Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/1-HXGgehqCH_-sy2rLicfLEkxISk.roa
File: 1-HXGgehqCH_-sy2rLicfLEkxISk.roa (raw, json)
Hash identifier: rtQxeCd3CEsFiYDc9HG2lMCdruFIzdKhL56IcAA4KE8=
Subject key identifier: F8:75:C6:81:E8:6A:08:7F:FE:B3:2D:AB:2E:27:1F:2C:49:31:21:29
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 067EDA7E
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/1-HXGgehqCH_-sy2rLicfLEkxISk.roa
Signing time: Thu 05 May 2022 12:59:46 +0000
ROA not before: Thu 05 May 2022 12:59:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108976766 (0x67eda7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: May 5 12:59:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f875c681e86a087ffeb32dab2e271f2c49312129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:fd:ec:3a:a9:2e:54:2b:85:f1:6b:c7:fa:79:
d9:90:5e:da:e7:fe:73:de:e8:c2:f9:94:bf:29:8c:
a8:28:7a:e6:27:75:96:f4:e0:98:78:57:b7:ab:0b:
6d:44:11:6d:f3:69:b4:c5:c7:53:69:c0:a0:45:ca:
02:b7:ac:ea:48:89:7a:20:8d:c0:33:6a:58:82:05:
d5:ef:e1:90:c8:7f:92:97:80:ba:39:a5:59:77:7d:
6a:6d:9e:7d:16:be:b4:79:79:6e:9d:c3:e6:81:1d:
96:c7:01:56:a2:51:0f:3e:d2:d0:2d:b7:90:cc:18:
88:41:8a:00:2b:6d:c9:0e:21:0b:84:e8:f8:18:63:
9b:ab:7f:b0:64:67:33:17:8a:fa:85:a1:83:a5:0f:
41:53:1a:f6:81:f9:04:3d:73:39:6c:a2:b3:bf:5c:
49:69:a6:c3:0c:3b:e6:7f:9d:b1:51:8d:db:5e:98:
a7:97:8a:30:0d:61:df:5c:34:98:ae:d7:e3:fa:cc:
7d:b8:0b:02:75:2d:39:85:1b:c6:f5:da:6d:82:04:
47:9e:07:59:39:3e:4c:3d:cd:f3:33:af:0d:d7:3d:
5a:aa:be:f3:fe:0b:52:e5:10:a5:5a:be:b7:10:94:
93:6c:d0:9d:ee:48:6f:c6:39:88:4d:da:c1:d4:a3:
d0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:75:C6:81:E8:6A:08:7F:FE:B3:2D:AB:2E:27:1F:2C:49:31:21:29
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/1-HXGgehqCH_-sy2rLicfLEkxISk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
3b:da:70:a0:7f:f5:e7:f7:f0:69:2c:86:3c:40:d2:bd:90:7e:
aa:13:d3:e5:78:0c:84:9d:e5:35:de:38:68:1b:71:a6:54:87:
1f:05:d4:60:94:79:9c:ee:76:00:69:59:6b:d3:b5:3c:fe:e6:
8e:fd:43:75:32:b1:0a:97:89:e2:2b:fa:c7:b3:37:89:dc:64:
dc:88:66:a9:00:46:99:2f:c2:6f:3f:27:c4:68:eb:24:17:b7:
da:62:88:b9:2e:74:1f:a2:18:06:39:1d:9e:ca:a0:62:24:91:
36:3e:d1:41:50:aa:83:76:df:b9:a0:bb:f2:cb:d2:5f:a1:fc:
5b:eb:b7:61:13:c8:89:e0:29:13:9f:96:a6:c2:40:14:d7:fe:
5b:3c:6b:8a:8f:82:64:9e:2d:bd:a9:a4:c6:8e:4a:3a:5b:1a:
a3:eb:3b:62:8c:9a:c2:90:36:e8:20:78:26:42:9b:4b:89:fb:
ae:2c:ef:76:f4:8a:a7:4f:de:fc:ce:07:ea:ad:56:23:0d:1c:
74:a3:0f:99:71:91:dd:34:63:c0:5e:69:53:1f:6a:70:90:6b:
b0:7a:51:2f:a8:13:0c:a2:93:b4:b1:32:1e:6f:f0:8a:6d:20:
da:b1:93:94:16:15:8a:e0:87:3d:70:d2:15:0e:af:9d:1a:8e:
7d:c6:57:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:16 2025 by rpki-client