Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/1RPAZ4166I3pJnkCjYnef5q2E70.roa
File: 1RPAZ4166I3pJnkCjYnef5q2E70.roa (raw, json)
Hash identifier: IFI2oj67/or3gBHGyIXAU/d4B9ZeCNDnlTgfFpsc9xw=
Subject key identifier: D5:13:C0:67:8D:7A:E8:8D:E9:26:79:02:8D:89:DE:7F:9A:B6:13:BD
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 06750028
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/1RPAZ4166I3pJnkCjYnef5q2E70.roa
Signing time: Wed 04 May 2022 04:30:37 +0000
ROA not before: Wed 04 May 2022 04:30:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108331048 (0x6750028)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: May 4 04:30:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d513c0678d7ae88de92679028d89de7f9ab613bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a7:bc:7f:9a:53:70:6f:50:05:f5:0b:5f:6a:
19:ac:b4:6d:1d:47:50:63:ab:88:28:a6:88:b5:14:
bb:94:d3:d7:aa:09:7e:66:28:81:96:f8:df:e6:8b:
7a:84:40:7a:f3:76:60:2d:82:b5:f3:f7:89:fa:53:
87:4c:f8:21:ea:fd:d8:b1:ab:af:95:c8:10:cc:f3:
70:c1:49:ac:38:10:7e:2c:d1:4a:24:5a:c6:29:ef:
be:9a:21:2d:13:d7:e0:6a:9e:d1:5b:13:69:83:ec:
7a:4c:ee:83:b1:eb:a9:e4:c9:ae:c0:cf:95:27:c4:
c3:bd:6b:07:ca:0d:2d:72:38:00:3c:f9:18:65:13:
bd:c4:f4:f2:29:50:4f:01:7a:c2:8d:88:15:2f:3b:
77:3f:5c:0f:3e:d3:0b:42:c5:a9:58:f3:be:c7:7d:
05:24:b5:9f:65:02:e8:98:13:c2:7c:19:42:3c:19:
d5:83:7f:b0:5c:92:38:00:2b:3b:24:c6:23:06:22:
42:19:47:4d:cc:7f:28:ff:ab:58:79:b9:0a:a0:24:
bd:98:34:ab:0e:8d:eb:45:f1:e1:cb:c5:65:f9:c4:
c2:88:4d:c3:9f:cc:6c:6c:1b:e0:c6:37:9b:e2:ea:
0c:22:c2:5c:b0:10:dc:72:4c:7d:34:6d:f9:5d:33:
0c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:13:C0:67:8D:7A:E8:8D:E9:26:79:02:8D:89:DE:7F:9A:B6:13:BD
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/1RPAZ4166I3pJnkCjYnef5q2E70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
3f:dd:86:04:47:27:7e:46:bf:fa:d1:b9:de:ab:37:15:54:83:
c7:df:bc:76:16:b1:ed:e1:b0:94:88:b2:e2:18:5e:2e:07:0a:
03:86:48:86:1c:70:50:c5:61:7f:fb:0b:d9:05:0d:94:7c:ea:
75:77:1a:50:43:19:1c:bc:81:9f:54:93:a3:6e:09:ba:40:94:
ce:67:26:34:a7:e9:34:9e:37:75:09:75:25:f8:bc:a7:97:87:
20:34:ee:47:61:19:5f:70:ca:32:48:f9:1f:30:44:0b:44:b7:
c8:ac:aa:c1:4d:26:da:76:fb:49:a6:79:28:dc:de:b5:a4:bc:
12:45:7d:d7:ab:b4:a0:4e:a5:93:04:50:38:4c:71:d2:92:52:
3c:e0:80:60:96:d0:00:d3:3c:a9:9c:75:cb:9b:18:f3:1a:55:
f1:37:70:bf:1a:b4:50:ef:b7:18:dd:f9:10:22:d0:ae:76:2c:
1f:35:3c:5e:9d:bb:89:fd:23:36:5b:12:5c:f6:45:1b:3b:53:
7b:68:50:a0:ba:4e:4a:73:fb:56:42:c4:08:79:a6:ed:86:26:
02:da:b4:d2:d4:9d:95:fb:50:2d:c8:6d:20:9c:81:3c:f5:3d:
69:18:13:c7:b4:ce:65:25:2b:82:65:1a:cd:a8:84:eb:15:08:
3a:75:ee:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:36:35 2025 by rpki-client