Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/yvsWihl9R7QTsBCTmYAj9P8Hap4.roa
File: yvsWihl9R7QTsBCTmYAj9P8Hap4.roa (raw, json)
Hash identifier: Tsarrz1uBe8sDOgtkbYt4YXVbGGxnEp5k6oz34NJH1g=
Subject key identifier: CA:FB:16:8A:19:7D:47:B4:13:B0:10:93:99:80:23:F4:FF:07:6A:9E
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 060A5A03
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/yvsWihl9R7QTsBCTmYAj9P8Hap4.roa
Signing time: Tue 19 Apr 2022 06:55:39 +0000
ROA not before: Tue 19 Apr 2022 06:55:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101341699 (0x60a5a03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Apr 19 06:55:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cafb168a197d47b413b01093998023f4ff076a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:98:78:ec:ed:92:28:e8:35:c7:50:f3:0c:82:
71:0a:32:15:8b:5b:68:4b:22:94:3e:01:67:93:95:
d9:18:ce:c9:9e:ae:c1:e5:00:9a:6e:5c:17:f7:08:
3c:b9:4e:8a:6b:a2:0e:73:e4:87:30:cc:90:1c:ee:
bb:89:d6:fb:f7:66:0f:85:9c:36:73:9c:5c:ff:24:
3d:e4:22:5d:31:15:05:6c:98:d0:50:2c:76:33:5c:
79:83:6f:03:67:df:e5:38:8b:87:91:e2:9a:32:60:
86:0e:88:97:a3:42:11:ce:49:a0:bb:6e:19:d4:57:
71:68:33:ad:a7:b2:b9:12:af:f4:8f:38:5b:52:6f:
fc:83:6d:aa:9e:96:6f:d8:70:32:cc:7d:00:44:54:
63:6a:bf:cf:a5:c6:a7:c3:02:58:cf:c8:88:0b:3b:
89:fe:e7:1b:1b:47:9a:06:7a:66:ed:2c:18:43:3a:
51:e4:7b:61:d1:fb:26:5e:18:33:97:45:7d:2e:be:
34:f7:bc:5c:4f:28:41:32:2c:70:36:f4:2f:77:aa:
2a:57:81:e3:44:47:0c:c7:e2:2f:cf:38:bc:20:c6:
86:a7:80:94:65:ad:ac:5c:ca:4b:4f:95:37:41:23:
c0:27:00:6a:fb:94:e1:d8:01:7c:fb:c4:20:44:dc:
47:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:FB:16:8A:19:7D:47:B4:13:B0:10:93:99:80:23:F4:FF:07:6A:9E
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/yvsWihl9R7QTsBCTmYAj9P8Hap4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
95:98:bf:81:18:70:00:09:bb:aa:6f:db:02:a4:c8:a8:dc:5d:
a9:dd:2a:31:b3:79:98:7b:a4:d8:09:2e:d1:98:a5:1f:68:68:
76:f9:5b:4b:a5:28:7f:c2:71:bc:48:41:c6:da:a3:09:6b:bf:
b2:5e:fe:1a:a9:57:c0:23:1c:87:8f:30:11:7d:4e:50:21:9a:
ff:cb:7b:ce:86:c8:32:86:49:a1:3a:d8:70:9c:4a:26:89:1b:
1a:70:9c:22:f0:21:c6:bd:c9:36:c3:47:50:f9:5d:00:7c:38:
6c:74:a8:3d:13:93:89:06:8e:7b:e9:b4:21:db:5e:e5:99:26:
8c:5b:97:4b:ac:88:da:bf:8e:5b:30:39:a9:63:61:39:95:f6:
2b:c7:c5:80:ec:4b:c3:ac:c2:32:3f:8f:a5:77:50:c5:be:d7:
8e:a4:76:53:4c:07:4d:76:71:31:f4:34:ae:5d:3a:5d:9a:57:
15:17:4b:d9:59:98:0c:a7:62:11:3d:8e:fe:9a:ee:bf:7b:c5:
16:4c:d2:5b:63:db:76:f6:23:07:f5:6b:81:40:5f:c5:51:6f:
ab:85:c5:fd:be:d9:8a:62:f7:72:74:46:de:bc:d0:8f:73:ec:
d9:63:fe:96:75:c9:fa:06:86:a9:dd:3b:20:2a:7b:a1:df:b9:
93:7b:49:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:28 2024 by rpki-client on console-fra.rpki-client.org