Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/yGMFCDIh_1NrdsLn2VmZcDKf9OQ.roa
File: yGMFCDIh_1NrdsLn2VmZcDKf9OQ.roa (raw, json)
Hash identifier: KTkGjotVsJsNTEhvOg5qnP5B5l2Ap+T0dFzP7IEq2DM=
Subject key identifier: C8:63:05:08:32:21:FF:53:6B:76:C2:E7:D9:59:99:70:32:9F:F4:E4
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 07C6A8C6
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/yGMFCDIh_1NrdsLn2VmZcDKf9OQ.roa
Signing time: Tue 31 May 2022 01:47:13 +0000
ROA not before: Tue 31 May 2022 01:47:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130459846 (0x7c6a8c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: May 31 01:47:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c86305083221ff536b76c2e7d9599970329ff4e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1a:9c:2f:87:16:5f:7b:2d:a3:e8:1d:56:02:
1c:e7:04:34:4c:b4:31:4e:24:6a:85:18:8d:91:f9:
c0:dc:b8:c6:f2:a2:95:94:8f:46:53:82:0f:40:98:
ff:64:0f:db:b1:61:f4:2c:be:12:44:a1:9e:67:e7:
20:8d:d0:75:40:f4:8f:d4:56:56:c1:59:29:1e:d7:
fb:eb:5f:fe:ee:42:46:df:9d:50:cf:c0:18:cc:0e:
65:7a:7e:c0:18:98:98:cc:85:08:6d:a1:9e:15:61:
f3:03:3e:35:f0:b1:c3:04:86:73:83:78:b5:55:63:
b6:ac:29:a8:b4:b0:2a:1b:2f:89:56:0c:3e:dd:ef:
78:f0:1a:d8:00:34:e4:f8:c8:b6:bf:15:d6:f5:13:
74:f9:22:1e:22:ac:4d:92:90:94:f0:f4:0d:61:1d:
4a:6c:b6:cb:d3:4c:eb:fa:eb:0a:8b:2f:82:67:10:
9c:8d:fb:c3:e6:57:d3:4c:88:71:0a:20:f0:37:d7:
a7:3f:d3:12:0e:0b:4e:2d:88:e4:a5:81:43:02:71:
37:85:ca:00:6a:9c:fa:8f:7d:d2:96:4e:f0:40:8d:
cc:5b:cd:dd:93:d3:86:79:23:68:45:e0:46:bf:6b:
eb:94:93:5f:12:5b:32:ec:91:f1:5d:c0:1b:f1:fb:
e1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:63:05:08:32:21:FF:53:6B:76:C2:E7:D9:59:99:70:32:9F:F4:E4
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/yGMFCDIh_1NrdsLn2VmZcDKf9OQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
7e:cd:b3:97:ff:4a:28:c0:9d:ed:5c:5c:b8:de:15:9d:36:f3:
a1:d9:81:fa:a8:bb:f4:9f:c3:9e:58:7d:b7:f3:0e:1e:01:2e:
d7:63:b1:3b:40:fc:1d:02:84:c4:a4:70:e1:06:80:d0:ab:f1:
5d:e6:83:67:f2:8b:fb:64:6f:c5:97:f7:68:90:90:7b:72:47:
d5:1c:58:24:c9:20:7a:51:0e:11:3c:2a:43:ca:5a:46:2c:a1:
28:69:aa:5f:06:28:27:12:cf:95:92:5b:dd:64:b6:05:29:81:
4d:e9:50:6f:fa:a2:5f:ad:4b:ff:f3:7a:86:e8:1e:39:65:88:
47:55:5b:c3:33:2d:b7:1a:1e:d1:b9:0b:b5:dd:8b:58:30:1a:
52:60:d5:79:91:53:d2:64:4b:6c:12:32:c6:65:2d:bb:e6:a1:
ce:67:24:5c:8d:c6:bf:19:67:62:eb:84:e1:1c:73:1e:f5:f8:
3b:0c:7e:65:86:c9:86:65:c7:e6:35:90:17:0a:6d:2e:8b:80:
58:a7:4b:76:f4:6b:fc:0c:2c:de:32:2c:f9:45:1a:2b:e9:f0:
d9:dd:84:ea:f1:45:74:05:2e:ad:74:ca:d0:57:26:4f:3c:0e:
84:8c:7b:e6:48:d9:d4:c5:4a:b3:85:98:96:18:19:f6:da:8d:
8d:ca:8a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:47 2023 by rpki-client on console-ams.rpki-client.org