Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Bp3FXpj4xCj6OsU2GiE_77roJVU.roa
File: Bp3FXpj4xCj6OsU2GiE_77roJVU.roa (raw, json)
Hash identifier: R3nf0WlzfDeuVDm63zX27bgf10pOrLtVrjZiiDM3j7Y=
Subject key identifier: 06:9D:C5:5E:98:F8:C4:28:FA:3A:C5:36:1A:21:3F:EF:BA:E8:25:55
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 04DCFCB4
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Bp3FXpj4xCj6OsU2GiE_77roJVU.roa
Signing time: Wed 09 Mar 2022 12:23:13 +0000
ROA not before: Wed 09 Mar 2022 12:23:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81591476 (0x4dcfcb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Mar 9 12:23:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=069dc55e98f8c428fa3ac5361a213fefbae82555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d1:0d:c5:8a:b1:d6:f0:03:5a:47:ff:44:62:
87:d5:bf:9b:e3:f0:69:1b:9d:2d:45:26:fe:7e:7b:
e0:be:0d:d7:1c:9b:e5:07:54:7b:b5:80:19:43:4e:
f6:dd:5d:18:bc:14:52:29:4e:66:ec:ef:8f:ee:d7:
d9:74:e2:79:9a:44:b0:5a:58:dd:10:9b:88:00:e5:
6f:4b:15:24:8c:fe:13:eb:15:be:c4:c2:83:12:79:
4c:ff:38:79:23:bd:3b:6a:c9:c9:7b:81:02:f6:6a:
6c:3e:c3:1b:f4:fe:50:9d:36:58:69:54:40:44:74:
fa:af:34:37:c0:fb:5e:df:4d:8a:d7:9e:ae:5c:7c:
37:12:27:35:f7:75:e3:6e:4c:ff:99:31:c1:81:62:
05:6d:35:ae:32:9f:a2:77:d0:0b:fe:74:0e:7f:48:
6d:08:6c:71:61:ad:6e:ed:54:e8:e0:8e:33:ff:33:
0a:2a:07:cd:43:f7:77:f7:83:4f:ec:52:c8:22:65:
48:80:e7:5f:b0:c7:f6:f2:cb:1a:e5:da:60:3d:5a:
1d:a2:04:41:7d:0f:f3:6b:f5:03:6d:ac:49:86:26:
de:ab:2f:f9:a7:45:af:89:38:14:da:8f:d3:d0:a3:
a5:70:c0:65:77:33:65:07:d1:ba:f3:d3:c3:32:b0:
95:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:9D:C5:5E:98:F8:C4:28:FA:3A:C5:36:1A:21:3F:EF:BA:E8:25:55
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Bp3FXpj4xCj6OsU2GiE_77roJVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
2a:d3:54:7a:ea:73:32:41:de:71:1f:5b:63:79:2a:63:2d:92:
9a:a2:fc:3e:74:e1:09:90:86:1b:5a:fb:ff:aa:cc:50:6a:46:
d4:41:da:f0:7f:16:21:45:06:92:31:49:6d:d2:eb:b5:54:bd:
a3:e0:37:2a:85:69:69:42:48:5c:0f:8f:55:6b:da:f5:f5:29:
58:09:2e:1f:29:d1:17:c1:5b:48:39:fb:5c:6a:41:89:58:94:
88:42:38:df:a0:70:27:e5:5e:bc:fa:d5:ac:3c:28:f3:40:b1:
19:1a:7a:79:05:58:06:7f:9f:8f:98:29:4e:11:7d:d1:04:92:
dd:55:df:76:a1:f9:8e:18:ae:76:36:a7:a9:f7:80:28:67:5b:
1e:3e:b8:ee:ad:ce:1b:fa:72:f4:c3:05:ca:8f:30:f4:0b:41:
6e:96:83:8e:96:e2:e5:d5:1a:46:f7:9f:b0:54:45:a4:ed:76:
1e:aa:ca:83:aa:cd:61:68:37:f6:a3:6b:17:f9:4d:cb:02:3d:
18:a2:b5:b2:72:a9:a6:65:a9:92:2d:8d:cf:1e:b8:ed:9b:d8:
0a:85:96:59:4d:79:4d:c6:18:04:69:dd:e4:ce:24:d9:73:f0:
fe:49:75:b6:01:b0:8c:8d:77:00:bb:e2:01:2f:36:0e:8d:eb:
10:45:c3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:49 2023 by rpki-client on console.sobornost.net