Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/3C6UDPN9xEoaKAJMlYeTb4Ohl_M.roa
File: 3C6UDPN9xEoaKAJMlYeTb4Ohl_M.roa (raw, json)
Hash identifier: 7MB1mjLR1U4n7iqGGsBQziRC3WYLkZOlSPod5qvR2nU=
Subject key identifier: DC:2E:94:0C:F3:7D:C4:4A:1A:28:02:4C:95:87:93:6F:83:A1:97:F3
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 068101C1
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/3C6UDPN9xEoaKAJMlYeTb4Ohl_M.roa
Signing time: Fri 06 May 2022 00:51:17 +0000
ROA not before: Fri 06 May 2022 00:51:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109117889 (0x68101c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: May 6 00:51:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc2e940cf37dc44a1a28024c9587936f83a197f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6f:75:cf:ff:37:34:35:a2:25:b5:5c:f6:99:
7d:36:09:3f:94:15:d3:a3:77:16:20:52:db:c5:ec:
5a:fe:7c:b3:fa:a8:78:07:3a:31:9f:d6:57:2f:45:
10:29:9f:90:db:c2:f7:a3:d4:47:1d:a6:8d:c6:d8:
31:7d:9d:12:8a:2c:08:1a:74:45:a2:7d:f5:ae:c8:
a6:10:d4:97:c9:23:c2:b3:7f:53:39:c4:3b:29:2f:
f8:82:2b:11:e1:38:95:fa:ce:42:17:b6:35:3e:2c:
05:0f:e2:d6:c3:45:3d:0f:8c:3d:4e:0f:94:37:c5:
34:4b:25:d4:9e:20:78:22:ea:2b:ec:ac:7f:e2:27:
96:d1:ca:aa:4c:83:38:48:fa:6f:c6:0c:51:cd:71:
13:96:bb:67:41:5c:3e:ef:11:0a:2e:a5:e0:b2:48:
76:d5:48:8d:be:52:68:23:9e:e4:29:36:b4:e0:04:
f8:57:60:c2:03:ce:13:05:34:1e:da:53:35:92:c8:
6a:ea:f6:bb:3c:4e:8c:7e:b3:6f:a4:09:7a:1d:b3:
52:df:d2:98:08:9e:f6:04:2e:96:b0:a3:7f:4f:a1:
32:d3:9b:7c:24:92:21:54:c4:f1:a2:66:fb:7d:0c:
d7:38:7b:40:de:d6:ba:11:35:c2:6c:38:6b:21:56:
6c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:2E:94:0C:F3:7D:C4:4A:1A:28:02:4C:95:87:93:6F:83:A1:97:F3
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/3C6UDPN9xEoaKAJMlYeTb4Ohl_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/48
Signature Algorithm: sha256WithRSAEncryption
43:c1:f9:f7:a4:d3:bc:f6:cf:01:98:ba:36:46:43:f0:4c:f3:
90:43:4f:79:a6:a7:88:90:a3:03:bd:5e:38:ed:96:69:5e:2c:
9a:26:00:61:8d:82:f3:2b:2b:92:a3:bc:17:9c:1f:b9:01:e2:
f6:33:0e:33:ea:e6:b9:a1:ec:98:da:87:9a:02:09:bc:59:73:
a0:cb:2d:4c:61:9f:c6:28:c0:df:fb:c0:c3:29:c9:50:c9:91:
ce:36:dc:ee:e9:26:cc:a3:b3:ae:12:d1:7b:23:6e:34:0c:d7:
0e:f8:df:c4:ee:be:bf:a6:b1:41:85:9f:f0:a0:df:2e:76:52:
59:25:66:b3:29:5d:24:25:74:0a:97:80:30:e2:79:be:a4:0d:
4c:6a:f6:7f:75:30:5c:3a:0c:db:00:6e:d4:79:0a:5d:c5:4f:
1a:b7:bc:38:4f:2d:2c:81:d2:1c:d2:56:6a:51:75:04:dd:dc:
65:33:d0:58:ff:6d:6f:a8:52:e6:f7:ff:f9:83:f0:7e:49:1b:
48:da:fc:80:ef:17:32:ed:d5:c1:d0:28:15:0f:ca:c5:08:1e:
56:39:f2:80:17:05:d8:33:c0:5e:ba:dc:28:75:b1:a3:e0:80:
7b:91:e3:06:e1:b1:45:2f:81:09:bc:88:40:cb:c4:fe:2d:d7:
68:98:2a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:59:48 2025 by rpki-client