Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/13Xqnl_Ikuft1me7iW5zGrSjcr8.roa
File: 13Xqnl_Ikuft1me7iW5zGrSjcr8.roa (raw, json)
Hash identifier: tIPfpIkAGsCxiN1oVYt/h6XbSWPKz5OtaRYsm6Tfeqs=
Subject key identifier: D7:75:EA:9E:5F:C8:92:E7:ED:D6:67:BB:89:6E:73:1A:B4:A3:72:BF
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 06650900
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/13Xqnl_Ikuft1me7iW5zGrSjcr8.roa
Signing time: Sun 01 May 2022 02:50:53 +0000
ROA not before: Sun 01 May 2022 02:50:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107284736 (0x6650900)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: May 1 02:50:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d775ea9e5fc892e7edd667bb896e731ab4a372bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:63:ac:74:75:35:ec:6a:c2:32:26:44:5f:9f:
ab:f7:4f:38:4c:3f:41:0e:e6:b4:24:8a:bc:8f:f1:
68:d2:86:01:71:64:fc:68:06:7b:37:3e:98:20:1f:
93:cb:f7:6d:f4:8d:8f:e1:0e:56:a7:cb:f6:ef:5e:
13:67:b2:29:72:1d:c2:2e:89:bf:41:ab:74:4e:08:
50:35:b9:a0:ad:61:a2:82:1c:3f:8d:b9:35:ac:19:
da:72:19:61:7a:5a:f0:f1:0e:3e:eb:91:59:43:d6:
21:3b:e5:98:dc:cd:a1:69:e1:f8:39:bf:e0:95:8c:
e8:3b:e3:63:cc:7e:ee:ad:95:0b:58:69:24:69:02:
ea:77:36:66:30:ac:4c:d7:67:fc:ca:06:b0:f5:e4:
ec:a0:1b:b5:f5:30:a8:02:bf:30:6a:ad:53:1b:9b:
cf:66:2b:f3:99:15:ef:f6:22:36:02:75:61:a8:52:
07:6e:8d:8e:7b:1a:52:37:5d:36:16:3e:35:03:71:
fa:45:fa:fe:d7:ab:30:e7:e3:a8:e9:09:5e:bb:ea:
83:d2:f4:53:e3:1f:fc:4c:f7:7e:3f:41:98:7d:11:
56:4e:85:e7:b1:e0:90:dc:63:bc:9b:44:d7:39:c5:
18:d3:40:ed:02:14:f0:b0:4c:91:71:f8:0f:8b:38:
c1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:75:EA:9E:5F:C8:92:E7:ED:D6:67:BB:89:6E:73:1A:B4:A3:72:BF
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/13Xqnl_Ikuft1me7iW5zGrSjcr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
2b:7d:14:83:95:14:da:14:5b:de:af:f7:d2:3f:1f:5b:38:22:
38:49:70:5c:a9:b2:2f:84:2d:cf:8e:d8:cd:bf:bc:3c:6c:55:
cb:74:65:f1:91:d5:2c:b6:26:0c:6c:7f:4f:7d:30:50:e3:5e:
32:f7:8d:97:92:ab:84:65:31:06:8a:3a:8b:3b:d8:c8:85:1a:
9c:36:07:01:25:a1:32:9f:fb:cb:7f:ba:f1:33:a8:9d:c0:19:
25:85:22:d4:03:9d:27:f6:64:36:20:9d:94:38:db:1b:5c:45:
86:58:1d:89:73:a1:66:5b:48:b5:b0:02:f0:e8:a6:ac:a7:0c:
d3:6b:19:85:42:5f:16:be:f5:ed:00:2f:ae:5e:04:a9:a4:78:
91:a4:ee:5f:13:b0:79:20:1e:7e:51:8b:51:6c:cd:24:23:8d:
5a:0e:7c:ea:49:b2:ae:32:71:aa:7c:72:0f:d4:67:d4:24:cf:
da:d2:d9:70:08:3f:f9:33:44:76:c6:9a:02:76:ff:cb:08:63:
d6:41:da:24:01:b3:33:05:e7:bc:a5:54:7f:10:85:20:16:74:
d5:cb:df:80:59:2d:22:ed:e2:b4:c0:9c:eb:f0:fe:78:d8:f6:
a4:85:e9:6f:53:a1:d8:21:ec:ef:56:80:3b:29:07:25:77:01:
ac:50:b3:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:05 2025 by rpki-client