Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/1-p6Ywg-c5_emAPcewXayW5iUP8.roa
File: 1-p6Ywg-c5_emAPcewXayW5iUP8.roa (raw, json)
Hash identifier: juMtfGurHl/7X9Lr5fNdtBbrxoXAHiVURxr46Cdk+R0=
Subject key identifier: D7:EA:7A:63:08:3E:73:9F:DE:98:03:DC:7B:05:DA:C9:6E:62:50:FF
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 0560235B
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/1-p6Ywg-c5_emAPcewXayW5iUP8.roa
Signing time: Sat 26 Mar 2022 16:38:36 +0000
ROA not before: Sat 26 Mar 2022 16:38:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90186587 (0x560235b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Mar 26 16:38:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d7ea7a63083e739fde9803dc7b05dac96e6250ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e2:29:3d:0f:cb:e9:01:6e:08:12:89:6b:1a:
f9:09:e4:29:eb:ab:a1:69:e7:f0:3c:b0:85:3b:eb:
1e:d4:79:e8:79:bf:27:ef:9e:b6:51:71:4c:27:41:
8e:d3:35:9a:7d:87:36:1f:31:b7:03:ff:cb:4c:76:
7b:6f:c3:4d:92:44:fc:ad:ff:b8:e0:a3:12:56:74:
ca:f5:82:44:72:80:c2:bd:db:11:32:ab:51:e3:44:
20:e0:0f:a6:90:1c:ca:54:80:18:db:34:bc:1e:9d:
c8:10:2a:d9:0e:33:1b:d6:80:ba:08:53:b6:c6:25:
c5:e9:89:c9:68:15:67:79:83:08:43:a2:57:23:38:
dd:43:d7:c6:9e:93:98:df:93:62:d4:17:5c:8e:26:
fe:44:1c:59:6b:13:d2:b8:66:f6:2e:2a:ef:d1:b7:
bd:f4:7d:8e:4a:16:5c:59:ce:9e:70:c5:5a:d3:26:
a8:d0:cb:8b:a1:c6:46:78:de:0d:68:73:2e:1c:4b:
29:c1:40:cf:06:32:8b:a0:1c:9a:47:e1:37:a7:2a:
6a:85:da:b3:69:8b:62:44:1e:fb:15:2a:0e:2e:e8:
16:f9:d9:8b:e2:e6:94:e7:ac:28:2e:3d:8f:a4:89:
5b:b5:b5:52:8c:1c:0e:95:97:15:b8:91:0a:a0:7b:
ed:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:EA:7A:63:08:3E:73:9F:DE:98:03:DC:7B:05:DA:C9:6E:62:50:FF
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/1-p6Ywg-c5_emAPcewXayW5iUP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
64:04:bb:e1:c3:77:37:61:e2:61:27:af:c7:90:03:bb:1f:d2:
a3:c1:cd:60:59:dd:10:4d:c1:d5:c9:23:5c:43:84:a2:d3:54:
78:90:94:6c:37:a2:59:ba:2b:51:7a:60:fc:4e:63:30:ec:b9:
09:1d:ea:a6:ff:75:b0:46:80:c6:bf:b3:76:51:96:74:a3:c0:
17:05:26:ad:45:44:7c:e6:8a:ee:e0:0d:fc:9e:4f:4e:53:02:
6f:cd:f8:ee:a4:1e:86:6e:73:16:d2:41:0f:56:6c:79:f4:c8:
4e:a5:cd:ac:a9:b2:38:5b:8f:52:74:0c:10:12:67:c6:97:e4:
72:74:ca:eb:88:a9:86:6c:27:4f:fc:82:90:7a:ba:5d:00:10:
68:8f:df:ed:7b:29:65:1d:0c:51:e6:ef:6e:f7:fe:89:96:a5:
dd:3f:01:a3:0c:c4:23:81:c6:59:11:59:54:38:f9:db:4f:38:
fa:f7:2b:6e:b7:8e:38:e5:e9:a7:83:14:ca:21:e5:76:f0:ae:
04:43:7f:52:be:39:77:21:6d:17:ef:c4:bd:ae:4f:c9:c8:43:
b5:6b:ad:55:90:8f:90:d2:de:7d:e6:d1:7f:4e:1f:d1:92:d3:
77:6c:b4:c0:5e:33:6e:1a:a5:b9:35:03:98:c0:27:01:9e:fe:
a6:fd:4d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:07:44 2025 by rpki-client