Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/mFl1nyDH-oE9axA8GlcjIBUlrak.roa
File: mFl1nyDH-oE9axA8GlcjIBUlrak.roa (raw, json)
Hash identifier: KMRM5bTthvDaECO4M304trNuV+1mU0bgq+6pNsIPXhY=
Subject key identifier: 98:59:75:9F:20:C7:FA:81:3D:6B:10:3C:1A:57:23:20:15:25:AD:A9
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 0927CC58
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/mFl1nyDH-oE9axA8GlcjIBUlrak.roa
Signing time: Mon 27 Jun 2022 05:43:40 +0000
ROA not before: Mon 27 Jun 2022 05:43:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153603160 (0x927cc58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 27 05:43:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9859759f20c7fa813d6b103c1a5723201525ada9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:da:b9:57:a2:e7:e5:b3:99:1b:ba:16:2e:98:
9b:5c:fd:9e:98:1c:8a:8a:bb:aa:87:17:d3:ce:f9:
82:c0:86:47:37:84:2c:57:a7:0b:4b:63:b1:6d:7b:
a9:9f:3c:55:97:d9:2e:82:8b:1a:9a:e0:5f:77:46:
d4:4e:a9:f0:6e:1f:2f:1a:9b:40:39:63:1b:78:99:
28:30:7b:a7:d4:b6:df:e1:cc:d4:8a:6d:65:9d:85:
9e:2a:0e:81:f5:51:d0:ef:aa:85:bc:60:75:66:c2:
b9:ec:67:c3:7d:b3:09:28:a8:49:88:e7:e8:20:77:
30:9a:aa:84:92:bd:de:4b:36:2f:28:7b:4c:6f:bd:
a5:e9:3b:d1:a2:71:cd:65:0e:12:77:c5:a6:22:6c:
46:e3:64:23:53:b4:64:cb:4e:8a:bb:3a:cc:4f:f6:
4e:92:a9:54:43:20:d3:43:4a:6d:f2:c9:a2:81:85:
a5:03:89:9b:d6:1f:75:e8:59:b2:7e:bb:38:0a:6a:
8b:c4:e5:e7:29:58:ec:21:a5:2b:1c:bc:51:ae:92:
5a:d3:85:8e:78:9e:19:15:f8:f4:7c:b2:cb:af:0e:
16:b4:6c:c8:72:db:99:9d:80:5b:bd:55:c7:15:70:
f9:18:36:a7:dd:57:99:ce:26:cb:78:5a:4f:ad:a8:
6a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:59:75:9F:20:C7:FA:81:3D:6B:10:3C:1A:57:23:20:15:25:AD:A9
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/mFl1nyDH-oE9axA8GlcjIBUlrak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
85:ea:af:10:b5:f7:7d:6c:e8:16:ac:98:ac:ac:17:09:80:73:
87:a7:ab:b2:48:c9:2d:30:7b:fa:f5:54:f5:3b:46:ab:f8:6f:
55:80:3a:0a:f9:78:1b:5c:2a:38:09:51:ca:3a:cd:70:67:e3:
e0:56:4a:27:d8:f5:e0:64:5f:da:5c:4f:2b:35:c0:2a:a6:bf:
8b:d9:cc:4f:01:37:31:19:58:e5:d1:65:8c:4f:ee:00:22:d4:
cd:70:70:af:eb:41:2d:e6:2d:b6:51:06:ee:38:f1:07:7b:b3:
41:1f:29:05:91:0a:8b:da:93:67:13:65:b2:b0:9c:bf:07:5e:
9e:75:d9:d0:4b:76:07:98:93:81:f4:c9:df:39:15:2b:78:5f:
67:58:88:38:da:56:e8:dd:d2:8e:a5:2c:d2:9b:75:ff:b4:0b:
78:8c:b6:7b:17:bd:64:79:a3:66:ec:91:7e:a1:da:bd:6b:ec:
61:6d:34:cb:fe:6e:71:ba:c7:c1:48:1d:09:78:06:fe:7c:40:
66:9c:b3:46:95:21:39:d8:47:78:7f:94:ff:e3:13:9f:d6:ab:
ca:c8:29:aa:aa:f3:3d:76:13:3a:56:38:33:49:c7:69:fc:8f:
23:bb:d9:ee:39:02:2a:b3:54:a2:a4:6e:82:ea:50:51:1e:45:
13:6f:20:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net