Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/fTktrkZWyoyExDnJqc6hiDzciz8.roa
File: fTktrkZWyoyExDnJqc6hiDzciz8.roa (raw, json)
Hash identifier: DFof3uPSpx/CCa0Cowb1M0Vdp2kcMkKaz1DxIyX6IcY=
Subject key identifier: 7D:39:2D:AE:46:56:CA:8C:84:C4:39:C9:A9:CE:A1:88:3C:DC:8B:3F
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 063EE137
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/fTktrkZWyoyExDnJqc6hiDzciz8.roa
Signing time: Tue 26 Apr 2022 04:52:14 +0000
ROA not before: Tue 26 Apr 2022 04:52:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 666
IP address blocks: 151.216.5.0/24 maxlen: 24
151.216.36.0/24 maxlen: 24
151.216.37.0/24 maxlen: 24
151.216.34.0/24 maxlen: 24
151.216.35.0/24 maxlen: 24
151.216.32.0/24 maxlen: 24
151.216.33.0/24 maxlen: 24
151.216.38.0/24 maxlen: 24
151.216.39.0/24 maxlen: 24
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104784183 (0x63ee137)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Apr 26 04:52:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7d392dae4656ca8c84c439c9a9cea1883cdc8b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fb:da:2d:0c:b7:b8:02:a2:5f:05:6b:e0:99:
8a:44:45:08:7b:fb:33:ec:be:9f:68:fc:30:f3:ac:
33:75:de:38:0d:6a:b0:f3:58:94:25:84:a0:68:45:
1f:ed:80:3c:05:96:89:a0:60:ff:8a:4e:fd:f9:70:
d6:ed:de:60:80:8b:d3:4d:d4:6a:2b:08:66:aa:a1:
af:94:ca:4b:a6:76:85:aa:07:d3:f7:07:65:56:d8:
f0:42:32:af:3d:e9:bd:d7:26:b6:e7:35:98:f8:ff:
c8:07:03:2e:1c:bc:fd:27:79:98:2d:15:32:79:0e:
ee:d5:ed:5c:48:64:b7:33:6b:d1:85:03:fc:da:e1:
5c:3c:93:ba:39:02:c1:a1:7f:81:5d:db:40:c9:ac:
e4:e4:de:e7:23:f0:d3:3d:11:62:17:0f:ab:2b:c2:
0d:e5:00:1d:68:6c:a5:ea:8b:6d:b5:94:fc:5c:9c:
51:2b:35:a3:93:83:41:93:ec:0d:a0:e5:de:00:ad:
3d:25:85:ad:b2:79:ac:17:b3:28:fd:0a:ba:0a:5d:
69:3b:1a:25:ef:8b:16:7c:24:57:e3:32:8d:0e:a2:
3c:3a:cf:76:b3:00:b1:fb:7c:f9:79:9c:22:e0:77:
3f:8b:fe:b2:f1:a6:84:1b:05:9a:a5:5f:3d:68:53:
da:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:39:2D:AE:46:56:CA:8C:84:C4:39:C9:A9:CE:A1:88:3C:DC:8B:3F
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/fTktrkZWyoyExDnJqc6hiDzciz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.5.0/24
151.216.32.0/21
IPv6:
2001:7fc:3::/48
Signature Algorithm: sha256WithRSAEncryption
13:8a:1c:41:c5:f3:df:1f:c0:c6:35:15:f7:7f:d8:87:b1:46:
bf:3e:ce:a7:4b:b2:68:06:c4:f4:5a:ea:de:fe:c1:d6:7f:6c:
b0:95:22:a4:b7:9d:07:4d:f1:38:3d:e1:13:b7:f4:9e:5f:d9:
93:6b:77:d9:db:e9:62:4f:d7:a8:26:2d:07:d4:4f:32:44:bd:
53:12:f7:78:3f:a8:4f:be:d6:54:83:1f:41:86:03:e7:22:c7:
85:98:b3:68:59:d3:10:b7:3e:3c:68:bc:bc:fb:a3:45:e2:8c:
51:f8:d2:3d:ca:ef:36:08:fc:1b:32:60:40:fc:43:99:e9:4b:
f8:3b:ef:14:21:35:51:78:5f:52:a7:42:91:e6:d7:b9:40:42:
a5:2a:35:48:82:61:4b:8b:4a:e2:b0:23:58:d8:df:ff:b8:0c:
d8:2a:7c:59:3a:04:17:81:e2:8d:0b:7a:91:8b:c1:ee:fc:28:
76:de:12:b7:d2:dc:1f:9a:2d:7e:eb:5c:69:db:4b:3c:68:aa:
1d:4b:79:8b:86:d6:61:07:78:d5:f4:ac:52:cf:1a:5c:80:64:
54:ab:de:51:44:f9:bb:09:23:dc:d5:d3:e0:a1:91:f4:51:b9:
cf:dc:ef:1e:8d:fa:08:3c:5f:f2:64:4c:8b:df:41:aa:af:4a:
79:6d:09:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net