Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/VFiojazjq4lzdfjipjx-rLUxVeA.roa
File: VFiojazjq4lzdfjipjx-rLUxVeA.roa (raw, json)
Hash identifier: zETGYkfjVj86IBRKLpE33TRKbX7vDtX4qFHj6EecfDU=
Subject key identifier: 54:58:A8:8D:AC:E3:AB:89:73:75:F8:E2:A6:3C:7E:AC:B5:31:55:E0
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 05196FE3
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/VFiojazjq4lzdfjipjx-rLUxVeA.roa
Signing time: Thu 17 Mar 2022 05:42:17 +0000
ROA not before: Thu 17 Mar 2022 05:42:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85553123 (0x5196fe3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Mar 17 05:42:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5458a88dace3ab897375f8e2a63c7eacb53155e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b1:70:30:19:78:87:a1:41:9e:4d:49:1f:00:
e9:31:37:8b:29:9a:8c:d2:de:1d:c7:b4:ba:b3:81:
de:11:c3:8c:68:3d:f1:5d:6f:d6:a0:08:c9:3a:f2:
96:64:f9:ab:37:9d:e9:37:11:40:61:13:cc:81:13:
22:2a:7d:bd:29:bb:eb:50:e9:7b:fe:ee:1c:8f:de:
c9:09:2a:03:0f:93:2b:66:d4:89:42:e0:29:bb:f3:
de:23:9a:16:17:a1:5d:ca:a3:cf:57:cd:3e:3c:a7:
19:53:25:f0:47:e9:2e:df:2b:d7:50:5d:63:c4:43:
de:18:f4:a1:2a:6d:a0:20:f9:e1:cd:5d:22:3f:1d:
3c:1c:d1:f8:5f:28:37:fd:f9:68:64:28:d9:e6:b9:
14:f8:89:16:59:83:9c:9f:ff:09:c4:7b:c4:3c:40:
57:a6:16:39:a5:df:c3:14:4b:82:65:da:63:da:32:
ff:d4:0d:a6:9d:89:07:5e:33:f6:72:96:b8:22:97:
a1:1a:6d:4c:53:41:55:55:82:4a:26:2f:a0:05:ed:
02:de:d9:3e:53:8c:fd:51:4c:9d:bc:8f:81:e7:d0:
5a:58:6a:13:ac:be:2e:b1:08:56:cc:08:f4:34:a5:
24:b2:f3:35:bb:03:68:eb:0f:32:f3:50:18:da:e5:
01:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:58:A8:8D:AC:E3:AB:89:73:75:F8:E2:A6:3C:7E:AC:B5:31:55:E0
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/VFiojazjq4lzdfjipjx-rLUxVeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
24:1e:c1:6b:cb:e4:f0:fc:31:46:65:51:07:09:8b:df:f1:7c:
80:a3:6d:9e:03:1b:fd:7e:0a:fc:77:e7:68:4f:3f:bb:f2:72:
e5:0f:6d:c8:f6:cb:4a:83:a9:9e:cf:ca:56:11:bd:1c:22:f4:
b5:ce:2e:cc:25:0e:9f:b8:40:15:09:29:d0:8b:ba:b6:94:f2:
5a:eb:0e:67:11:b5:b5:87:74:60:59:a2:bd:57:03:c8:fb:29:
0b:6e:1c:ce:be:37:c2:fd:77:2f:27:88:1b:10:f6:24:a5:6a:
c1:ab:10:80:b9:52:9c:58:f3:6b:6c:24:85:bb:f8:87:d0:bc:
82:ee:50:5e:7c:3f:de:a3:fe:04:74:b3:5b:8e:b5:8c:4b:40:
f7:20:82:2d:c1:78:ae:0f:5a:a5:02:2c:e6:39:b0:76:ec:98:
16:d5:b0:45:c2:53:43:0b:73:e4:ff:2a:90:fe:4c:f6:27:b7:
c0:cb:30:b5:1c:3d:58:b6:7f:64:f3:53:2f:72:ad:34:1a:92:
21:0a:df:a4:ed:9d:eb:ea:06:75:ec:d3:5e:f4:49:8a:d0:70:
d2:ff:b3:36:47:6d:50:a4:a4:7e:57:a3:13:ec:24:79:a6:e4:
c1:18:ca:bc:18:4d:a7:3c:33:ec:a8:a2:0e:5b:40:92:f1:b5:
9a:5b:61:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:49 2023 by rpki-client on console.sobornost.net