Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/zYDfgAf872vZ8jaiYm2zb1tget4.roa
File: zYDfgAf872vZ8jaiYm2zb1tget4.roa (raw, json)
Hash identifier: oapbcuHVghcU4o6j4UcM+OtKiAOp3Df8lQOBL3x810Y=
Subject key identifier: CD:80:DF:80:07:FC:EF:6B:D9:F2:36:A2:62:6D:B3:6F:5B:60:7A:DE
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 066A19B4
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/zYDfgAf872vZ8jaiYm2zb1tget4.roa
Signing time: Mon 02 May 2022 04:51:00 +0000
ROA not before: Mon 02 May 2022 04:51:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107616692 (0x66a19b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: May 2 04:51:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cd80df8007fcef6bd9f236a2626db36f5b607ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:77:e4:da:54:05:c7:52:66:d5:37:2c:36:6c:
24:75:f0:71:22:bd:86:ee:22:53:29:bc:3a:5e:b1:
4f:73:70:e5:3d:99:ec:9a:c7:ec:57:58:bf:71:b3:
8b:39:34:f2:bb:8c:9b:c6:cc:df:4f:bd:c7:12:e4:
7b:ce:e8:6f:9e:d1:02:e8:52:97:63:9e:30:8a:9b:
25:ad:6a:22:d3:4b:ab:6d:41:d3:8f:88:e8:e3:73:
79:6d:39:cf:d1:77:9c:a4:6c:1d:a2:bb:4c:73:60:
ac:d2:87:ff:e3:98:bb:ee:db:e2:46:81:4a:50:3a:
04:b3:57:a5:45:c7:83:2b:dc:d5:ae:9b:1c:f3:2c:
90:1c:81:00:b1:5f:6e:9c:70:e3:61:f2:a1:4f:d6:
a8:aa:b6:09:31:cb:4d:b5:cc:88:17:b9:11:89:d6:
6e:a9:07:bf:ac:c8:91:12:bf:41:8f:60:0f:fd:27:
59:93:43:37:6b:a2:98:e7:87:00:cb:e3:54:08:5b:
3e:aa:53:cb:24:e4:c5:c7:c8:9e:54:00:0a:3f:31:
d5:85:76:05:c3:19:7b:b1:75:f5:e5:27:4d:a3:ac:
f1:e7:a8:e8:c0:68:22:67:64:96:bb:1b:ae:fb:79:
eb:ba:b8:1a:89:75:a6:72:fa:2e:24:e8:e2:eb:53:
d7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:80:DF:80:07:FC:EF:6B:D9:F2:36:A2:62:6D:B3:6F:5B:60:7A:DE
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/zYDfgAf872vZ8jaiYm2zb1tget4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
0f:98:98:cc:18:d4:0f:df:64:09:d4:d7:4b:50:d7:c4:cd:9b:
f7:08:17:95:65:b1:0b:b2:c9:6d:98:2f:39:e5:e8:de:12:4f:
2d:4f:01:f1:a8:1c:52:af:b3:7d:eb:f3:42:30:b7:8c:06:b2:
c7:40:bd:61:09:68:25:77:2a:66:44:69:0a:08:f2:94:d7:fc:
80:39:b3:08:e9:f2:69:0a:90:df:a2:32:41:e3:51:f9:f8:8a:
2e:d1:fb:a6:37:fb:9f:a8:45:ab:ed:7c:31:2b:e0:42:12:c8:
9f:dc:4b:a0:d7:d1:9a:4c:ac:fc:33:8f:43:e4:b1:31:e2:2d:
b7:6f:77:4c:26:90:5b:79:3b:f1:20:14:77:80:8e:a1:ad:e9:
4a:ac:26:52:dd:a1:10:89:30:15:a0:86:e6:de:88:e2:16:ac:
aa:29:d5:39:17:4f:14:1b:b6:f4:9e:fc:91:0c:63:98:7c:7d:
81:78:f4:70:c4:68:73:15:21:0a:11:e3:af:1c:14:91:f2:48:
1e:c4:76:1b:e5:52:09:5e:0b:99:e5:e5:41:1d:74:b5:d8:00:
93:3c:5f:ce:44:ba:b3:33:6a:00:2c:2b:5d:19:2c:8d:e8:ca:
52:cf:d8:fe:4e:09:05:f0:fd:3c:bc:17:86:32:ac:c9:d1:a1:
b1:8c:dd:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:57 2023 by rpki-client on console-fra.rpki-client.org