Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/_vBm5nK124P6pR_gIlOdvdZy17I.roa
File: _vBm5nK124P6pR_gIlOdvdZy17I.roa (raw, json)
Hash identifier: GQwF73Yf8iWIWXON7JC6m2b1NrUI+tjiHqldnf8pht4=
Subject key identifier: FE:F0:66:E6:72:B5:DB:83:FA:A5:1F:E0:22:53:9D:BD:D6:72:D7:B2
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 062B4FD8
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/_vBm5nK124P6pR_gIlOdvdZy17I.roa
Signing time: Sun 24 Apr 2022 11:52:06 +0000
ROA not before: Sun 24 Apr 2022 11:52:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103501784 (0x62b4fd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Apr 24 11:52:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fef066e672b5db83faa51fe022539dbdd672d7b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7b:06:f7:09:10:6c:e9:82:a1:3d:1f:2c:d0:
7e:f9:b3:1b:38:0a:38:2e:19:e3:3e:93:d8:7a:6a:
3f:a7:79:4b:b5:d7:6f:1b:7d:97:23:5b:fc:54:a7:
6e:bd:97:0b:9e:0a:86:44:38:ae:bc:cd:45:c1:64:
e1:42:bc:15:de:af:4d:ae:0e:84:6a:d7:f6:87:c2:
db:7c:83:89:1c:13:79:b3:e9:ba:d3:0d:73:5d:33:
04:61:2b:16:32:52:31:f6:af:22:a7:d7:58:88:c7:
cc:7b:6a:00:2e:ef:93:c6:5a:2b:c0:24:c3:5e:7d:
e6:c3:c1:59:04:80:80:7a:80:fa:56:90:24:db:23:
9b:05:64:f1:9a:d8:cf:8b:45:39:c9:cf:ca:e7:70:
20:8f:62:cf:ee:bb:9e:57:61:1b:c9:4b:bf:11:76:
c1:1f:d0:89:80:7f:dc:4f:2c:61:5e:90:5f:8a:9f:
e8:70:63:3c:c5:1d:a9:a0:21:68:72:7a:1f:4b:76:
8f:36:85:bc:16:8b:bc:6f:21:6c:00:39:f5:6b:69:
c3:44:aa:c8:06:61:7d:7d:71:24:d0:65:62:c9:aa:
ea:fd:81:88:e9:b2:3d:70:07:db:4b:59:40:2a:26:
d0:9f:b6:b3:ed:18:fb:a6:bc:20:7c:38:1c:50:6f:
bd:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F0:66:E6:72:B5:DB:83:FA:A5:1F:E0:22:53:9D:BD:D6:72:D7:B2
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/_vBm5nK124P6pR_gIlOdvdZy17I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
86:c7:b0:8e:78:cd:ca:8a:2e:cf:69:e7:77:20:74:09:8f:25:
4f:dd:3e:bf:dd:4b:02:b7:80:6a:30:e8:39:f6:6d:70:c7:99:
bc:ff:29:a2:d2:9d:8d:38:c0:8a:16:d6:7d:ae:9b:ed:8c:f4:
ef:29:84:69:77:3c:2a:0d:b9:51:12:b6:2b:fb:a0:67:d9:cb:
f2:9b:f8:06:fe:64:29:d7:be:cc:a8:0d:c2:7d:3f:8c:e7:a0:
93:ae:d4:91:d9:e2:00:67:57:15:9b:14:fa:7c:68:22:1b:1e:
01:04:17:de:80:01:5c:9b:77:3b:00:66:2f:ac:9c:d6:53:e5:
96:dd:fe:a8:b0:22:6f:1d:88:c2:93:22:0f:fb:ce:98:2b:9b:
a7:84:55:dc:2b:63:11:e5:93:a3:2f:43:73:b9:c1:53:66:24:
6d:12:b2:95:55:8f:8e:df:2d:26:99:3a:47:78:24:56:f2:04:
87:c6:a2:29:6d:cb:9d:2d:93:ac:81:53:18:37:07:bc:3f:e3:
ef:13:28:76:4e:2f:4f:77:8d:86:c3:83:df:2b:98:21:39:92:
2b:36:2f:34:70:44:b6:d6:04:dd:74:bf:23:94:1b:e8:34:64:
b4:36:6d:85:c5:6b:8a:cf:12:5d:bf:d2:fc:13:3b:a9:ee:57:
84:4d:4c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:49 2023 by rpki-client on console.sobornost.net