Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/3iGaexQVvKI8cj-KylKYvg3uuDg.roa
File: 3iGaexQVvKI8cj-KylKYvg3uuDg.roa (raw, json)
Hash identifier: BLkNx2pFI3uemyFir90awFs1B9CT/VN6hqELvTeB2Rk=
Subject key identifier: DE:21:9A:7B:14:15:BC:A2:3C:72:3F:8A:CA:52:98:BE:0D:EE:B8:38
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 064D2648
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/3iGaexQVvKI8cj-KylKYvg3uuDg.roa
Signing time: Thu 28 Apr 2022 01:43:58 +0000
ROA not before: Thu 28 Apr 2022 01:43:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105719368 (0x64d2648)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Apr 28 01:43:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=de219a7b1415bca23c723f8aca5298be0deeb838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ee:1c:2d:e7:5f:7b:b2:c0:16:89:a6:8d:4d:
0b:92:0a:7b:22:89:c2:51:32:f4:56:73:ab:0a:1d:
70:67:88:90:4d:74:b1:ea:24:73:11:5e:2b:a8:2a:
11:8d:70:d7:e8:b1:61:11:85:b8:d0:7b:7f:4f:25:
66:5a:1c:ec:98:fc:9b:48:7e:a4:7a:a8:fd:43:9e:
54:fb:a3:2d:76:b5:3f:cc:58:83:52:d1:36:0b:d4:
78:70:3e:3b:5c:ac:4f:7e:42:32:a3:24:f1:d9:ed:
47:1d:54:77:84:62:d0:d6:91:e1:9e:fa:ca:69:3b:
0d:e6:1d:01:89:b3:13:4d:60:ca:1c:ac:9c:f3:17:
2c:06:cf:fe:2f:19:dd:11:8e:bc:79:27:db:b0:12:
40:ef:c1:8e:b7:d4:08:0d:c0:bc:1c:5e:46:13:52:
fd:91:ac:ac:3b:6c:a8:9d:4f:d2:fa:77:63:77:da:
9d:cb:81:e8:82:7d:12:8e:82:1f:b8:3a:7e:3f:8c:
a9:57:21:35:fd:2d:1e:a8:46:63:9a:1d:cc:ed:fc:
ac:68:d5:14:da:24:99:ef:e1:b0:20:e6:ae:b7:c7:
82:bd:1f:6f:e5:f7:26:5b:63:b0:59:1d:88:1d:f9:
8c:36:77:c0:8a:d0:eb:f1:47:2e:be:ce:ed:2c:09:
0c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:21:9A:7B:14:15:BC:A2:3C:72:3F:8A:CA:52:98:BE:0D:EE:B8:38
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/3iGaexQVvKI8cj-KylKYvg3uuDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/24
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
aa:bd:92:33:78:7a:89:69:3d:ad:0e:2d:8b:e5:d6:35:48:5b:
e8:e7:48:58:93:e1:52:f6:6a:48:25:71:15:b3:ec:71:c5:a5:
cf:3e:4f:f6:33:a3:ce:d4:b0:51:56:6f:b6:52:d6:9a:14:95:
19:f5:5c:99:b4:03:f7:7f:96:75:e9:f1:c8:a6:82:c6:50:83:
bc:c3:eb:7e:82:3f:98:2b:e6:74:4b:a2:f8:c1:61:c1:07:0c:
6a:37:4b:f1:5b:12:43:71:5c:63:4c:ed:2f:4f:d2:11:22:41:
f3:20:ab:d4:68:aa:94:24:9e:dc:f0:b4:ad:bb:ef:e8:39:e7:
a4:dd:50:e9:6d:78:93:c7:53:4e:f6:61:ba:11:e8:99:22:b3:
d5:3f:bb:ce:ee:00:70:b9:9f:cc:98:f9:73:c5:bf:bb:4b:65:
af:af:06:d2:80:9d:ca:2b:24:6a:1c:d5:76:f4:80:53:6e:1e:
b6:4f:46:5d:14:8c:70:ff:f6:ab:4b:1e:e5:43:d0:72:d0:1c:
81:a9:d2:19:13:1e:bf:50:67:47:20:30:60:17:7e:a9:43:81:
b2:12:82:bc:40:8c:db:75:b4:ae:b3:a2:b4:38:9d:d9:09:c8:
09:c5:08:2d:22:4c:60:e8:c4:c6:95:fa:18:a7:7e:b8:e2:51:
36:d1:f1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:53:24 2025 by rpki-client