Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/YDLMnz4AJr--CX_Hk7fZgfrftzk.roa
File: YDLMnz4AJr--CX_Hk7fZgfrftzk.roa (raw, json)
Hash identifier: mNdkvFasDvgl8ARPQ2B2+EoC98u2lqzx4aGBs0kkZas=
Subject key identifier: 60:32:CC:9F:3E:00:26:BF:BE:09:7F:C7:93:B7:D9:81:FA:DF:B7:39
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 07CE722E
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/YDLMnz4AJr--CX_Hk7fZgfrftzk.roa
Signing time: Wed 01 Jun 2022 00:37:13 +0000
ROA not before: Wed 01 Jun 2022 00:37:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130970158 (0x7ce722e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 1 00:37:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6032cc9f3e0026bfbe097fc793b7d981fadfb739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1e:23:f6:12:cd:99:b9:41:dc:d7:f9:7e:b0:
ed:64:a1:21:13:39:3c:cd:e3:b4:c8:f8:65:25:48:
cb:b9:fd:56:6c:13:b0:fd:99:ff:70:f7:eb:25:7d:
36:f4:4c:fd:a0:4c:52:a2:ca:b9:29:7f:64:c8:24:
fd:09:e3:b0:70:4e:1c:32:c0:ae:35:2e:3c:92:2f:
9a:f0:8c:38:16:c1:35:ec:35:45:5b:36:3d:0e:9c:
7e:d1:b4:52:55:9f:8f:6f:22:96:e4:a0:43:e7:f0:
b0:21:cf:32:f9:56:01:d5:64:0c:64:b6:d3:76:76:
70:7f:cb:7c:44:0a:ef:d1:c5:70:8b:7e:20:f3:be:
c1:e9:ab:41:f9:e4:f3:16:85:25:80:22:ff:f9:8a:
e9:01:6b:ac:4a:ba:f1:ba:b2:16:61:64:fb:f1:c7:
c5:0c:a5:f9:8a:c8:fe:a1:18:f3:46:3c:3c:d3:b5:
2e:91:a2:ae:82:a3:1c:36:01:f5:9a:54:ff:05:8b:
2e:d1:4a:fd:a7:90:f0:ea:b5:b7:76:6b:c4:bd:15:
54:6a:99:96:c2:b2:1d:1f:66:de:c3:e6:eb:b3:96:
36:62:4c:46:98:81:cd:e6:51:58:5c:bd:94:ec:da:
81:6f:a4:23:6f:00:58:79:26:9e:14:0c:61:c3:5f:
fe:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:32:CC:9F:3E:00:26:BF:BE:09:7F:C7:93:B7:D9:81:FA:DF:B7:39
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/YDLMnz4AJr--CX_Hk7fZgfrftzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
59:6d:6e:57:bf:a2:7e:26:65:1d:33:94:0e:a3:e3:84:9c:d6:
13:52:88:3d:79:34:8e:d4:6f:b8:72:20:76:08:26:82:27:55:
fe:cb:19:45:63:1a:1b:6e:d6:50:ec:11:ad:00:11:53:4d:d2:
53:4e:bb:fa:14:11:1b:34:46:3d:76:db:f9:75:5e:69:0e:d3:
bc:48:80:fd:8f:00:ac:aa:e4:a0:4d:6a:68:df:00:fd:58:fa:
ac:f4:28:4f:bb:70:0c:77:48:2f:f5:ee:df:e9:17:9e:b9:14:
92:57:b7:ae:e5:0e:ab:82:50:4b:b5:b4:48:7e:c9:70:35:27:
8b:fe:80:57:84:15:70:ca:1d:ea:6d:28:19:4f:7e:aa:52:8e:
aa:fa:74:9d:71:6e:ae:73:a8:5f:c6:04:b4:82:ea:d4:b7:0c:
2f:bc:54:16:7f:40:cf:8b:43:36:b3:3a:b5:5f:f1:c2:b9:29:
6c:c5:e8:5a:76:4f:e2:9f:ff:2e:97:bd:81:11:72:98:d6:de:
bf:bc:9b:cc:2d:de:fb:f1:5f:e5:39:e2:e0:23:78:3c:c9:92:
00:2f:2e:ff:c7:88:15:3e:d9:37:19:f1:8e:54:7f:9f:a8:4f:
48:3b:ee:75:b9:54:57:de:d5:75:8e:7e:e4:15:9d:7c:d7:6d:
d6:a8:5b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:49 2023 by rpki-client on console.sobornost.net