a4:
b2:31:04:68:27:c7:6a:75:25:20:ca:27:64:8e:13:34:73:67:
f2:f0:5e:3a:67:64:ac:46:51:98:bd:7d:52:ce:42:28:4e:0b:
e2:81:7d:98:f4:23:3b:76:a9:71:d0:ec:02:a7:ae:3a:64:24:
37:6b:03:87:49:30:02:e1:38:bf:f2:83:e9:99:d2:fe:30:4b:
7e:98:52:88:8e:94:21:7a:23:86:7d:dd:e3:b0:de:d6:30:a5:
70:91:cd:3d:d7:6e:d5:0e:c8:1f:be:ad:d1:81:7f:d5:00:ed:
bd:fc:aa:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:55 2024 by rpki-client on console-ams.rpki-client.org