Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/kKalt1jVltnxDo0NLnvMCyQY-k8.roa
File: kKalt1jVltnxDo0NLnvMCyQY-k8.roa (raw, json)
Hash identifier: QqxGhBLJQOOa4gdufUhK8t8ih1ygJgX4lszPjBBovVk=
Subject key identifier: 90:A6:A5:B7:58:D5:96:D9:F1:0E:8D:0D:2E:7B:CC:0B:24:18:FA:4F
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 082E6B01
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/kKalt1jVltnxDo0NLnvMCyQY-k8.roa
Signing time: Wed 08 Jun 2022 04:13:02 +0000
ROA not before: Wed 08 Jun 2022 04:13:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137259777 (0x82e6b01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 8 04:13:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=90a6a5b758d596d9f10e8d0d2e7bcc0b2418fa4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:89:cc:ab:46:0b:60:6b:ca:82:08:a2:e4:e5:
5c:9a:16:80:a9:1e:1b:2d:80:9c:8f:79:ed:41:66:
36:97:ca:6b:bc:4b:45:9d:9c:0d:85:dd:ff:e3:5b:
f2:b9:76:78:8b:37:d4:df:f5:c6:92:a8:c4:e2:6d:
85:33:57:e8:ca:6c:08:62:35:c8:d9:b5:e8:bd:2d:
68:b8:11:85:66:75:b4:e5:b6:7f:d5:e6:35:a1:32:
33:8f:1a:55:a6:ec:a2:9f:25:d5:b6:5f:0d:8b:91:
a5:f0:15:08:40:76:22:cc:a0:4b:e8:3f:13:79:eb:
7b:9f:6f:f2:26:5a:bd:65:6f:06:04:2d:42:75:55:
7c:26:a0:13:c3:0f:0c:81:a7:dd:86:27:f9:9b:e8:
4c:06:8a:06:76:11:31:12:d0:15:3f:00:1e:8b:d2:
be:a0:45:e8:d4:20:f5:f2:63:58:54:12:07:ee:c2:
42:24:f4:3f:2a:c9:6b:e9:b6:1a:62:e6:37:9c:cd:
95:51:b0:3a:d0:b8:bd:2a:81:5a:f3:81:12:f0:55:
47:0c:44:5d:c1:01:20:d3:53:8f:e7:6b:d6:ab:1f:
1c:94:2e:01:77:e1:1b:b1:d5:2d:06:0c:9b:3b:76:
ff:54:36:30:c3:f3:1b:6c:d8:80:2e:ec:8b:77:a6:
8b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A6:A5:B7:58:D5:96:D9:F1:0E:8D:0D:2E:7B:CC:0B:24:18:FA:4F
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/kKalt1jVltnxDo0NLnvMCyQY-k8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
1c:15:d0:d6:90:68:48:6b:0d:57:43:ad:4e:e8:c7:74:bc:ef:
99:e7:c2:28:c1:01:e2:2e:7c:11:9d:93:68:1d:12:f2:ea:15:
97:7d:15:1a:e6:73:53:b4:5b:3b:f6:4c:d1:fb:9e:c9:e7:2c:
09:29:41:28:2d:20:f0:44:35:0a:79:44:04:a1:9d:0f:4b:87:
7a:f2:71:e9:68:94:92:3b:70:ff:bf:85:e3:b9:58:4b:07:e2:
09:ed:38:49:f6:57:74:13:cc:b6:b2:36:59:1d:63:b8:57:72:
da:c2:55:4c:a2:8b:1d:db:74:7e:d2:29:82:3e:7c:4a:25:14:
d2:6d:56:77:a4:91:02:6c:32:7f:c2:53:c8:c9:43:1f:44:8d:
92:c9:d0:0d:6b:96:f6:f5:10:90:27:9b:f4:bd:0c:9c:4b:d3:
ac:bf:b3:03:5d:c2:45:ab:78:8a:96:d7:76:5a:83:8f:c7:85:
52:9d:b3:00:51:58:91:d5:7a:bb:1e:9a:49:90:a3:a8:84:eb:
f7:f8:e1:80:3e:27:48:c5:33:96:1d:49:54:bb:85:9d:03:e3:
92:cc:e7:ab:e0:7e:6e:83:cc:91:9f:85:55:39:42:7d:ff:f1:
85:1a:fe:9d:db:cd:9b:be:a9:a1:e1:b1:8f:cf:bd:40:1a:14:
cc:15:c1:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net