Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/0grHfCrDXTWPHkOJybXGMXmKeik.roa
File: 0grHfCrDXTWPHkOJybXGMXmKeik.roa (raw, json)
Hash identifier: s0N3n9iF981tG/5NvRU/0pq9di4Za7K3Q2Auooq+jVs=
Subject key identifier: D2:0A:C7:7C:2A:C3:5D:35:8F:1E:43:89:C9:B5:C6:31:79:8A:7A:29
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 0181E8E88D185A38107A8A86A9048E46687E
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/0grHfCrDXTWPHkOJybXGMXmKeik.roa
Signing time: Sun 10 Jul 2022 16:19:23 +0000
ROA not before: Sun 10 Jul 2022 16:19:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:e8:e8:8d:18:5a:38:10:7a:8a:86:a9:04:8e:46:68:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jul 10 16:19:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d20ac77c2ac35d358f1e4389c9b5c631798a7a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:24:b8:bf:b1:5c:9d:32:b8:07:9f:23:a0:38:
b6:e4:29:18:f7:0c:96:68:be:4e:88:e2:5b:8d:5b:
c3:ad:f4:d9:42:57:2f:81:a1:1f:ce:28:78:c0:f5:
04:a5:72:c0:f5:71:57:fe:5c:a3:dd:d5:73:ba:c5:
d9:19:95:be:d7:bb:74:61:61:01:b4:75:98:b6:60:
78:73:df:b9:34:19:4e:d8:e8:ba:d8:fc:98:ca:23:
42:7a:a0:e9:d5:58:b6:8c:d5:f0:98:9a:c3:ad:f3:
be:cb:77:70:55:05:61:be:b8:88:d5:39:75:29:c2:
ef:3b:6a:89:5a:3d:02:71:34:25:af:b8:60:5b:34:
7b:38:fd:fd:30:85:e9:a5:c1:46:85:14:d1:b2:d1:
c1:29:96:4c:f7:76:57:6e:9b:a9:28:55:8e:9d:2f:
13:ab:2b:10:12:c6:a8:80:9e:d3:73:e5:4b:7b:d7:
95:2d:98:03:79:f7:09:a0:69:c1:bc:1c:21:5d:20:
e7:b0:94:69:fb:af:e6:86:02:97:40:b9:53:20:d7:
11:18:0c:75:38:dc:62:6e:e1:61:64:8e:3e:2d:d5:
ac:72:5c:23:83:f8:1e:71:45:91:84:54:e7:e1:2d:
53:41:37:29:c8:e0:34:1c:f9:d8:57:15:cf:ed:56:
22:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:0A:C7:7C:2A:C3:5D:35:8F:1E:43:89:C9:B5:C6:31:79:8A:7A:29
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/0grHfCrDXTWPHkOJybXGMXmKeik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
0b:eb:94:ee:3b:4f:af:69:1a:23:93:b6:77:ae:38:ed:8c:38:
81:c9:a4:e4:78:67:32:36:d8:e9:c6:b6:d5:bd:f9:94:64:af:
43:78:74:29:98:c3:b7:4e:27:4e:3b:c1:94:03:1d:0b:1a:96:
f0:a8:cf:31:88:ad:48:6c:7e:24:b5:fd:c0:5f:50:ce:1e:db:
0a:87:8a:c8:b7:5c:b1:f3:bc:dd:56:55:33:4a:23:bb:74:26:
2c:14:0a:80:8a:24:d4:c6:cb:87:04:e9:78:46:a4:2d:45:33:
f4:63:87:0f:4d:c9:a3:38:76:48:75:9e:c9:fe:6a:27:09:de:
27:80:f6:9d:3e:ff:21:0a:05:a9:a9:47:69:85:d4:b3:bf:5a:
97:a5:67:d5:99:6c:07:bd:e9:15:03:fc:16:e2:fc:b5:2c:f4:
24:2a:0b:bd:61:79:b3:4e:9a:60:50:2a:e3:c7:3e:da:e7:80:
b5:37:77:1f:15:5b:17:7e:15:ca:7c:ef:a3:03:5b:23:bd:d6:
d0:0d:a2:9c:01:c6:66:fa:ce:5f:df:e0:8f:c1:62:80:dc:61:
09:03:f6:64:ba:5e:71:9b:fd:20:78:ce:0d:8e:aa:2c:07:53:
00:0a:d5:f2:73:7d:6d:d5:a5:86:48:c4:7e:34:f3:d7:28:be:
ad:88:6a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:04 2025 by rpki-client