Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/UlWRaF5IgegQZ2ITxA82Rhe3HLI.roa
File: UlWRaF5IgegQZ2ITxA82Rhe3HLI.roa (raw, json)
Hash identifier: sLjVh0LuAbbyAdhJmbeGSC+qjq9DgNxa7+EQdNn4+k0=
Subject key identifier: 52:55:91:68:5E:48:81:E8:10:67:62:13:C4:0F:36:46:17:B7:1C:B2
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 0181EB7811727BF9D7B68D10871199EF4A31
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/UlWRaF5IgegQZ2ITxA82Rhe3HLI.roa
Signing time: Mon 11 Jul 2022 04:15:23 +0000
ROA not before: Mon 11 Jul 2022 04:15:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:eb:78:11:72:7b:f9:d7:b6:8d:10:87:11:99:ef:4a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jul 11 04:15:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=525591685e4881e810676213c40f364617b71cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:58:6d:1d:f1:8a:b0:44:0f:07:b3:0b:ad:e6:
be:19:79:ca:6e:0f:40:7b:18:45:a1:ba:78:70:a6:
af:bf:2d:de:fd:8b:07:86:10:33:ea:d1:6d:2f:11:
bf:02:e6:d7:7f:38:0c:28:b0:67:69:73:2d:87:10:
93:73:bd:46:62:4b:53:06:f4:b0:26:57:e0:c4:55:
34:ca:58:c6:ff:ed:29:77:a2:d4:24:34:1d:df:af:
b7:c5:9a:27:ff:63:d8:19:db:56:00:a9:b9:4f:ef:
82:9e:a0:b7:5f:92:bb:b9:d5:f0:e0:ef:32:3e:68:
44:ab:a1:f1:ea:21:de:4f:9f:ec:86:5c:40:93:56:
ec:1b:64:9f:81:1b:40:d8:da:9d:b8:46:96:20:4c:
5e:dc:28:ff:6e:28:f6:de:75:2a:ae:ee:00:0a:8b:
af:bc:cd:52:1d:06:3e:b6:d2:e4:3f:24:bb:02:8c:
90:66:a5:af:81:09:86:1d:72:0a:cd:ce:46:ed:da:
b4:9c:af:f5:ae:f6:30:72:24:52:25:76:e0:fb:4c:
46:79:8a:c7:45:79:45:43:d5:34:cf:f2:7d:d8:6f:
c4:35:d8:17:23:e6:7b:e9:18:91:9f:e2:e1:ec:b5:
ab:16:3e:f0:5a:16:f8:f6:c0:84:78:fb:16:a9:bc:
b6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:55:91:68:5E:48:81:E8:10:67:62:13:C4:0F:36:46:17:B7:1C:B2
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/UlWRaF5IgegQZ2ITxA82Rhe3HLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
66:41:6c:68:e6:26:8a:7d:36:40:b8:9d:77:97:72:76:38:d9:
af:b9:ea:8e:81:ac:c7:bc:4d:45:34:56:b6:e0:e6:fc:ec:9c:
2e:52:13:2d:c8:fd:93:56:20:56:41:66:ad:29:ae:7f:a4:5c:
c9:00:05:f7:b1:df:cc:45:de:d3:04:0b:22:db:3f:2b:6b:99:
eb:fe:11:cb:19:64:d6:85:1a:f0:55:81:5b:80:c6:3f:39:01:
12:c0:6a:b0:ef:e2:0a:13:89:5c:cd:ca:b4:ce:74:69:f7:78:
00:e5:cb:23:43:4b:e5:c2:04:13:f1:ba:40:eb:0d:95:03:60:
4a:d2:01:0b:27:c2:44:1d:19:37:e1:7d:37:21:af:2b:92:a6:
09:3d:94:4a:bf:c1:5f:d6:b7:57:ec:2f:60:37:6e:16:99:c7:
10:86:15:f1:70:87:f5:97:e8:03:fc:1d:a3:10:84:ad:bc:15:
d9:b5:71:dd:33:da:99:06:04:28:4e:13:73:7e:17:11:c7:51:
88:54:4d:23:10:b0:39:d6:cc:70:68:33:e7:49:f3:9c:26:7d:
30:9d:08:e1:3b:b9:c2:72:3f:7c:49:64:ee:14:b2:d9:0e:d2:
d8:24:bd:aa:fb:07:3e:f3:7c:41:0c:e9:d9:54:d6:9f:de:d5:
68:b6:93:ad
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYHreBFye/nXto0QhxGZ70oxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiM2RhNmU5OWM2NjY1MTNhMmNlZTVmMGUwZDNhYjc0NWYx
NjdkYzMwHhcNMjIwNzExMDQxNTIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjU1OTE2ODVlNDg4MWU4MTA2NzYyMTNjNDBmMzY0NjE3YjcxY2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1htHfGKsEQPB7MLrea+GXnKbg9A
exhFobp4cKavvy3e/YsHhhAz6tFtLxG/AubXfzgMKLBnaXMthxCTc71GYktTBvSw
JlfgxFU0yljG/+0pd6LUJDQd36+3xZon/2PYGdtWAKm5T++CnqC3X5K7udXw4O8y
PmhEq6Hx6iHeT5/shlxAk1bsG2SfgRtA2NqduEaWIExe3Cj/bij23nUqru4ACouv
vM1SHQY+ttLkPyS7AoyQZqWvgQmGHXIKzc5G7dq0nK/1rvYwciRSJXbg+0xGeYrH
RXlFQ9U0z/J92G/ENdgXI+Z76RiRn+Lh7LWrFj7wWhb49sCEePsWqby2ZQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFJVkWheSIHoEGdiE8QPNkYXtxyyMB8GA1UdIwQY
MBaAFEs9pumcZmUTos7l8ODTq3RfFn3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3oybTZaeG1aUk9penVYdzROT3JkRjhXZmNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82ZjIzMmUtMjI3NS00NGU5LTkxYzAt
YzczOTdhMjY2OWE5LzEvVWxXUmFGNUlnZWdRWjJJVHhBODJSaGUzSExJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi82ZjIzMmUtMjI3NS00NGU5LTkxYzAtYzczOTdhMjY2OWE5
LzEvU3oybTZaeG1aUk9penVYdzROT3JkRjhXZmNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBl9gEMA8E
AgACMAkDBwAgAQf8AAIwDQYJKoZIhvcNAQELBQADggEBAGZBbGjmJop9NkC4nXeX
cnY42a+56o6BrMe8TUU0Vrbg5vzsnC5SEy3I/ZNWIFZBZq0prn+kXMkABfex38xF
3tMECyLbPytrmev+EcsZZNaFGvBVgVuAxj85ARLAarDv4goTiVzNyrTOdGn3eADl
yyNDS+XCBBPxukDrDZUDYErSAQsnwkQdGTfhfTchryuSpgk9lEq/wV/Wt1fsL2A3
bhaZxxCGFfFwh/WX6AP8HaMQhK28Fdm1cd0z2pkGBChOE3N+FxHHUYhUTSMQsDnW
zHBoM+dJ85wmfTCdCOE7ucJyP3xJZO4UstkO0tgkvar7Bz7zfEEM6dlU1p/e1Wi2
k60=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:49 2023 by rpki-client on console.sobornost.net