Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/2iM4UEdgKfDIBfujsLnYbR9Pe6o.roa
File: 2iM4UEdgKfDIBfujsLnYbR9Pe6o.roa (raw, json)
Hash identifier: pqIk/CNwdjLJIy/o3/pFEIXaeEhNebQUMV6k2tdNkow=
Subject key identifier: DA:23:38:50:47:60:29:F0:C8:05:FB:A3:B0:B9:D8:6D:1F:4F:7B:AA
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 08B8106B
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/2iM4UEdgKfDIBfujsLnYbR9Pe6o.roa
Signing time: Sat 18 Jun 2022 13:33:44 +0000
ROA not before: Sat 18 Jun 2022 13:33:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146280555 (0x8b8106b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 18 13:33:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=da233850476029f0c805fba3b0b9d86d1f4f7baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:70:7b:84:84:23:f4:a5:96:cc:e3:a2:38:a8:
2e:0d:0d:1e:6a:ea:fa:a3:c3:fb:94:7e:3d:55:90:
1d:47:5d:ac:48:14:33:26:db:c7:c1:05:06:ee:fd:
ee:81:a0:4f:1c:33:26:16:ad:38:bf:6d:70:be:69:
05:24:27:bf:6d:5e:3e:a5:63:7d:9c:4a:f8:ed:b2:
2f:4b:57:78:22:b3:35:52:0e:c0:50:63:e0:38:78:
75:70:50:5b:a9:ac:d8:97:d8:9c:dc:28:be:86:ab:
60:a7:68:73:cd:04:24:44:2b:42:b0:d0:1c:a7:5c:
8a:0b:1e:08:dc:60:77:57:b9:d8:84:8d:09:dd:0a:
c9:17:1d:83:c5:56:c5:e6:48:1c:56:33:5c:da:e4:
22:23:ad:d4:3c:ee:89:5c:2f:04:b4:59:27:f6:58:
cd:90:35:c8:06:75:9a:cc:4e:8f:75:72:dc:3f:48:
f9:d1:4d:bb:56:ba:6f:aa:c6:47:eb:ed:2f:9a:85:
08:6a:a2:c2:2d:bc:23:04:8e:45:88:f8:c7:01:57:
e6:36:2b:31:37:51:38:28:1b:3c:69:20:cc:7a:97:
50:8c:b7:b5:84:c7:e8:5c:7b:8d:bb:a8:d2:36:b4:
34:64:cd:05:64:01:b5:c1:be:9d:77:00:eb:b8:89:
4e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:23:38:50:47:60:29:F0:C8:05:FB:A3:B0:B9:D8:6D:1F:4F:7B:AA
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/2iM4UEdgKfDIBfujsLnYbR9Pe6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
3a:72:24:9e:6b:f9:7f:d0:2d:bd:51:48:26:88:ec:fb:9b:5e:
b8:ab:c1:f7:0c:c6:de:28:79:06:d2:ff:b9:c0:1b:37:6d:5c:
ea:5e:a0:d7:c2:37:25:34:ec:f4:1e:25:34:a4:38:9d:86:0c:
bd:49:a4:4e:bd:de:c6:36:72:35:6e:17:81:cf:df:e5:3c:29:
99:a5:04:0c:ab:b1:bf:11:b3:e2:76:06:d0:a0:48:6d:68:fc:
c4:10:7f:34:56:01:e5:64:8d:04:fb:23:98:5c:fe:aa:57:dd:
b7:ac:00:8c:9f:12:10:48:f8:cc:79:64:53:99:b9:a8:3f:4f:
9d:70:d2:4c:7d:94:36:f3:3a:e9:07:0c:3e:ea:f6:7d:8a:c9:
ea:9f:e4:33:49:70:43:af:07:65:50:2c:52:32:c9:fd:cd:2a:
70:01:1e:7c:e6:09:28:95:80:32:38:56:c0:58:56:c0:55:8c:
25:25:13:2d:0b:99:57:b6:cf:0c:25:3d:ef:16:28:7d:4d:7e:
42:90:67:d4:12:34:44:d8:10:1e:eb:3b:cc:6e:eb:73:3d:58:
96:51:d3:05:97:fc:89:3b:af:90:3a:50:1c:1a:e9:fa:7c:49:
a0:f7:33:aa:c8:04:30:f5:90:74:ae:e0:5c:43:3d:da:94:22:
54:61:4a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:51:05 2025 by rpki-client