Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Qh5jhaWofTYVq_wx2L0VrYAjdb4.roa
File: Qh5jhaWofTYVq_wx2L0VrYAjdb4.roa (raw, json)
Hash identifier: 4UOWSuyD0FCCZoc+aLSzgO4tG6JkUQt0GI1riDR7M7c=
Subject key identifier: 42:1E:63:85:A5:A8:7D:36:15:AB:FC:31:D8:BD:15:AD:80:23:75:BE
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 04E835D4
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Qh5jhaWofTYVq_wx2L0VrYAjdb4.roa
Signing time: Thu 10 Mar 2022 12:11:56 +0000
ROA not before: Thu 10 Mar 2022 12:11:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82326996 (0x4e835d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Mar 10 12:11:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=421e6385a5a87d3615abfc31d8bd15ad802375be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f6:37:bf:fa:f5:6f:04:ce:2e:76:6b:d4:dd:
c9:f8:e3:75:a8:43:c0:ed:4d:e6:88:95:10:d1:da:
69:9c:32:df:87:00:a9:e7:ce:48:84:4b:ee:ed:a4:
33:7c:8d:1a:65:e8:0a:36:a7:f5:13:ef:6f:46:45:
fb:da:df:0a:22:34:9b:8c:7e:47:a4:72:98:61:61:
4a:22:be:ad:85:40:70:3c:55:af:32:0e:9c:d6:6e:
82:89:0a:f2:05:cd:d6:f8:cf:e5:14:b3:a1:76:cf:
c5:24:b0:90:27:03:25:cf:b3:c2:b2:e6:2d:39:71:
2c:88:5c:03:38:cb:00:52:f4:19:23:a1:28:a0:d4:
2b:45:d6:14:02:9c:96:92:3e:b4:80:8a:7a:67:06:
13:54:17:8e:dd:f6:c7:66:3f:b2:5b:3a:80:1f:d3:
4d:48:db:fb:0a:90:64:c3:c2:d0:12:03:7b:2f:e0:
ff:2d:0f:1f:b8:f8:09:b8:33:4c:3c:fe:a1:b0:e2:
30:51:98:38:b0:9e:55:03:39:e3:fc:8b:65:ff:79:
32:71:35:63:f7:16:bc:f8:24:6c:dd:38:9e:11:22:
b0:0f:1c:a2:52:c4:6a:11:a5:e8:24:67:14:a4:30:
29:34:00:a4:4d:45:1c:07:84:b3:8e:d1:0c:ee:97:
de:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:1E:63:85:A5:A8:7D:36:15:AB:FC:31:D8:BD:15:AD:80:23:75:BE
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Qh5jhaWofTYVq_wx2L0VrYAjdb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
56:65:8c:3e:5e:9e:90:18:46:3a:d2:64:ea:a8:f8:2f:b5:02:
65:e3:95:93:b0:df:3f:3f:2e:1a:0e:56:fa:65:9b:cf:8a:f9:
54:fe:ce:7d:50:ab:9c:66:2b:9b:28:cf:f9:1e:51:6d:6f:29:
00:37:8a:10:a6:2b:ba:34:ab:91:30:31:80:50:7a:37:c1:68:
18:b5:1e:66:07:2e:e5:a2:3c:66:af:66:cb:6e:58:48:67:74:
31:77:01:98:d2:8d:84:fb:9e:5b:fe:06:56:55:8a:2a:34:9e:
a0:c4:38:26:46:b1:86:c0:ce:04:ab:fa:fa:c8:36:97:ff:a2:
3c:de:3a:28:5d:5a:9b:15:09:a1:e5:97:02:4b:5f:03:a6:5a:
b2:92:37:54:a3:5b:1b:6a:90:9a:04:7d:50:52:a8:81:04:8a:
02:a7:1c:17:d5:07:82:42:10:7a:c6:bc:c3:87:16:55:3a:10:
cd:e0:d7:bb:ac:8f:c4:d6:18:45:d2:4a:2c:6c:77:70:a7:e9:
06:65:66:8c:b8:a3:26:7e:13:b6:ea:c4:7e:81:84:2b:52:3c:
26:fa:85:85:0e:ad:8d:fd:eb:17:47:1a:48:d6:72:00:e5:bf:
56:7c:c4:79:14:78:45:7b:4f:f1:9e:a3:12:d9:44:ad:9e:68:
7d:95:e7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:49 2023 by rpki-client on console.sobornost.net